Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: m58/0vye4Lpokb7fgJe8O8S8VFnO1bxQHQoWpmGvxeE=
Subject key identifier: 90:78:35:55:BC:1B:EF:F0:51:97:BA:B5:8D:D0:3A:52:13:4D:BB:6A
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 019D99998B2381897868D4478368B1033454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 0686
Signing time: Fri 17 Apr 2026 04:01:09 +0000
Manifest this update: Fri 17 Apr 2026 04:01:09 +0000
Manifest next update: Sat 18 Apr 2026 04:01:09 +0000
Files and hashes: 1: 03j6ust2FRNKlpnD77gFA2A2Nm8.roa (hash: c/t/jvNYvALud0vqh9dV+CjRih2M2dPRGS927xjV27w=)
2: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: Y1joNW46dIkT9uFnWhNJw79I6FYTWKRrrlAzm4+E3ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8b:23:81:89:78:68:d4:47:83:68:b1:03:34:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Apr 17 04:01:09 2026 GMT
Not After : Apr 18 04:01:09 2026 GMT
Subject: CN=90783555bc1beff05197bab58dd03a52134dbb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:05:8c:bf:f4:14:b1:55:19:1a:ac:2c:66:
b7:67:c1:8c:22:14:e1:eb:97:49:84:51:07:fa:ea:
28:c7:e5:04:d0:cd:dc:ad:9f:8c:75:59:bf:a0:3a:
6e:aa:7a:55:74:be:e9:47:f7:b4:ba:bf:84:7d:3c:
db:b0:40:53:ed:6f:73:4f:ac:9d:c8:81:7e:47:a1:
ef:87:1f:5c:cb:d3:bf:81:21:6a:5d:e4:35:0e:6d:
2c:db:42:28:f9:09:f0:dd:bc:c3:93:d2:87:fc:d2:
11:6d:13:8c:d2:e7:bc:d6:e9:fd:32:2e:a4:d3:de:
ec:27:d0:97:d3:c1:68:49:49:c6:3d:3e:c3:b9:70:
d8:2a:28:5b:e8:00:ae:13:ca:6b:53:83:ba:0f:ef:
ce:77:09:6e:eb:6e:85:9c:b6:fc:26:fe:1c:5d:24:
c7:b1:ee:89:e5:b5:c7:f7:91:4e:d0:b0:ca:43:c6:
1c:31:5e:96:79:5a:fe:87:1f:7b:a5:0d:8e:5a:9e:
20:60:f9:a2:03:69:05:d8:d0:93:ea:85:3d:be:49:
24:ed:b8:72:a8:e1:c4:8d:91:ee:e0:13:9d:95:3d:
e0:7c:56:e4:b0:eb:62:2d:86:07:6b:28:db:2e:dc:
65:60:53:82:c9:ee:1e:2f:aa:ba:36:14:be:d3:eb:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:78:35:55:BC:1B:EF:F0:51:97:BA:B5:8D:D0:3A:52:13:4D:BB:6A
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:45:10:a4:0e:26:e5:f6:28:39:b0:58:69:cc:38:4c:79:d6:
4d:28:cf:f7:67:43:1f:c9:0e:3f:93:6f:17:17:28:bc:df:a7:
8c:17:a6:42:db:fd:8a:b2:2a:23:22:c7:34:9c:5c:50:0f:ff:
d9:10:26:fe:a0:ef:ce:96:e9:2c:e5:b5:e4:5d:4c:e0:3f:c9:
a5:47:2e:94:62:3e:3c:d8:8f:95:05:c8:3e:b2:09:db:24:2e:
c9:df:55:b6:5e:62:40:cb:57:90:3c:77:b6:39:70:32:07:dc:
b0:84:e8:c6:17:58:ff:57:07:52:2e:24:1a:d8:98:f8:d3:fa:
ae:0a:ba:a4:95:ac:09:38:e9:dd:2a:e7:da:81:c4:57:c1:43:
f2:df:45:9f:fa:03:ca:5b:b9:a4:72:d3:79:e8:41:98:41:dd:
41:d3:78:b9:60:61:c2:7d:17:65:c4:81:cf:a8:b0:32:17:d6:
7a:f9:5d:31:6e:50:70:32:fc:79:86:c8:81:c9:b6:99:13:c4:
52:e9:b2:ce:0c:33:56:2f:e7:18:42:31:f3:2f:d9:d3:22:dc:
0f:e9:b2:6c:9a:3c:f6:cd:9e:76:fb:1d:15:49:e2:9b:84:b6:
dc:4d:6a:37:2e:19:3a:98:3d:b5:84:38:60:d6:b1:97:94:4c:
4d:f1:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:40 2026 by rpki-client