Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json)
Hash identifier: KYyw0rvDi/bwpGBCVNiLbiVRllKViQmKfzktIJgOjtk=
Subject key identifier: 88:4A:C4:F6:D4:76:26:8E:83:3A:0F:78:1E:AA:F4:2D:B2:28:DB:78
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 019D9BF5A099550E1346DA4DEFD5E363A7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 15:00:58 +0000
Manifest this update: Fri 17 Apr 2026 15:00:58 +0000
Manifest next update: Sat 18 Apr 2026 15:00:58 +0000
Files and hashes: 1: DzilDttcXqE3Xvb3haJFRQwF9zk.asa (hash: nycTvypKFoAuxTdfFZ5SN111a0MioZNUXo+uz4SVtks=)
2: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=)
3: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: hHW1EF4kBjTnk+AdOJFRUNLkBmaLgqxZpSddYFDW1LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:a0:99:55:0e:13:46:da:4d:ef:d5:e3:63:a7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Apr 17 15:00:58 2026 GMT
Not After : Apr 18 15:00:58 2026 GMT
Subject: CN=884ac4f6d476268e833a0f781eaaf42db228db78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:bb:d8:85:ea:21:8b:3f:77:c5:26:e8:85:
e4:95:e5:c5:a3:bd:20:33:df:61:45:62:a2:02:ce:
60:85:f2:00:19:aa:a9:fd:19:a3:64:f1:70:7a:4d:
92:fb:fe:df:e7:ad:3b:7e:2a:55:d7:07:1b:df:da:
79:37:bf:a8:8e:c4:69:87:95:b2:b0:91:1a:9f:35:
5e:d9:c4:04:34:18:69:77:24:98:dc:5e:38:9b:a8:
75:a0:ee:62:00:61:19:30:8f:a5:26:52:02:2c:db:
c5:94:01:28:e7:53:92:5e:b2:9b:2a:2f:d7:a0:06:
8c:13:a7:d3:fb:2b:38:c5:15:37:5f:ca:86:2b:4b:
42:1f:a9:48:a5:44:37:09:02:af:6c:bc:dc:a2:8a:
ed:ca:32:e1:b5:db:64:59:64:84:14:70:2a:67:cc:
5c:0c:09:a0:fe:c7:8d:f2:5a:99:ee:49:8e:a7:57:
43:ae:dc:2b:07:0e:04:de:47:36:c7:bf:ee:a2:96:
df:45:36:4e:57:02:7b:23:8f:bc:df:7f:17:74:98:
fa:11:5d:12:55:5b:c0:35:2b:ed:44:88:81:dc:1f:
28:fc:c1:13:fd:6f:ce:b8:b1:0c:93:ec:7b:68:32:
9c:44:52:23:a9:2b:eb:18:58:69:f9:c9:6a:fa:3d:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4A:C4:F6:D4:76:26:8E:83:3A:0F:78:1E:AA:F4:2D:B2:28:DB:78
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0b:2e:ae:31:ad:86:7c:87:41:38:ce:87:08:67:69:7e:26:
f5:03:8b:eb:79:cd:9f:b9:d3:e3:24:a7:b6:7f:62:9e:8e:40:
ab:ab:a4:b8:6f:c5:b0:84:54:bf:31:f6:6d:43:ee:30:d4:4b:
63:64:3a:fb:6d:48:fb:96:9a:6d:66:41:87:36:9f:fa:f1:22:
e2:0e:09:4f:2f:5d:7a:df:c1:5a:a0:81:2a:06:35:bc:46:c2:
b3:a0:fc:6d:67:6d:b9:22:ea:03:cb:98:af:c0:6d:a3:03:8c:
9d:23:e2:0e:31:ed:1a:61:bc:22:71:ad:b6:81:4f:d5:6a:b5:
c4:7a:84:13:0e:bd:01:2d:00:5b:6e:de:66:e7:1d:8f:9b:cd:
24:f6:d7:4e:f1:87:40:76:b0:3c:e6:24:66:b0:20:82:ad:f7:
50:c9:ea:27:27:18:b7:e8:86:30:f0:9a:d7:2d:ca:2a:12:eb:
b6:3a:9a:23:5d:53:89:e1:21:b6:aa:88:a4:e5:38:0b:72:66:
55:7d:ad:16:81:92:c2:12:c4:68:63:24:5a:51:91:f8:eb:1b:
9a:7b:7b:dc:9c:83:90:fb:5b:28:8b:d3:75:0c:f3:b7:d2:94:
f9:a9:65:fa:01:21:5d:a4:5a:2e:d9:86:5a:4a:d7:88:15:b0:
71:b7:7d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9aCZVQ4TRtpN79XjY6f1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzA0MmQxMzdmYmIwM2JlYmE2NDIxZjMzYTg1MjViNTJh
ODhmN2EwHhcNMjYwNDE3MTUwMDU4WhcNMjYwNDE4MTUwMDU4WjAzMTEwLwYDVQQD
Eyg4ODRhYzRmNmQ0NzYyNjhlODMzYTBmNzgxZWFhZjQyZGIyMjhkYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwy72IXqIYs/d8Um6IXkleXFo70g
M99hRWKiAs5ghfIAGaqp/RmjZPFwek2S+/7f5607fipV1wcb39p5N7+ojsRph5Wy
sJEanzVe2cQENBhpdySY3F44m6h1oO5iAGEZMI+lJlICLNvFlAEo51OSXrKbKi/X
oAaME6fT+ys4xRU3X8qGK0tCH6lIpUQ3CQKvbLzcoortyjLhtdtkWWSEFHAqZ8xc
DAmg/seN8lqZ7kmOp1dDrtwrBw4E3kc2x7/uopbfRTZOVwJ7I4+8338XdJj6EV0S
VVvANSvtRIiB3B8o/MET/W/OuLEMk+x7aDKcRFIjqSvrGFhp+clq+j1iiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhKxPbUdiaOgzoPeB6q9C2yKNt4MB8GA1UdIwQY
MBaAFKEwQtE3+7A766ZCHzOoUltSqI96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUt
ZjZiNmMwNDkxNmExLzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUtZjZiNmMwNDkxNmEx
LzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQsurjGt
hnyHQTjOhwhnaX4m9QOL63nNn7nT4ySntn9ino5Aq6ukuG/FsIRUvzH2bUPuMNRL
Y2Q6+21I+5aabWZBhzaf+vEi4g4JTy9det/BWqCBKgY1vEbCs6D8bWdtuSLqA8uY
r8BtowOMnSPiDjHtGmG8InGttoFP1Wq1xHqEEw69AS0AW27eZucdj5vNJPbXTvGH
QHawPOYkZrAggq33UMnqJycYt+iGMPCa1y3KKhLrtjqaI11TieEhtqqIpOU4C3Jm
VX2tFoGSwhLEaGMkWlGR+Osbmnt73JyDkPtbKIvTdQzzt9KU+all+gEhXaRaLtmG
WkrXiBWwcbd9cQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:13 2026 by rpki-client