Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: kUlHWd5fZNzKGoH60GO8ESNFG/VGYUVIOWXVYPwjHcE=
Subject key identifier: 12:C6:81:28:CE:23:A4:FC:A3:E8:F1:31:67:91:51:34:5B:9D:FC:F8
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019FAC07FB09D965756FD613BB5140110B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 04:00:31 +0000
Manifest this update: Wed 29 Jul 2026 04:00:31 +0000
Manifest next update: Thu 30 Jul 2026 04:00:31 +0000
Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: EI0xXBTcctZMb5FSIRwFu487uRypKTmIwixSQDJvk7M=)
2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:fb:09:d9:65:75:6f:d6:13:bb:51:40:11:0b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jul 29 04:00:31 2026 GMT
Not After : Jul 30 04:00:31 2026 GMT
Subject: CN=12c68128ce23a4fca3e8f131679151345b9dfcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:93:5b:26:eb:67:f2:e3:9f:68:ea:1b:78:
52:ef:ff:a2:0b:21:93:e3:da:f5:d7:f2:88:51:21:
aa:b3:88:92:22:5c:10:9e:a1:cd:2d:ad:5a:f1:f9:
c0:7d:34:97:26:e1:cf:ae:d3:41:5d:ac:fd:14:ff:
57:79:8e:fb:41:50:5b:19:44:b6:99:92:92:86:d2:
4b:8c:94:bb:5a:4f:5d:e9:a1:6e:a0:02:dd:e5:4f:
95:f2:26:26:78:3c:28:7a:b7:c5:bd:21:96:f9:66:
42:58:ab:3a:33:67:0f:4e:10:cd:e5:c9:d0:a5:a6:
d5:2a:6d:bb:c8:de:75:ed:b9:b4:b0:77:b3:8c:d7:
31:6d:e7:aa:92:53:90:51:f7:ce:c8:7f:00:86:c1:
ac:7c:6f:cd:48:6b:21:ab:2c:fd:a3:4b:ce:2f:cc:
dc:86:81:92:a0:f1:df:f1:d7:68:40:b4:62:22:49:
7c:c8:92:d7:56:f2:83:87:aa:67:ba:35:94:3e:f0:
7d:32:6e:32:df:58:2a:41:24:04:0e:67:25:01:ab:
18:df:ce:8d:af:8c:cb:27:bf:7f:82:36:d1:79:7e:
37:a8:12:67:47:06:9d:cb:f6:a9:c4:43:d9:7e:ab:
7a:44:0c:c9:fe:e8:2a:2d:98:28:d1:86:73:33:ed:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C6:81:28:CE:23:A4:FC:A3:E8:F1:31:67:91:51:34:5B:9D:FC:F8
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:18:18:2b:6a:77:da:0b:07:9e:8a:a1:13:fe:aa:09:96:d2:
70:6c:72:01:58:47:79:a5:25:79:04:5b:12:67:db:6d:43:b5:
bb:3c:5b:86:63:29:80:1f:2a:0a:73:d8:da:67:69:41:2a:90:
e8:50:34:cb:db:56:68:62:3a:a8:eb:c4:a6:e2:76:ed:06:a9:
8a:6d:16:dd:01:a1:63:8d:dd:a7:3e:c4:bc:0a:ef:d6:51:c9:
81:48:90:ba:73:2e:7f:d3:63:33:ef:f9:3a:ae:f1:ac:62:70:
bb:80:37:c8:9b:85:f8:2e:3b:f6:11:99:fe:f3:d4:0c:db:15:
e2:11:a4:73:3c:81:36:28:71:3b:8a:5f:e7:53:48:b5:4b:bc:
a8:7d:c2:01:6f:4c:ab:b2:66:28:22:09:28:12:dd:82:b9:f9:
e6:e2:6b:2b:d6:47:83:38:54:75:7b:43:3c:04:99:16:fb:9e:
b9:c3:13:b8:43:83:3d:e8:80:68:cf:67:24:4d:ca:62:31:ff:
d2:bc:a7:0b:f7:43:e1:2e:95:04:d5:49:d1:5e:10:56:fb:76:
8d:27:13:4f:a8:97:6a:ca:31:13:c0:fd:5d:bd:1d:f2:51:01:
12:cf:ce:00:a8:39:52:b7:a1:9c:10:c7:3f:42:aa:4a:4e:93:
94:26:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:21:24 2026 by rpki-client