Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: /iorW0OyH8ryaG2UYNxUhfAzHhx8HyyrXJ7eVJh9pww=
Subject key identifier: DF:B3:B3:CA:B5:30:F6:8F:30:65:20:1B:62:6A:67:16:17:A3:FC:A5
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019CA8A13189C18D734DACF9E22B4467F0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 09:01:02 +0000
Manifest this update: Sun 01 Mar 2026 09:01:02 +0000
Manifest next update: Mon 02 Mar 2026 09:01:02 +0000
Files and hashes: 1: DzilDttcXqE3Xvb3haJFRQwF9zk.asa (hash: nycTvypKFoAuxTdfFZ5SN111a0MioZNUXo+uz4SVtks=)
2: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
3: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: NM9LG5OCJKvi5Hc5rbhJQbLIWU+ohqoomITWP4/z4hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:31:89:c1:8d:73:4d:ac:f9:e2:2b:44:67:f0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Mar 1 09:01:02 2026 GMT
Not After : Mar 2 09:01:02 2026 GMT
Subject: CN=dfb3b3cab530f68f3065201b626a671617a3fca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:10:d1:96:3a:80:fe:0e:bf:ea:11:13:3f:
a8:78:cc:74:7a:af:76:6a:b8:40:af:02:b3:e9:1c:
62:26:b6:f8:3b:33:9f:85:33:3e:76:5c:f2:5d:5f:
11:0f:ee:fc:b8:29:ef:4c:f0:5f:1d:b5:0f:51:24:
f8:c4:21:28:f3:a9:6b:7e:eb:a8:fa:5b:26:02:9a:
3f:49:1a:6c:40:a7:83:b2:99:cf:86:50:6b:43:fc:
73:17:2c:fd:9a:8a:a7:30:40:1a:6e:48:db:42:d7:
2c:11:c4:12:41:6c:8b:9d:97:90:8a:32:06:08:3f:
00:92:9b:d9:08:0a:d8:92:6a:e5:21:b8:79:ec:5d:
19:df:32:de:69:6b:d3:15:2b:64:fb:19:9a:d3:22:
11:f0:ad:5c:be:cf:32:a1:4b:d1:db:3f:37:80:7e:
07:47:f3:48:dd:c0:27:cb:c3:be:60:e8:63:1c:a0:
9b:98:7e:2d:0a:4a:94:b9:5d:22:35:a6:06:d4:9c:
2c:af:9a:ac:75:02:ea:e6:0b:6b:0a:4b:a6:d8:f7:
e5:95:97:c2:16:11:5b:b7:b7:87:17:59:ee:d7:28:
c2:01:59:7b:62:11:2a:14:1a:6a:eb:76:e2:15:fd:
c6:21:15:a2:98:d5:3c:62:14:a0:a8:7e:c3:10:0a:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B3:B3:CA:B5:30:F6:8F:30:65:20:1B:62:6A:67:16:17:A3:FC:A5
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:62:d1:05:14:6a:a2:e5:62:e4:4c:c2:6f:35:28:09:c0:2a:
66:fd:42:81:c9:67:eb:d9:dc:cd:0d:97:e2:b9:2a:f4:0b:f3:
e4:d9:1a:98:6c:11:9d:c5:7f:0e:cc:23:e9:da:69:36:c6:6f:
27:6f:62:3a:f5:29:3c:09:48:4d:fd:a2:af:5c:de:59:97:f6:
54:71:ef:16:2c:f1:3a:ad:08:fb:43:27:f0:3a:2f:76:0c:68:
8c:42:cb:36:8f:c5:83:78:68:b9:e4:7e:c1:36:e8:e6:bc:aa:
20:c7:ab:4e:dd:0b:3b:c9:5b:3f:3e:e0:64:1d:1b:45:d2:fd:
29:e6:5d:f7:f9:f5:fd:aa:51:91:0e:ef:da:91:4e:95:f6:36:
d9:67:02:ea:34:75:07:31:2d:e2:e9:a8:ed:af:8a:42:04:96:
64:71:fb:67:a2:ed:55:45:0f:4a:c0:8d:71:f3:e5:2e:36:fb:
b1:29:84:be:cb:59:8e:ee:2d:dd:40:1a:40:ce:35:6f:55:98:
e9:cd:57:ac:97:49:1c:f0:b3:94:a1:c0:da:f3:0e:c1:f7:0c:
02:38:4b:cf:30:31:99:45:fd:e7:4a:63:ae:dc:e3:d9:b5:a7:
6b:c3:8c:50:52:83:db:9d:7c:c3:a4:27:3b:a7:00:c2:5a:44:
a1:be:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:17:52 2026 by rpki-client