Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: y49O74DFjgWxrEC/E9YWNshR/LZHgSar9yPqmaaQqik=
Subject key identifier: 9C:03:49:9A:7C:ED:B2:DD:A7:49:3C:ED:73:B5:B1:F0:DD:13:72:55
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 019D9AABA1C7E3AD0E1E9FD4EC5DC3418FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 0720
Signing time: Fri 17 Apr 2026 09:00:32 +0000
Manifest this update: Fri 17 Apr 2026 09:00:32 +0000
Manifest next update: Sat 18 Apr 2026 09:00:32 +0000
Files and hashes: 1: 1wpYXstfYyorfkn1_ZYkHrWY0tY.roa (hash: nzKWkpTyGQvp5hXuxoIK1eIqRot/ELteZ4njpq8VQic=)
2: HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa (hash: bXyG9rPhyBGq6asNTRsjYlab7E/O1eKTePVUK6urYbk=)
3: _VCHrD7CFJ7LeZhYlq49E-RZeaI.roa (hash: bFRAesSSjkZYRCuFN5AO5cPTvqqrzfxwl+AdJOITbog=)
4: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: /myXCjZrBXVTvT+1qGWy3C1Y8ki9VnnkRgI+gjJ7XbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a1:c7:e3:ad:0e:1e:9f:d4:ec:5d:c3:41:8f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Apr 17 09:00:32 2026 GMT
Not After : Apr 18 09:00:32 2026 GMT
Subject: CN=9c03499a7cedb2dda7493ced73b5b1f0dd137255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:5c:5a:7a:46:c0:ef:a1:1b:be:6e:22:bb:
17:52:b8:a1:36:9d:96:53:17:81:e6:ce:66:c7:ad:
73:1f:2b:e1:dd:bc:e6:2a:a2:00:8d:5d:89:1e:6d:
d9:36:3f:f9:1b:a7:1a:56:71:b2:04:c1:5a:92:50:
29:ee:81:4c:90:fd:e6:1a:e0:25:94:79:bb:2f:0f:
3a:22:23:9f:9b:c2:4e:c6:42:2b:85:f5:23:6c:7d:
41:5e:68:8a:57:ea:5d:87:3f:d1:48:ba:e2:18:be:
e6:6f:55:a0:e6:90:6f:79:4b:fe:60:ae:19:e5:61:
8b:82:f2:0d:c2:aa:b5:91:2d:6e:d0:bd:ca:8b:b5:
f3:43:07:58:98:79:f3:5f:98:41:97:c3:c6:71:5e:
72:f6:99:66:0b:22:12:0a:51:79:eb:80:25:1c:24:
e4:61:99:01:2a:2d:f0:6c:c9:3a:fa:1b:a6:25:cd:
87:19:6e:76:56:ee:18:e1:82:44:b8:1c:9e:3e:5e:
2e:42:4f:70:49:38:dd:87:80:51:64:8b:6d:59:7f:
72:05:81:f6:76:c7:25:fd:b9:ba:f0:c2:2d:2b:1b:
a6:fb:de:c1:4b:d8:63:1d:0d:68:1a:be:fc:af:21:
61:1f:14:95:d5:cc:1b:8f:84:6a:31:99:b9:67:b4:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:49:9A:7C:ED:B2:DD:A7:49:3C:ED:73:B5:B1:F0:DD:13:72:55
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3c:13:79:f3:0a:9f:12:52:8b:d2:e9:42:4d:41:df:8b:ca:
ae:e8:39:96:d8:50:a9:96:75:ce:09:65:ab:62:7f:9b:18:af:
f5:72:36:c0:30:eb:66:8e:8e:04:8a:78:80:7b:8c:ef:c1:04:
45:ae:55:2a:a6:30:2f:5b:04:10:62:ca:1a:ad:9c:8e:34:0e:
6b:29:73:5b:8e:0a:ee:e6:da:63:7a:ed:82:7c:51:21:64:07:
fd:c7:f4:d2:6b:8e:a2:55:e6:26:40:a7:2a:6b:95:74:3c:41:
4e:8d:71:43:c6:ae:a0:6e:c8:8d:7e:3b:07:04:6b:46:36:76:
02:e6:02:6d:71:47:a3:c3:8f:c1:be:01:85:71:f7:e5:40:3a:
a9:e3:dc:46:dc:56:78:f8:6f:83:81:f5:3a:1c:68:12:a9:6e:
6b:b6:8e:11:42:7c:ae:65:7f:7d:f2:e0:a4:c8:04:87:42:e9:
ea:24:48:24:2b:0b:b2:98:12:4a:2e:18:4a:b7:98:ea:45:83:
df:9a:5e:42:13:d1:0f:61:b4:e6:c7:b6:01:49:2d:4d:8d:a9:
db:a8:d8:6e:32:78:3d:ce:bc:7e:d9:ca:b3:ac:01:a6:aa:26:
f5:5d:71:08:73:a3:6d:3d:ba:31:16:9f:e7:e8:26:60:18:c6:
8e:66:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:19 2026 by rpki-client