Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
File: Otu0daQwTIRTQ_2U_ummuIAI44s.mft (raw, json)
Hash identifier: 4VLYKGr2GP/fhTNUVQCGHtef5fQq7Vx6q6MtPqySZ94=
Subject key identifier: D5:63:1F:9E:8A:ED:FC:4C:8B:01:0A:06:94:A9:F5:ED:94:2E:A7:37
Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
Certificate issuer: /CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Certificate serial: 01A0BE79A06FE1AED8C99FF339E152F62E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
Manifest number: 042A
Signing time: Sun 20 Sep 2026 11:00:37 +0000
Manifest this update: Sun 20 Sep 2026 11:00:37 +0000
Manifest next update: Mon 21 Sep 2026 11:00:37 +0000
Files and hashes: 1: 75bW-O8JW9bpqCVsnQv-u0YfUJ4.asa (hash: 6ZBAy9NMpontcexIBbvbhfvpcMqQpCB9OdHdBmG3wEE=)
2: Otu0daQwTIRTQ_2U_ummuIAI44s.crl (hash: YwOL9VS3CHC3MXAvoXSgKKTIrwoW9+tvls7IY1EmMEM=)
3: WEfg623at549gjZw64RcO_APHMQ.roa (hash: FO7uHOTKAm/yntYjpVC9E+eNIvpI6nRmgjdhZ1LH7Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:a0:6f:e1:ae:d8:c9:9f:f3:39:e1:52:f6:2e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Validity
Not Before: Sep 20 11:00:37 2026 GMT
Not After : Sep 21 11:00:37 2026 GMT
Subject: CN=d5631f9e8aedfc4c8b010a0694a9f5ed942ea737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:86:97:47:b2:87:db:5d:ed:b1:50:0e:34:82:
a4:f2:3f:ae:2c:1e:c7:69:5a:03:cb:74:07:bd:24:
9a:98:09:83:0b:33:00:29:96:a4:a4:f7:b0:26:64:
bf:12:7b:31:cf:02:a3:99:20:49:b7:ac:f4:cb:6e:
9d:95:64:74:ea:00:dd:ef:8a:52:bd:2b:52:8e:e4:
d4:5b:e8:fb:99:14:23:e7:a8:7f:11:44:ac:b7:9f:
4c:66:4a:b0:1e:52:8f:fa:e8:61:38:75:58:bf:f2:
4d:5c:51:79:fe:c8:ed:54:8f:f6:a8:5e:86:c8:6c:
97:37:0a:75:6c:4b:49:77:b2:29:11:c6:91:2f:60:
e2:04:c1:df:58:d0:7b:19:90:0b:d3:65:06:ea:ec:
20:e5:ff:01:23:1e:85:da:6f:9a:1b:7b:28:d5:0b:
b6:99:d0:d9:55:db:48:dd:2a:9e:da:eb:60:f2:5f:
5e:6f:8e:8f:33:e8:d6:71:91:ce:be:0b:8b:24:23:
9f:df:0f:69:25:ee:38:bf:45:24:35:ec:1c:2a:44:
89:16:bb:89:54:54:83:88:d0:56:02:68:f8:62:f2:
b3:49:bd:85:8d:71:14:d3:c3:56:ff:f2:90:52:c7:
57:06:79:34:3d:d0:90:bb:c9:ca:c9:bf:4e:03:ed:
aa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:1F:9E:8A:ED:FC:4C:8B:01:0A:06:94:A9:F5:ED:94:2E:A7:37
X509v3 Authority Key Identifier:
keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:5d:64:7c:8c:21:b7:aa:31:85:d5:68:ed:f7:27:1e:61:be:
