Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: bxEIUHncHxwzL/P6E/KkVBC2e2VGvMoYuid7EFDa+zA=
Subject key identifier: 08:E5:0C:4B:69:B9:1B:E2:E8:1E:63:64:2A:A3:DA:41:3A:50:EA:4D
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019ED3189D2C4BCC1B2A6144D273D2BE1688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 07A6
Signing time: Wed 17 Jun 2026 01:01:06 +0000
Manifest this update: Wed 17 Jun 2026 01:01:06 +0000
Manifest next update: Thu 18 Jun 2026 01:01:06 +0000
Files and hashes: 1: K3GXZRRYi_WwtkyMkhtUs_oaIEU.roa (hash: 7xWm5vmFHcwrGZ0rwDT2McSScZ+s+zumGsB6jff1aek=)
2: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: r9auQ1iL0iXzbzc8jYpTmtQNl6rIqA5i+lJS7BwQtWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:18:9d:2c:4b:cc:1b:2a:61:44:d2:73:d2:be:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Jun 17 01:01:06 2026 GMT
Not After : Jun 18 01:01:06 2026 GMT
Subject: CN=08e50c4b69b91be2e81e63642aa3da413a50ea4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:a7:3a:05:5c:fb:1d:5b:57:29:9c:e5:6a:
b9:71:30:98:7e:e5:84:69:e1:e3:91:65:5d:c8:87:
af:6c:3d:b4:c0:94:6a:19:60:e6:70:97:f2:40:7d:
95:7d:c2:e1:08:f2:f4:1b:d1:d7:5f:22:e2:92:00:
01:b8:5c:b9:ec:74:9e:f3:39:e3:f4:b9:2b:98:7c:
2f:f8:03:1c:42:74:0b:b4:a7:e1:d9:55:70:17:2b:
e8:29:2f:77:55:c0:a1:4c:29:d5:a7:ab:48:1c:d5:
20:ae:d9:85:b4:4f:4c:f8:00:3d:fe:da:5b:09:22:
6f:12:05:0f:f2:d5:06:66:49:fd:8e:f4:a0:a8:92:
fe:1d:9f:da:2d:fa:73:06:96:33:35:38:b9:fb:5f:
32:a4:d8:74:a0:a9:99:96:77:b0:69:c5:25:83:bb:
98:3e:7e:ce:c7:34:9d:4c:9e:78:4e:d1:97:30:7c:
e6:70:58:34:e1:78:c5:62:81:e8:39:b3:79:29:46:
10:97:61:62:7a:9a:59:23:65:7e:e1:4a:5c:ff:b6:
c9:fe:3f:21:25:ef:47:57:49:1b:ba:ee:99:d7:61:
00:e7:38:97:d9:00:70:0d:42:f8:cd:64:ae:c4:96:
7d:1d:89:5e:a5:c5:be:7a:b0:ed:f1:e3:6c:c0:f2:
2d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E5:0C:4B:69:B9:1B:E2:E8:1E:63:64:2A:A3:DA:41:3A:50:EA:4D
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2a:bc:65:9e:a6:59:11:90:6b:aa:6d:84:38:eb:ba:70:0f:
88:ce:2c:19:09:d9:aa:33:07:0d:f8:95:93:5f:a8:41:3a:d7:
6f:d9:48:8f:47:8f:6e:00:55:f7:62:1c:06:6d:c7:76:f3:aa:
c5:a7:9e:0b:cf:73:c6:ff:01:2b:c2:f6:53:01:45:ec:0c:3f:
5e:b0:63:c5:d4:bf:03:ff:90:e4:0e:b7:a1:6f:27:d5:1c:86:
0d:d7:55:ad:d5:c0:7b:f4:15:17:c1:bd:5f:a7:e1:3a:e5:66:
3c:ce:56:38:51:39:da:73:60:6f:b2:f3:b2:66:fd:fe:cc:59:
b9:0f:d7:07:28:9a:6f:dd:a0:5d:1d:ca:72:8f:c1:71:6c:7b:
40:3d:22:bf:1c:5c:b1:87:fa:e1:70:c2:08:a4:fa:13:d5:ac:
e3:2f:eb:16:9d:45:9a:6f:d6:a7:00:c8:98:77:b3:45:53:c4:
4d:b2:d3:ae:d1:c8:06:64:ef:b1:73:a6:4f:1b:ff:70:61:cf:
c7:34:78:b1:6f:f1:f8:19:e6:74:49:7e:a8:9b:0b:d0:a3:cf:
77:55:25:9d:4f:ce:93:b7:70:12:c8:28:ae:0e:11:71:22:a9:
33:6d:22:8f:82:1b:10:d8:24:5c:08:f2:b1:37:d8:c5:ed:83:
35:4e:7a:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGJ0sS8wbKmFE0nPSvhaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDVkN2M3YmU5MTI2NTBkNzE0MjNjZDNjMjUxNmRhOTQw
OWVkYjYwHhcNMjYwNjE3MDEwMTA2WhcNMjYwNjE4MDEwMTA2WjAzMTEwLwYDVQQD
EygwOGU1MGM0YjY5YjkxYmUyZTgxZTYzNjQyYWEzZGE0MTNhNTBlYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3anOgVc+x1bVymc5Wq5cTCYfuWE
aeHjkWVdyIevbD20wJRqGWDmcJfyQH2VfcLhCPL0G9HXXyLikgABuFy57HSe8znj
9LkrmHwv+AMcQnQLtKfh2VVwFyvoKS93VcChTCnVp6tIHNUgrtmFtE9M+AA9/tpb
CSJvEgUP8tUGZkn9jvSgqJL+HZ/aLfpzBpYzNTi5+18ypNh0oKmZlnewacUlg7uY
Pn7OxzSdTJ54TtGXMHzmcFg04XjFYoHoObN5KUYQl2FieppZI2V+4Upc/7bJ/j8h
Je9HV0kbuu6Z12EA5ziX2QBwDUL4zWSuxJZ9HYlepcW+erDt8eNswPIt0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjlDEtpuRvi6B5jZCqj2kE6UOpNMB8GA1UdIwQY
MBaAFDrV18e+kSZQ1xQjzTwlFtqUCe22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYt
MWM2M2RhY2FiZGU5LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYtMWM2M2RhY2FiZGU5
LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyq8ZZ6m
WRGQa6pthDjrunAPiM4sGQnZqjMHDfiVk1+oQTrXb9lIj0ePbgBV92IcBm3HdvOq
xaeeC89zxv8BK8L2UwFF7Aw/XrBjxdS/A/+Q5A63oW8n1RyGDddVrdXAe/QVF8G9
X6fhOuVmPM5WOFE52nNgb7Lzsmb9/sxZuQ/XByiab92gXR3Kco/BcWx7QD0ivxxc
sYf64XDCCKT6E9Ws4y/rFp1Fmm/WpwDImHezRVPETbLTrtHIBmTvsXOmTxv/cGHP
xzR4sW/x+BnmdEl+qJsL0KPPd1UlnU/Ok7dwEsgorg4RcSKpM20ij4IbENgkXAjy
sTfYxe2DNU563w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:40:23 2026 by rpki-client