Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
File: otCM3GpDDvDaiCmRcla2rY0KNvk.mft (raw, json)
Hash identifier: jy8LwZkZE7dZUU9zKMSDuRjltcD+LqAsUlfBoxggbC0=
Subject key identifier: 47:8E:EE:46:DE:2B:EC:27:E3:F4:84:9F:D8:A2:39:B2:30:67:47:56
Authority key identifier: A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9
Certificate issuer: /CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9
Certificate serial: 019D9886801B78F8D1085B3A47A45C2DA5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
Manifest number: 0AE4
Signing time: Thu 16 Apr 2026 23:00:44 +0000
Manifest this update: Thu 16 Apr 2026 23:00:44 +0000
Manifest next update: Fri 17 Apr 2026 23:00:44 +0000
Files and hashes: 1: SjIFpOv8CU5TAe5BOSptvm-t2X8.roa (hash: noG1uYmKn+lp5DHEKlchBRM5lgdWGa4N1VmV9ta3T+w=)
2: otCM3GpDDvDaiCmRcla2rY0KNvk.crl (hash: cR4Q78DAh8D+zPkL5MZmoWGp0kOuxpYdtI96qmlqcC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:80:1b:78:f8:d1:08:5b:3a:47:a4:5c:2d:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9
Validity
Not Before: Apr 16 23:00:44 2026 GMT
Not After : Apr 17 23:00:44 2026 GMT
Subject: CN=478eee46de2bec27e3f4849fd8a239b230674756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:7a:83:19:eb:e9:4e:36:38:53:4b:dd:9f:
65:f2:41:cc:7b:7a:eb:61:bf:a9:c4:ba:e3:5e:08:
64:c9:37:f9:00:bc:82:8b:ca:a6:74:c9:a5:5a:f7:
1a:be:1e:26:af:85:b9:18:50:ee:6d:58:b7:fe:e5:
8d:53:af:57:38:8e:c0:ba:64:d3:13:dc:5b:a8:c9:
48:75:b8:d1:4d:9e:e6:21:a2:8b:3a:8d:39:4e:33:
8b:6d:4a:f0:72:f8:59:f0:60:ee:ce:bf:8b:ed:3a:
16:e2:36:81:54:b2:83:3e:2c:b3:37:f4:cb:0e:0b:
ef:96:f1:e8:b7:e1:97:85:e7:ad:8e:c3:63:6e:1f:
2a:3a:d6:ac:e1:7f:92:d6:3b:25:49:f6:9c:84:b4:
5b:e0:6c:29:89:0b:3c:40:29:5f:7a:93:46:6f:df:
5e:fe:60:48:e2:85:0c:cc:c8:2c:19:be:e3:e3:4d:
3a:b3:d9:09:fc:b5:ac:3a:6d:9a:2f:b1:55:03:50:
ae:75:3d:fe:17:d6:c0:82:35:fb:b1:c4:ae:c0:fb:
f3:20:81:55:b6:45:65:51:3c:9e:28:e2:2a:40:36:
04:a3:8d:21:53:48:82:e0:62:95:e0:e6:f4:f7:5a:
32:a1:6a:97:2e:d5:66:e4:fd:cf:c8:3a:bc:12:8e:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:EE:46:DE:2B:EC:27:E3:F4:84:9F:D8:A2:39:B2:30:67:47:56
X509v3 Authority Key Identifier:
keyid:A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:19:5c:6e:0b:c6:aa:eb:9b:83:4a:2e:d3:ac:4a:33:c5:7a:
d3:7c:c6:43:fc:27:bc:f0:1f:73:2a:e3:1f:0c:62:38:b9:89:
dd:91:7d:3a:71:bb:08:37:6e:d5:92:49:df:05:19:a4:15:ea:
30:96:a1:48:ef:23:a1:1a:42:4f:ab:16:40:81:f0:59:4d:9b:
7b:d6:2e:98:e9:d0:8f:8a:22:3d:b4:6d:35:1e:cf:02:fe:1e:
0b:82:91:fb:9a:ac:13:36:df:f4:dc:51:74:a2:ac:e5:b2:86:
f3:87:03:e7:0c:11:97:10:5a:b1:1f:76:2e:da:f8:b8:ac:38:
47:04:b2:80:17:e4:89:0e:e9:ad:9f:b9:69:38:14:bb:dd:83:
c3:94:75:29:d1:98:79:ab:19:e6:a3:d0:4b:a7:1d:2a:8d:39:
8d:c4:77:50:ee:c9:d7:43:57:28:96:91:bd:83:6d:8d:73:0c:
f7:6b:2e:cf:b4:9c:bb:59:80:85:9f:5b:a6:38:fb:da:63:1c:
f9:8f:e9:e6:57:af:40:52:ca:23:71:68:c3:45:1e:1d:71:80:
b8:0e:0f:4a:46:93:5f:93:11:a5:ba:77:58:5a:a3:fa:77:a6:
ea:68:f0:ac:b2:82:12:c7:d3:30:78:62:44:b8:26:f1:ce:f3:
0c:f3:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:53 2026 by rpki-client