Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
File: OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft (raw, json)
Hash identifier: 6pYi6aQpfJOLQZldFMmsxeqdEVbFqLUsKE97pmB76Z4=
Subject key identifier: CA:89:A9:12:4C:EF:96:B1:74:BA:1D:4F:01:7E:71:29:CE:8B:83:55
Authority key identifier: 39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
Certificate issuer: /CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Certificate serial: 019CAA218ADE658495ECFFE351A6B41B6429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
Manifest number: 060A
Signing time: Sun 01 Mar 2026 16:00:50 +0000
Manifest this update: Sun 01 Mar 2026 16:00:50 +0000
Manifest next update: Mon 02 Mar 2026 16:00:50 +0000
Files and hashes: 1: 03j6ust2FRNKlpnD77gFA2A2Nm8.roa (hash: c/t/jvNYvALud0vqh9dV+CjRih2M2dPRGS927xjV27w=)
2: OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl (hash: UP0VldjfLfkKUegPDqDzJCoG8EhL4S4AMW/7PeKw6h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:8a:de:65:84:95:ec:ff:e3:51:a6:b4:1b:64:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937307000b9333f88000a35bf3b5b8fe38c16de
Validity
Not Before: Mar 1 16:00:50 2026 GMT
Not After : Mar 2 16:00:50 2026 GMT
Subject: CN=ca89a9124cef96b174ba1d4f017e7129ce8b8355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:f4:e8:37:13:53:33:d6:45:90:66:8c:ae:
23:fa:8e:77:2d:7a:07:03:09:e4:ef:50:b4:6e:b9:
57:8a:05:07:73:22:8a:c8:19:d2:eb:79:ec:d1:c4:
0b:d4:07:9d:64:98:29:11:05:d7:47:5e:e6:bd:c2:
23:84:8a:63:3c:8e:5f:46:88:37:45:ea:f6:ac:73:
72:44:9d:79:87:e9:64:d2:87:71:05:8f:64:a8:82:
ac:e2:19:0e:53:8f:ff:f8:a7:9f:58:76:5d:aa:dd:
52:d2:8f:d6:24:a1:12:87:31:45:95:9a:cd:79:9a:
48:0f:fe:65:e2:6a:d8:9c:be:36:53:46:dc:b8:cd:
66:3c:59:f2:da:34:6f:be:9b:0a:6a:ed:36:9a:c0:
0b:45:6f:a5:d2:08:cb:b6:cc:88:89:db:ac:27:30:
06:43:b1:43:aa:2e:fb:dd:52:ff:45:d8:f7:4e:d4:
60:d3:78:49:39:a0:b0:38:6c:10:b5:46:df:2a:bb:
c6:30:a6:5b:b3:88:bc:89:ef:20:d0:00:08:3c:69:
90:62:bb:20:9a:2f:da:57:41:23:21:77:86:02:6b:
15:52:7e:3f:bb:a7:73:2b:b2:f8:47:93:6b:d3:71:
9b:a7:56:7f:35:83:34:db:6e:de:ec:ba:60:ce:6b:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:89:A9:12:4C:EF:96:B1:74:BA:1D:4F:01:7E:71:29:CE:8B:83:55
X509v3 Authority Key Identifier:
keyid:39:37:30:70:00:B9:33:3F:88:00:0A:35:BF:3B:5B:8F:E3:8C:16:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTcwcAC5Mz-IAAo1vztbj-OMFt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fa2af0-a7e8-4610-907c-c93cc4775d46/1/OTcwcAC5Mz-IAAo1vztbj-OMFt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4e:4b:2c:dd:6e:e0:3d:d8:b5:6d:10:87:cb:53:7f:4a:99:
42:71:42:53:30:76:0a:8b:60:76:ad:85:b1:38:f7:01:86:57:
48:40:12:68:5b:38:09:bd:3b:55:61:42:30:e0:97:9e:b5:42:
72:95:87:96:8a:e1:ab:4e:6c:a8:ee:b6:be:b6:6f:e3:be:f0:
1d:32:9f:d9:81:bd:b7:a1:92:25:33:4a:a2:01:58:97:da:bd:
aa:d0:fe:43:45:5b:3b:9b:a2:16:66:f9:95:a3:a1:8e:dd:48:
86:a1:e8:1b:ba:62:a4:99:64:a7:dc:3b:6e:a6:d1:a1:4b:5c:
19:f3:25:c9:b6:5c:1f:fb:8d:50:57:04:a5:e1:86:2f:93:cd:
2e:c5:a6:c0:87:1e:d4:11:16:e1:0d:29:56:2e:04:b8:9f:dc:
e2:7f:d8:5a:a8:1c:92:7e:ea:4f:94:08:90:4c:d7:e9:e3:cc:
17:3b:ae:f3:d8:69:22:48:37:bb:19:84:fe:3b:74:29:1c:69:
e6:72:24:b4:9b:5c:ee:5b:fc:24:04:31:b9:5a:32:16:d1:1f:
99:24:66:11:eb:61:a3:0f:30:c3:1e:85:91:00:64:c8:91:3c:
c4:e1:80:f8:7f:ce:16:96:c6:bd:79:1b:a1:fe:e2:da:04:bd:
c8:4a:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:36 2026 by rpki-client