Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File: OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier: xn41txvZVgzbT5kY8AMGXUzkmAnV7ctSbuvxtnlezjg=
Subject key identifier: E0:BD:07:2F:8F:82:02:B3:57:1C:59:95:67:8A:C3:2C:D7:ED:39:4E
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 019FA907790F50FFF590B08127500FA18601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number: 0B8D
Signing time: Tue 28 Jul 2026 14:01:06 +0000
Manifest this update: Tue 28 Jul 2026 14:01:06 +0000
Manifest next update: Wed 29 Jul 2026 14:01:06 +0000
Files and hashes: 1: HJsFBPXpRz5LLN-HWWaUWkvpuFg.roa (hash: A71A79ld0mpXJShPBVAxO/RGVR9i2ChYv5yAgG0mvoI=)
2: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: nHLcGvEZwLimmMaukDCg4pKPzty+59UY+8UI5luw/+s=)
3: P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa (hash: XWgju5gwU7Y6s/I/aWdqxA0jbgqEAg9SCcCUa2FrFZM=)
4: eajsCfDVR3mS2bokl79SZG65uO0.roa (hash: C+6jNZ7CvadCwwwjGLPlq4B5cByCVplF5IFoLR8czpM=)
5: igrteN5vqIxxznlHOmqBmnoDCxM.roa (hash: jDhUs8e7Zg5Ub3aoKeq6iFWO9yxzvyDpjaqplQBFShI=)
6: x4b1kVJxAoo0cTXBS0d05Vjhxp0.roa (hash: Dr3HVuYGSpmgMr+JUBhbJNssYU4/n5sJRGF2b2MSqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:79:0f:50:ff:f5:90:b0:81:27:50:0f:a1:86:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Jul 28 14:01:06 2026 GMT
Not After : Jul 29 14:01:06 2026 GMT
Subject: CN=e0bd072f8f8202b3571c5995678ac32cd7ed394e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:95:ab:78:38:5d:2d:b4:c0:c7:b8:bb:03:
bc:d7:50:4b:88:6a:90:b2:1c:58:91:05:14:9f:94:
44:fe:da:3d:f2:70:d1:e7:53:b6:a2:e0:fc:30:73:
a3:0b:05:11:e0:ef:16:77:0f:22:5a:49:42:c8:ff:
3c:a0:bf:3a:e0:1d:34:61:1b:ab:67:86:6d:d2:70:
be:ab:2b:e1:08:12:26:1c:2f:c2:99:65:ea:4a:20:
8d:df:73:0f:28:cd:9b:a9:cc:6f:09:cd:23:bd:6b:
0d:47:09:2e:61:02:93:c1:87:34:0e:0e:c5:1d:55:
16:20:f4:e3:f4:68:e5:fd:2b:38:1f:9f:31:8f:ae:
b6:f9:58:5f:52:7e:07:af:cc:42:59:91:d0:f8:a0:
63:2e:0c:94:23:16:b7:23:4e:09:5c:37:bf:9f:3e:
9c:7f:a5:3e:52:02:47:ea:3f:c1:56:a4:80:29:d1:
83:43:2d:10:a1:6e:42:bc:73:03:ef:17:a4:ee:00:
41:ca:04:cc:04:3c:29:3c:3b:74:5d:c4:b4:68:8d:
96:4a:a4:b2:46:a1:51:84:09:16:b7:4e:e7:24:da:
7c:19:b5:19:59:44:9a:17:8d:ed:82:9e:c4:30:28:
fd:48:09:0d:72:43:5f:83:ef:3f:b7:21:45:cf:71:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BD:07:2F:8F:82:02:B3:57:1C:59:95:67:8A:C3:2C:D7:ED:39:4E
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b1:44:de:fd:b4:fc:32:61:7d:df:21:c8:c2:aa:10:6c:7d:
cf:55:44:0b:9f:65:11:85:1a:76:cb:bf:5e:d5:a1:61:38:4f:
3d:1b:ac:82:17:ee:6a:a1:16:11:25:89:e2:4f:9b:53:3e:9f:
4e:ba:41:f7:6c:d9:cc:08:ed:21:3b:80:a4:95:83:7b:db:d0:
13:53:c2:f3:31:04:46:57:10:85:be:09:a5:fa:cc:5d:85:54:
8a:7a:b0:25:74:61:62:29:a2:f3:cb:ce:97:d7:5c:50:50:57:
13:b3:4a:4d:73:63:07:8c:8a:cd:27:1e:65:ed:6a:0e:42:46:
57:9e:c0:1c:10:5c:39:f7:cb:56:61:a9:fe:c1:f7:e3:6a:b3:
bd:f2:3c:c8:61:7a:ea:74:20:4f:62:f1:70:ed:14:8d:99:7e:
38:8c:65:c7:bb:4d:99:66:71:2b:5a:c0:a8:74:b6:db:a0:d3:
eb:71:dd:ce:5f:07:b9:13:57:96:d0:a2:62:54:15:a9:c1:45:
2f:9a:c2:6a:b3:5d:91:0b:0f:a7:2a:48:d9:79:2f:65:b7:9c:
4e:66:26:15:08:45:ea:88:1d:17:5b:48:62:e7:78:b4:1a:4f:
f3:ac:12:ba:fb:27:df:82:7e:d7:87:4a:30:93:99:67:57:12:
cd:78:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:46:55 2026 by rpki-client