Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: MPjfN8gpEWdjF0qW1FyL54Hbr0rbEOb2xb98AYpoPkU=
Subject key identifier: 79:6D:AC:38:49:2B:F7:D0:DF:5D:05:C4:89:98:C7:94:AE:E7:C3:E5
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 01A101A385ABA6291FE0DE3844A417B65087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 08E3
Signing time: Sat 03 Oct 2026 12:00:56 +0000
Manifest this update: Sat 03 Oct 2026 12:00:56 +0000
Manifest next update: Sun 04 Oct 2026 12:00:56 +0000
Files and hashes: 1: 1wpYXstfYyorfkn1_ZYkHrWY0tY.roa (hash: nzKWkpTyGQvp5hXuxoIK1eIqRot/ELteZ4njpq8VQic=)
2: HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa (hash: bXyG9rPhyBGq6asNTRsjYlab7E/O1eKTePVUK6urYbk=)
3: _VCHrD7CFJ7LeZhYlq49E-RZeaI.roa (hash: bFRAesSSjkZYRCuFN5AO5cPTvqqrzfxwl+AdJOITbog=)
4: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: aPUiCnC9x6/77MiVjfh/H81k1uCO7xXgTvxwrtf9Txg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:a3:85:ab:a6:29:1f:e0:de:38:44:a4:17:b6:50:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Oct 3 12:00:56 2026 GMT
Not After : Oct 4 12:00:56 2026 GMT
Subject: CN=796dac38492bf7d0df5d05c48998c794aee7c3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:f9:3e:27:7b:3b:27:4a:d9:31:37:dc:bf:
0c:b7:05:14:28:70:0d:ff:03:3d:e9:b0:5b:52:24:
0f:16:12:32:f0:68:f3:fc:b3:30:11:23:2b:b4:cc:
aa:8c:f7:54:0b:1a:89:14:aa:d1:80:2a:6f:71:69:
f9:c6:aa:10:14:81:55:3b:94:ee:f2:86:31:da:13:
37:39:1b:65:44:21:97:21:25:83:63:64:dc:71:a1:
aa:e6:94:0f:0e:d1:03:4e:7a:d1:dd:25:b8:4f:c6:
ce:e4:9e:6b:3b:d0:cf:5b:d7:67:0e:79:6c:46:26:
2d:51:82:ea:9c:10:82:c4:6e:1d:f5:a1:1b:e1:5d:
6d:12:3e:f1:69:e9:4a:3f:49:85:34:52:32:f7:4b:
6b:83:3b:e8:d0:61:4c:2b:0a:e9:59:57:5e:cc:4c:
da:93:d8:86:12:e6:59:c5:27:88:49:b7:87:26:48:
c6:46:01:13:14:48:23:96:ea:cd:d1:78:c1:2a:dd:
95:1f:f9:6d:e3:06:19:bb:92:bc:b0:19:e6:44:84:
11:d2:1d:18:a5:50:c7:1d:6b:fa:4b:04:7f:fe:c6:
94:03:7b:7a:0a:64:6c:04:16:ec:da:6b:6d:fa:d7:
96:27:35:82:57:12:23:b0:42:f0:ff:ae:3b:f8:da:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6D:AC:38:49:2B:F7:D0:DF:5D:05:C4:89:98:C7:94:AE:E7:C3:E5
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:87:91:3d:be:c2:91:73:fa:9d:65:c8:0b:88:e4:8b:5c:c8:
f3:14:4a:9b:f7:dc:f2:ac:4a:a3:fb:a2:cd:49:09:15:a1:4c:
a6:d6:01:b6:43:d9:28:cb:ae:b0:65:d4:f8:81:2e:7f:29:3f:
22:53:e4:b9:02:a9:6c:ce:7e:dc:a0:7a:23:ea:31:ad:a8:bb:
a9:b2:61:6b:86:b8:a0:e2:18:a2:6c:82:66:6b:d5:7e:8f:3f:
18:c7:bb:a9:42:be:37:c9:01:e9:10:3f:b8:b7:94:ac:dc:45:
f6:77:d2:9b:76:a5:53:29:91:cd:14:4f:99:6a:1b:e5:72:0f:
da:b4:9c:b8:49:e4:f2:ae:cb:9e:99:93:57:39:97:09:e3:22:
d2:ef:14:67:a4:cc:f4:1d:01:c1:9e:3f:fa:e4:cf:cf:cb:12:
df:62:30:28:25:de:dc:8f:30:ef:c5:ca:24:39:fb:66:bf:5b:
f4:2b:68:93:78:1b:17:f8:d0:d3:ae:46:77:f4:7d:b3:0f:65:
b0:07:af:d3:ed:51:d6:24:23:34:1d:9b:ce:74:bb:eb:3a:18:
83:11:5b:42:26:24:9b:40:90:e3:09:34:b3:9f:72:fd:12:3d:
aa:8b:9a:aa:e6:c0:52:a4:1f:82:94:f7:77:57:1e:8d:f1:20:
6d:ea:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:23:12 2026 by rpki-client