Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: Xe3pcQN3usj4e15K/imf0Oev8Zltl8xhV1PMOjpbbD4=
Subject key identifier: C8:0F:F4:58:5B:77:DE:06:3F:DF:28:E6:53:CF:08:F5:56:42:28:85
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019ED507A98D69ED645DFDD837B9F6F785C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 07A7
Signing time: Wed 17 Jun 2026 10:01:49 +0000
Manifest this update: Wed 17 Jun 2026 10:01:49 +0000
Manifest next update: Thu 18 Jun 2026 10:01:49 +0000
Files and hashes: 1: K3GXZRRYi_WwtkyMkhtUs_oaIEU.roa (hash: 7xWm5vmFHcwrGZ0rwDT2McSScZ+s+zumGsB6jff1aek=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: nXD6/G/R+6HtzZCieYG/l+5hunSGzboCqUoBH94GYik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:a9:8d:69:ed:64:5d:fd:d8:37:b9:f6:f7:85:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Jun 17 10:01:49 2026 GMT
Not After : Jun 18 10:01:49 2026 GMT
Subject: CN=c80ff4585b77de063fdf28e653cf08f556422885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:c5:d5:6b:ed:87:8b:d3:f4:05:66:63:4f:
e0:ca:b7:4d:61:a9:7a:b5:d9:95:69:c4:a9:33:0b:
d6:84:52:01:40:0d:cf:c9:eb:d3:3d:aa:8b:52:a8:
a8:f6:5f:71:67:7a:7a:66:49:62:00:11:4b:9f:2a:
ce:d7:f0:00:70:f7:06:61:b0:79:b3:ad:bd:96:26:
46:a4:9e:31:d5:ad:0f:26:ab:29:24:e7:a5:5e:ec:
4b:8f:98:a6:2b:27:4a:7a:fd:e3:8e:cc:35:2e:24:
53:2c:e5:51:b6:1d:f7:1f:8c:d3:3f:74:e2:44:c6:
3d:81:08:ca:76:7d:3d:7a:71:a2:db:3e:5d:cc:57:
52:70:1a:60:8a:fa:b9:33:b9:e2:d4:29:ab:bb:af:
d0:37:bc:6c:fe:53:6c:a1:e7:dd:2c:e0:50:00:45:
c2:63:b8:65:59:1a:9e:8c:de:d0:d0:6d:7d:c7:01:
a1:96:de:f2:ee:fc:39:e6:33:12:a3:c7:8f:ac:87:
3c:5b:99:2b:a5:e2:18:8e:b2:14:b7:3b:e1:e2:24:
47:56:4b:df:58:98:71:e0:d5:8a:13:c1:ba:5e:9f:
17:19:2d:f1:1a:ae:4a:be:70:f4:eb:c4:13:50:85:
b9:84:ad:b7:3b:48:61:95:4b:92:83:b8:ef:fa:e0:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0F:F4:58:5B:77:DE:06:3F:DF:28:E6:53:CF:08:F5:56:42:28:85
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2d:70:23:ce:21:31:76:d5:9e:37:44:d2:56:9b:8f:dd:2e:
c9:fb:99:64:4b:c4:65:60:56:bf:9b:68:05:b2:84:2c:01:8a:
4f:8f:c9:9c:00:aa:21:a4:4e:82:d2:08:1e:27:eb:3a:46:87:
9b:6a:6a:03:8d:06:11:e5:a3:50:01:e2:2e:d1:a2:5d:91:be:
10:2f:0a:67:83:d9:53:2a:29:16:c4:4b:a6:c5:b0:65:73:72:
cc:06:7b:a0:f0:2f:98:cd:1b:e4:00:cb:0d:d8:fe:cf:ae:4a:
a5:ab:56:26:57:cd:ce:27:b6:f4:24:f6:f8:d4:47:99:a2:5e:
5c:20:a7:07:42:09:bf:31:bc:f9:45:7c:77:48:13:6a:92:fa:
cc:6f:b1:5a:a9:e3:ad:34:8b:e6:a1:90:ee:55:94:98:f8:1d:
ba:48:2f:1f:eb:06:e1:c9:4d:34:c5:1c:26:27:68:66:b1:fb:
8f:44:83:b2:92:c5:d8:09:5a:18:5a:a4:0f:c9:00:52:41:3d:
8e:cc:9e:57:32:49:c6:ad:d4:de:e8:f2:29:9b:26:01:c3:bc:
3d:c4:b6:d9:82:52:c0:b6:b9:f3:7d:dd:f8:b0:79:0b:8b:70:
7f:b2:90:8b:8b:96:30:90:b0:8e:3d:3e:c0:fa:99:d2:35:86:
de:07:95:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:47:37 2026 by rpki-client