3d:88:b7:89:28:9a:cd:e5:ae:e9:c7:d8:62:76:f7:2c:ab:4b:
06:15:b2:1d:42:97:ea:fb:9b:74:18:53:d4:69:50:23:7a:31:
b0:f6:30:25:90:31:63:bd:16:53:40:6f:32:dc:4b:bb:d2:0d:
ea:e2:2c:6d:9d:49:d8:3e:c0:19:55:bf:a2:34:dd:26:fd:aa:
ef:51:95:8d:72:59:03:6c:ee:99:c4:36:58:e3:03:45:f0:27:
b1:63:f1:74:e1:fd:6c:8f:c2:7e:03:8e:41:47:c2:63:d5:f6:
09:a9:2d:17:f3:da:c9:2d:f3:44:bb:75:e2:36:fb:0d:70:0e:
e7:2f:42:5a:f5:c7:42:b3:11:4f:ae:a4:ba:52:a6:ce:e7:6b:
5d:ef:92:a5:a7:6a:36:7f:29:ad:e6:d0:43:ba:8c:aa:78:97:
02:c2:24:05:da:7e:a9:53:d9:af:1b:0c:86:d8:20:e6:aa:d9:
db:01:a3:9e:95:12:9b:ec:4e:49:4f:3f:90:22:f6:a4:70:86:
c1:a7:ed:d5:b5:6d:fd:1f:ae:df:b2:01:b0:de:7d:73:38:14:
2a:b1:cc:fd:ae:34:f7:73:91:99:0a:45:fb:55:2e:39:7e:ba:
1a:9d:0a:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+eaBv4a7YyZ/zOeFS9i5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZGJiNDc1YTQzMDRjODQ1MzQzZmQ5NGZlZTlhNmI4ODAw
OGUzOGIwHhcNMjYwOTIwMTEwMDM3WhcNMjYwOTIxMTEwMDM3WjAzMTEwLwYDVQQD
EyhkNTYzMWY5ZThhZWRmYzRjOGIwMTBhMDY5NGE5ZjVlZDk0MmVhNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IaXR7KH213tsVAONIKk8j+uLB7H
aVoDy3QHvSSamAmDCzMAKZakpPewJmS/EnsxzwKjmSBJt6z0y26dlWR06gDd74pS
vStSjuTUW+j7mRQj56h/EUSst59MZkqwHlKP+uhhOHVYv/JNXFF5/sjtVI/2qF6G
yGyXNwp1bEtJd7IpEcaRL2DiBMHfWNB7GZAL02UG6uwg5f8BIx6F2m+aG3so1Qu2
mdDZVdtI3Sqe2utg8l9eb46PM+jWcZHOvguLJCOf3w9pJe44v0UkNewcKkSJFruJ
VFSDiNBWAmj4YvKzSb2FjXEU08NW//KQUsdXBnk0PdCQu8nKyb9OA+2qyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVjH56K7fxMiwEKBpSp9e2ULqc3MB8GA1UdIwQY
MBaAFDrbtHWkMEyEU0P9lP7ppriACOOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5MjctZDY1Ni00YjkxLWE5OTAt
MGNlMDQ5NmE5OTdiLzEvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMjY5MjctZDY1Ni00YjkxLWE5OTAtMGNlMDQ5NmE5OTdi
LzEvT3R1MGRhUXdUSVJUUV8yVV91bW11SUFJNDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz11kfIwh
t6oxhdVo7fcnHmG+PYi3iSiazeWu6cfYYnb3LKtLBhWyHUKX6vubdBhT1GlQI3ox
sPYwJZAxY70WU0BvMtxLu9IN6uIsbZ1J2D7AGVW/ojTdJv2q71GVjXJZA2zumcQ2
WOMDRfAnsWPxdOH9bI/CfgOOQUfCY9X2CaktF/PayS3zRLt14jb7DXAO5y9CWvXH
QrMRT66kulKmzudrXe+SpadqNn8prebQQ7qMqniXAsIkBdp+qVPZrxsMhtgg5qrZ
2wGjnpUSm+xOSU8/kCL2pHCGwaft1bVt/R+u37IBsN59czgUKrHM/a4093ORmQpF
+1UuOX66Gp0KgQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:40:01 2026 by rpki-client