Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json)
Hash identifier: knQZHH5ttAl3gBzVn/boE2Lsm7KQbCQHsJoOoYdXzjU=
Subject key identifier: 38:0E:50:3E:3B:B8:C4:2E:21:32:B9:23:67:3D:AF:E4:51:6B:76:89
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019CAD901B7343F0684974E480271A0D10A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
Manifest number: 0689
Signing time: Mon 02 Mar 2026 08:00:28 +0000
Manifest this update: Mon 02 Mar 2026 08:00:28 +0000
Manifest next update: Tue 03 Mar 2026 08:00:28 +0000
Files and hashes: 1: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: f4XhpDhj1a63Qp640hxGwXnY48aoZkPZBS6n2VrfhQ8=)
2: esJRIVKiV99xgmszXdUIvBUcR4c.roa (hash: oiCTzvqGfHuD5NTI//w9jSaRVTcBCrOg8Oov3qUBvS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:1b:73:43:f0:68:49:74:e4:80:27:1a:0d:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Mar 2 08:00:28 2026 GMT
Not After : Mar 3 08:00:28 2026 GMT
Subject: CN=380e503e3bb8c42e2132b923673dafe4516b7689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:3a:36:c1:22:e0:98:74:be:f7:ba:c7:58:
20:4b:3e:83:f9:44:86:df:03:5e:6b:ce:7d:57:3d:
09:2d:54:64:4f:6b:ff:f2:e7:9c:65:2a:f1:19:d8:
65:2e:af:d9:24:0a:e6:d8:2f:e4:2a:d9:3f:3d:c9:
31:f9:7b:a3:bb:5d:b5:22:ac:e6:de:d6:27:46:9f:
03:db:41:e6:8b:07:22:72:ef:c4:9e:06:49:73:e9:
93:7f:bb:a0:69:6c:1b:2f:b7:f3:3f:33:9f:74:34:
49:fd:1c:d0:e3:44:04:6d:36:ce:4a:ff:d9:09:c1:
67:1b:6e:e5:a0:ee:2e:07:f1:58:42:38:cb:80:2f:
06:d6:a3:89:f4:ad:7e:2b:69:e8:28:b0:15:43:31:
fe:80:80:ba:a8:4c:e0:32:69:f4:6b:e7:ed:6d:89:
f7:08:8f:14:81:f7:7c:90:e0:2f:42:e3:56:75:86:
5a:b6:86:78:3a:9b:8a:9e:7c:d1:00:b4:23:3f:6a:
a7:b7:f1:2f:2d:1e:b3:0c:33:61:71:72:9e:d6:01:
bb:3d:56:88:23:11:f8:64:f6:f1:47:24:06:77:49:
55:9f:5f:fd:6a:9c:3d:08:94:33:aa:aa:57:ea:75:
21:d7:87:7e:43:83:ca:cc:39:e8:be:69:78:ab:08:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0E:50:3E:3B:B8:C4:2E:21:32:B9:23:67:3D:AF:E4:51:6B:76:89
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2b:65:cb:bb:b8:c9:dd:0d:9e:ff:6f:7c:f5:f9:b6:1f:a4:
71:45:f4:05:20:eb:2c:72:0e:73:41:1b:0d:d8:51:82:cb:de:
b9:16:00:4c:11:25:1c:8f:6c:6d:5a:fa:bc:2e:1e:d3:51:a6:
9c:dd:78:bc:9f:b6:4f:f9:2c:1d:05:33:c4:59:31:57:91:d5:
43:b8:d1:88:31:c5:4f:ef:de:6c:87:68:f4:31:24:87:b9:12:
e3:1c:89:fd:5d:8c:1c:cc:4d:81:4f:bd:c3:54:4a:23:d9:52:
7d:d1:d5:da:ce:c8:bd:31:42:c4:a8:42:46:aa:29:9d:b8:1a:
e7:31:ba:51:b6:aa:d4:18:88:00:ae:9c:12:73:41:1b:3c:24:
6f:9c:4d:2b:d0:26:ef:f8:5f:63:36:49:40:01:e3:65:ba:af:
6a:06:34:79:22:9c:aa:a1:7e:45:63:8c:40:ec:a5:65:95:07:
22:3d:d7:a9:b0:d5:fd:b7:eb:10:9c:31:7d:fb:3c:6d:68:cc:
e4:24:5a:29:19:72:c0:e6:3d:51:9b:38:11:61:bc:a1:32:3a:
cd:49:38:9b:a9:ee:b3:cf:64:05:8f:1e:cb:bb:87:13:01:20:
40:b4:97:2e:2a:7e:f6:ff:7d:a6:f5:15:4b:72:1d:a2:8f:36:
b7:31:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:18 2026 by rpki-client