Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: UTDQexlATGL5qQVKYg/TnbzR1ilynnzlf0q8AD165ts=
Subject key identifier: 87:D1:DA:3D:EC:3C:15:46:D6:0E:16:2D:AC:5C:86:72:17:92:DA:CE
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 01A14E0777283E1AABC619538D3A31B74F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 1AAD
Signing time: Sun 18 Oct 2026 08:01:14 +0000
Manifest this update: Sun 18 Oct 2026 08:01:14 +0000
Manifest next update: Mon 19 Oct 2026 08:01:14 +0000
Files and hashes: 1: E3lm4FvyrvLHTXkXDSTYjOHsHVY.roa (hash: 6QZmnjSIaFmg0mpij0y/20sY5ruAuIBmod+jn1qrIQA=)
2: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: 7VMaVePXPeCbrxQQC/H36pxG+puXdy92YvR+qC+v9x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:07:77:28:3e:1a:ab:c6:19:53:8d:3a:31:b7:4f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Oct 18 08:01:14 2026 GMT
Not After : Oct 19 08:01:14 2026 GMT
Subject: CN=87d1da3dec3c1546d60e162dac5c86721792dace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:60:23:f6:94:73:fd:eb:71:c9:a8:bf:fb:
7a:7f:78:3d:f4:7f:e8:e8:40:56:ac:54:5d:ee:c6:
55:4c:b4:53:e7:84:4c:54:76:ae:6f:0f:86:e6:ce:
aa:f6:d0:9a:ea:72:f3:e2:00:91:56:e3:47:4b:c7:
7f:01:c8:93:3f:a7:f5:96:27:33:3d:8c:2e:cf:dc:
7c:7b:17:91:34:44:db:0d:79:d8:45:fa:c7:60:65:
08:51:de:2c:88:e3:55:a2:a2:5a:4b:30:31:46:dd:
26:0e:a2:73:f7:42:ac:2c:4c:d8:74:f9:c8:ec:6c:
36:8c:c5:5e:54:1a:6b:21:92:52:f6:db:66:42:53:
46:1d:e1:5a:60:c9:af:e3:1c:26:82:b4:a4:1f:ed:
3e:09:1d:b2:e5:c2:c4:7c:bf:e2:e6:f6:56:a4:02:
3a:68:69:be:ba:58:88:1b:ee:f0:f5:49:b7:bd:de:
34:37:64:a9:cc:fc:5b:f6:03:fd:50:98:b7:79:e2:
c2:65:33:e1:34:09:60:f5:5f:4f:06:9b:c0:45:65:
52:95:5a:d2:4b:80:62:b6:7d:99:c3:20:96:cc:ae:
46:13:38:7f:66:59:e0:46:1e:44:79:ab:2f:a6:d0:
25:fe:62:f6:98:95:05:4d:11:2f:48:58:ca:6e:f4:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:DA:3D:EC:3C:15:46:D6:0E:16:2D:AC:5C:86:72:17:92:DA:CE
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:52:5b:c3:38:a6:9c:f6:1e:82:95:51:48:30:27:09:3b:4b:
6c:23:53:e0:c1:b8:ce:de:c2:62:ec:fc:1f:02:7c:77:e2:c0:
57:f5:e9:6a:f9:78:e4:b7:38:3f:d2:6d:ee:0c:b0:42:56:b1:
d7:61:36:81:2e:c0:44:27:8a:e8:12:d4:dc:17:47:ca:f3:51:
ab:43:ee:71:13:b8:85:26:10:37:7b:8d:75:e0:68:43:f1:5b:
6a:12:53:6f:0c:9c:ed:a1:c5:f8:a4:b7:58:06:da:70:6d:3d:
58:a6:b9:80:f6:4a:81:c4:04:22:1c:1a:93:75:4c:b2:6d:e6:
43:c7:e8:35:8a:39:97:7d:6c:27:8c:50:ae:42:94:8f:e7:0e:
64:0c:66:52:5c:27:be:da:9b:03:6f:bc:eb:54:c5:35:2a:99:
07:3d:ac:8c:c4:82:e1:35:e9:e5:bd:71:fb:b1:74:87:03:ee:
b2:ad:b6:64:ae:0d:40:70:b4:6f:73:cf:bd:34:4a:d8:b3:3f:
3c:bc:b6:1e:57:68:c8:91:9f:57:72:3c:94:f8:68:a6:c2:96:
b8:60:01:40:fc:54:39:d8:5e:7e:72:c6:a2:e5:ea:b9:50:b3:
d1:7b:18:ad:61:be:09:9d:58:d0:ca:4d:ba:d8:38:a8:6c:a8:
bd:15:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:19:55 2026 by rpki-client