Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
File: otXHrn5FwAc077zJE6Gx6j6WS0A.mft (raw, json)
Hash identifier: 46rmXTVgVHUGe3An+z8MOLMdBMR7X6nPCdw+lliMGqw=
Subject key identifier: 02:AE:22:ED:58:1F:A5:F6:DC:12:C1:99:45:47:68:FC:75:E0:A7:34
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 019CAB3488D3A93AA7F0B7DE6ACD2166000C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
Manifest number: 06A4
Signing time: Sun 01 Mar 2026 21:01:12 +0000
Manifest this update: Sun 01 Mar 2026 21:01:12 +0000
Manifest next update: Mon 02 Mar 2026 21:01:12 +0000
Files and hashes: 1: 1wpYXstfYyorfkn1_ZYkHrWY0tY.roa (hash: nzKWkpTyGQvp5hXuxoIK1eIqRot/ELteZ4njpq8VQic=)
2: HXsSRzV3rUhLkMN3xAsW0f7YXHg.roa (hash: bXyG9rPhyBGq6asNTRsjYlab7E/O1eKTePVUK6urYbk=)
3: _VCHrD7CFJ7LeZhYlq49E-RZeaI.roa (hash: bFRAesSSjkZYRCuFN5AO5cPTvqqrzfxwl+AdJOITbog=)
4: otXHrn5FwAc077zJE6Gx6j6WS0A.crl (hash: Lp78/BIENyY776K99HsejXSz0RsdRKcUSWIdGZod8ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:88:d3:a9:3a:a7:f0:b7:de:6a:cd:21:66:00:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Mar 1 21:01:12 2026 GMT
Not After : Mar 2 21:01:12 2026 GMT
Subject: CN=02ae22ed581fa5f6dc12c199454768fc75e0a734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:fa:d1:01:31:07:0c:7d:83:94:c2:5f:04:
72:87:74:8e:5b:a8:e1:27:94:98:e5:fb:41:d8:1f:
91:52:5d:59:e3:ac:d7:62:55:96:c3:ac:b8:cc:81:
0e:38:33:85:87:be:4f:b1:f7:b8:9d:aa:c4:90:b4:
0b:2c:91:11:44:71:db:86:92:54:7b:02:93:9e:d2:
c4:63:8e:38:f6:e4:5f:bd:ef:05:3b:9c:a0:a8:df:
ab:c8:b4:6b:b5:2a:9a:34:68:2b:f5:1a:82:94:18:
ce:48:e7:7c:e1:f2:8a:ab:da:75:c8:e5:11:c6:02:
c8:27:f1:1c:fe:50:8e:44:66:fa:30:8c:17:fc:7f:
dd:ba:f2:30:b2:a9:f5:c2:2c:f8:0b:7f:ba:9f:94:
e7:72:86:8b:fa:78:fe:8c:ed:31:26:c4:f2:11:83:
f9:4e:14:06:2f:d7:53:3f:93:70:16:32:32:e0:35:
4a:ed:3f:17:57:e3:71:b8:d3:ab:cd:41:35:b0:17:
09:b0:70:51:b6:3a:0a:d2:c9:2b:d0:5e:ef:7c:97:
84:15:dc:17:07:9e:8e:47:74:ac:7f:f4:33:a4:6b:
53:1c:59:ae:7d:d6:66:d9:51:6e:08:33:65:ee:6f:
b6:e9:68:98:8c:50:73:4e:e7:82:87:f0:4c:e9:85:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AE:22:ED:58:1F:A5:F6:DC:12:C1:99:45:47:68:FC:75:E0:A7:34
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:58:1a:36:31:9b:a0:f5:af:0f:4f:04:c6:44:3b:df:ee:4c:
b3:af:41:9d:01:fe:53:8d:1f:d0:0b:82:cd:0e:f4:9a:0a:35:
0a:ed:94:03:8e:50:6b:cf:7a:7f:71:15:e1:83:95:37:5f:99:
75:7c:f4:95:dc:11:97:ad:29:8c:9d:13:6a:c5:11:0e:da:7c:
a0:fa:c4:00:a7:85:95:3f:1d:82:29:c3:25:aa:ae:af:6b:a0:
77:8a:16:ff:0b:15:56:5b:47:f7:63:0c:38:8e:a1:00:ac:7d:
69:73:72:89:a5:e7:2d:56:21:89:fd:eb:6b:83:c7:85:df:cb:
d1:19:fa:34:91:69:ee:4a:76:8c:bc:a4:6e:ec:eb:9b:41:b4:
b0:85:13:73:8d:fa:12:db:60:d9:97:41:dd:39:35:b6:4e:b5:
9d:0f:9c:c7:a6:a1:66:60:2e:61:77:d1:f3:74:59:bf:dd:cd:
e5:33:b3:e7:a8:56:5a:84:e7:13:be:f3:43:de:78:36:92:e7:
c5:8d:75:8c:ed:64:81:62:11:2a:57:3a:8b:6f:02:f7:24:6f:
a5:dc:ae:f4:4a:d2:04:40:77:76:04:20:4c:4b:1e:85:9d:32:
34:d1:33:54:7a:c6:ce:2e:f6:b6:54:05:c6:e9:3b:5e:89:66:
fe:b8:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:31 2026 by rpki-client