Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: XXGtQm8KK4qfcGiPok7RkGkZj0OU4wK3u5XRLPnWzE0=
Subject key identifier: E5:DA:99:6C:95:38:78:EA:79:FD:60:61:C0:CB:20:19:6E:33:11:23
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019D992AFD7ED781CD6B65DABF899B53DFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 0703
Signing time: Fri 17 Apr 2026 02:00:24 +0000
Manifest this update: Fri 17 Apr 2026 02:00:24 +0000
Manifest next update: Sat 18 Apr 2026 02:00:24 +0000
Files and hashes: 1: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: QgjiGIW6PActcuNOA7pSYzKf5tJnCgeEOTqIXsJOy50=)
2: esJRIVKiV99xgmszXdUIvBUcR4c.roa (hash: oiCTzvqGfHuD5NTI//w9jSaRVTcBCrOg8Oov3qUBvS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:fd:7e:d7:81:cd:6b:65:da:bf:89:9b:53:df:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Apr 17 02:00:24 2026 GMT
Not After : Apr 18 02:00:24 2026 GMT
Subject: CN=e5da996c953878ea79fd6061c0cb20196e331123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:e7:c8:7c:fa:0c:d8:c0:ab:ec:30:aa:f1:
e6:48:b1:1f:3a:88:02:57:8a:2c:37:dc:47:ac:b9:
5f:4f:c2:72:78:2c:78:17:09:59:5b:39:a8:ba:28:
4f:57:e5:f4:94:d2:fe:1d:40:dd:72:d1:19:2d:e0:
b4:ff:67:6f:c2:e2:61:6f:87:15:7f:37:c0:fd:bd:
00:29:64:5c:f0:c3:7e:4d:bf:a5:0a:48:3d:59:37:
01:95:70:47:c7:8a:bb:68:52:ee:47:f2:ae:df:65:
bb:47:45:43:1b:0b:d5:26:56:8d:36:49:b1:f3:0c:
43:db:fa:b4:06:87:7d:4d:ab:20:e3:58:a8:ec:61:
98:00:fe:57:72:a5:84:ef:23:27:eb:ab:5a:27:8a:
fd:2d:7b:3c:11:d0:11:fa:08:e0:4e:71:43:3a:2b:
16:74:b0:a6:52:cd:bb:68:9e:f8:80:bc:52:c2:07:
85:27:67:03:97:fd:27:ed:9e:2e:19:6e:ca:f1:ca:
67:2f:48:ab:64:43:ff:08:df:c9:02:16:65:d6:8b:
db:9c:14:cd:17:f3:3c:4a:43:39:51:2e:fc:6c:73:
43:7a:b8:cf:12:34:cc:ce:15:3e:9d:e0:1d:c1:d3:
fb:9f:92:6f:b1:ff:85:c6:c9:6f:46:07:ad:e3:2f:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DA:99:6C:95:38:78:EA:79:FD:60:61:C0:CB:20:19:6E:33:11:23
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:92:7c:9c:7c:b5:8b:ed:fd:91:a6:89:70:9e:d1:ac:d0:fa:
f3:98:62:b7:64:e9:e4:57:12:d4:ca:94:10:57:ff:44:83:6b:
97:c3:5d:85:d1:73:33:a9:42:c2:b8:79:df:49:00:10:ec:67:
f8:02:58:bc:7a:59:de:36:d0:3e:6d:b0:46:df:34:86:64:e1:
70:1a:a8:f6:7f:0a:ae:73:9e:a8:24:ab:c7:47:b0:c6:ec:73:
35:3e:c1:c1:06:ae:7b:6d:5e:57:3c:e6:77:56:09:48:86:da:
aa:34:45:13:70:85:6a:cf:c4:67:d3:fb:f9:f2:6c:db:6a:74:
2f:88:b8:d9:c1:44:30:4f:1a:1a:91:91:83:72:5d:f4:b6:da:
8d:57:8c:eb:ff:a7:4a:3b:f2:71:54:71:7b:0f:09:5c:36:46:
2a:df:ab:b3:ac:a5:c9:b6:2c:8b:5e:6f:bd:1f:10:44:2e:01:
76:33:3f:70:7d:00:46:5d:df:4c:68:f2:38:10:02:03:c0:83:
ac:ab:ab:4e:3a:5a:4c:8c:8e:27:9e:7e:bf:1b:80:4b:2a:2b:
d8:78:a2:9f:e7:7b:be:1f:b3:aa:47:7c:10:3e:6d:9c:ec:c6:
9f:be:26:95:03:60:e3:a9:24:59:69:11:a0:94:29:c6:b4:7c:
fb:73:8e:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKv1+14HNa2Xav4mbU9+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDVkN2M3YmU5MTI2NTBkNzE0MjNjZDNjMjUxNmRhOTQw
OWVkYjYwHhcNMjYwNDE3MDIwMDI0WhcNMjYwNDE4MDIwMDI0WjAzMTEwLwYDVQQD
EyhlNWRhOTk2Yzk1Mzg3OGVhNzlmZDYwNjFjMGNiMjAxOTZlMzMxMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGbnyHz6DNjAq+wwqvHmSLEfOogC
V4osN9xHrLlfT8JyeCx4FwlZWzmouihPV+X0lNL+HUDdctEZLeC0/2dvwuJhb4cV
fzfA/b0AKWRc8MN+Tb+lCkg9WTcBlXBHx4q7aFLuR/Ku32W7R0VDGwvVJlaNNkmx
8wxD2/q0Bod9Tasg41io7GGYAP5XcqWE7yMn66taJ4r9LXs8EdAR+gjgTnFDOisW
dLCmUs27aJ74gLxSwgeFJ2cDl/0n7Z4uGW7K8cpnL0irZEP/CN/JAhZl1ovbnBTN
F/M8SkM5US78bHNDerjPEjTMzhU+neAdwdP7n5Jvsf+FxslvRget4y/kXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXamWyVOHjqef1gYcDLIBluMxEjMB8GA1UdIwQY
MBaAFDrV18e+kSZQ1xQjzTwlFtqUCe22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYt
MWM2M2RhY2FiZGU5LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYtMWM2M2RhY2FiZGU5
LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJJ8nHy1
i+39kaaJcJ7RrND685hit2Tp5FcS1MqUEFf/RINrl8NdhdFzM6lCwrh530kAEOxn
+AJYvHpZ3jbQPm2wRt80hmThcBqo9n8KrnOeqCSrx0ewxuxzNT7BwQaue21eVzzm
d1YJSIbaqjRFE3CFas/EZ9P7+fJs22p0L4i42cFEME8aGpGRg3Jd9LbajVeM6/+n
SjvycVRxew8JXDZGKt+rs6ylybYsi15vvR8QRC4BdjM/cH0ARl3fTGjyOBACA8CD
rKurTjpaTIyOJ55+vxuASyor2Hiin+d7vh+zqkd8ED5tnOzGn74mlQNg46kkWWkR
oJQpxrR8+3OOlw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:47 2026 by rpki-client