Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
File: OTba8DdWuvg7pPONvl1oy5us7_k.mft (raw, json)
Hash identifier: 29zz8eaO/y55DLYYTzEd+66IaFU0Mg0P90MiYjLwQnI=
Subject key identifier: A5:87:BB:D5:3E:DE:89:1C:CC:70:E3:AF:08:DE:3C:F7:32:42:9B:67
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 01A0CCA2E87908E6ED15D0D414E47D5AFFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
Manifest number: 0C24
Signing time: Wed 23 Sep 2026 05:00:23 +0000
Manifest this update: Wed 23 Sep 2026 05:00:23 +0000
Manifest next update: Thu 24 Sep 2026 05:00:23 +0000
Files and hashes: 1: HJsFBPXpRz5LLN-HWWaUWkvpuFg.roa (hash: A71A79ld0mpXJShPBVAxO/RGVR9i2ChYv5yAgG0mvoI=)
2: OTba8DdWuvg7pPONvl1oy5us7_k.crl (hash: pajwUo7Ms7oluQgGzAnhIdwhYHUvS7yEYCTCBdoROmY=)
3: P5pmTNWk9XRgV0EttCSJwOMoJ6g.roa (hash: XWgju5gwU7Y6s/I/aWdqxA0jbgqEAg9SCcCUa2FrFZM=)
4: eajsCfDVR3mS2bokl79SZG65uO0.roa (hash: C+6jNZ7CvadCwwwjGLPlq4B5cByCVplF5IFoLR8czpM=)
5: igrteN5vqIxxznlHOmqBmnoDCxM.roa (hash: jDhUs8e7Zg5Ub3aoKeq6iFWO9yxzvyDpjaqplQBFShI=)
6: x4b1kVJxAoo0cTXBS0d05Vjhxp0.roa (hash: Dr3HVuYGSpmgMr+JUBhbJNssYU4/n5sJRGF2b2MSqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:e8:79:08:e6:ed:15:d0:d4:14:e4:7d:5a:ff:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Sep 23 05:00:23 2026 GMT
Not After : Sep 24 05:00:23 2026 GMT
Subject: CN=a587bbd53ede891ccc70e3af08de3cf732429b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:03:69:d3:13:07:57:8c:23:45:e7:a2:f5:
e1:37:20:f7:36:b8:79:9a:bd:4b:9f:a7:a3:f0:bb:
82:58:19:21:af:fe:85:95:58:ba:52:d7:b2:c3:73:
e9:80:98:2d:88:43:f4:81:bd:70:f6:58:aa:5a:a8:
20:54:e8:85:4d:bd:dc:ef:04:8e:21:7a:26:42:ad:
2c:f7:bd:d2:7c:fc:ec:6f:9f:40:f6:0e:44:9a:45:
c3:64:eb:f8:9b:3d:04:88:46:80:92:4d:de:08:88:
6f:f9:33:45:aa:b0:42:77:85:02:a1:76:95:1b:a2:
34:be:72:eb:63:01:5b:12:01:29:0d:cc:d8:0e:66:
27:1f:22:72:3e:c5:43:14:96:24:3f:d2:66:01:c4:
b0:6d:c5:fd:9f:9b:2b:1b:db:20:cd:e9:e5:fa:14:
b6:a3:ce:1a:e2:a2:8b:d0:0b:a3:31:a3:86:c5:15:
0a:72:5b:16:f8:4c:e7:72:c1:63:da:77:22:d8:49:
63:61:c3:84:03:23:cd:e6:5b:61:0d:75:2d:0d:cf:
7c:e8:9a:ed:b0:ab:91:17:71:80:90:ce:81:d6:20:
51:a1:41:82:24:68:7b:f1:6a:22:7e:6b:31:ab:e7:
69:60:2a:b1:c3:2c:d9:1e:81:48:20:13:aa:4d:60:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:87:BB:D5:3E:DE:89:1C:CC:70:E3:AF:08:DE:3C:F7:32:42:9B:67
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:34:e0:ab:b3:25:24:9e:a1:d3:54:29:35:65:d7:61:0b:fd:
85:1b:05:d7:6f:6b:56:37:fc:e3:31:1d:90:ca:e0:1b:24:af:
7b:97:49:1e:a2:58:66:d1:6d:38:d1:53:67:64:5b:db:23:70:
1a:f6:bb:73:e4:63:10:d2:5b:2e:a1:53:14:86:2d:34:d9:02:
9e:da:39:b1:f9:94:2e:a5:47:0a:22:18:84:33:59:be:57:ed:
a7:8b:7b:de:8e:00:59:b9:bf:16:d6:f4:44:4d:cc:a7:51:38:
51:57:55:a0:40:73:be:2d:9e:49:06:19:18:c2:67:6f:1c:1e:
d4:65:0b:a1:27:5f:0c:fa:32:88:69:17:a2:5e:00:3c:8f:90:
45:95:ca:4d:57:00:b5:7c:a6:2b:b0:25:a8:7b:92:21:01:fa:
cf:55:6b:2a:b1:d2:f7:df:85:a5:0a:b9:70:32:c0:77:aa:28:
4a:73:a1:4f:45:7a:7e:77:ae:88:20:25:03:01:c5:33:4c:6f:
94:fc:c8:fb:55:8b:91:2f:14:05:e2:f8:00:b5:47:2e:2c:c5:
34:ab:f0:65:f5:25:42:fd:bc:72:66:cf:d9:f9:e4:3c:52:f1:
91:a5:69:46:c1:42:2b:dd:c6:9e:34:08:c3:0b:39:14:5c:0f:
35:27:9a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:21:44 2026 by rpki-client