Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: /FDmyFOUAX3jTJDtphnOeoQXTABGlZfJIdwXo2DZ6Vk=
Subject key identifier: 4A:8D:5B:06:C1:2A:96:11:03:00:24:13:6E:77:94:14:BB:0B:A6:A8
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 01A03F72AFE65F7D51E0C93F7E15E598D1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 14C3
Signing time: Wed 26 Aug 2026 19:01:15 +0000
Manifest this update: Wed 26 Aug 2026 19:01:15 +0000
Manifest next update: Thu 27 Aug 2026 19:01:15 +0000
Files and hashes: 1: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: 49NcZWQe39GYa4DZRYSEyRJunva8NoUTv7PFYeL2PlA=)
2: wKG5f7dn1-pgRZqivJIzmXImgvk.roa (hash: 9MbV7Vdo6+ToMH+TbPulkfdTZLPlSBCEwYkmIQl3ggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:af:e6:5f:7d:51:e0:c9:3f:7e:15:e5:98:d1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Aug 26 19:01:15 2026 GMT
Not After : Aug 27 19:01:15 2026 GMT
Subject: CN=4a8d5b06c12a9611030024136e779414bb0ba6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:8f:10:c5:45:af:36:ae:ae:c9:03:42:36:
0c:2e:99:62:37:4e:94:f0:5b:08:74:dd:fe:bf:fe:
24:a3:4b:e1:d8:96:bd:63:0e:1f:ec:5d:89:d6:31:
24:0d:44:ea:ee:88:64:18:77:a2:ae:bf:e4:dd:cb:
1a:37:93:68:27:47:b0:23:64:a0:52:5f:38:54:ba:
97:f1:02:71:f9:c4:bf:08:41:c3:62:83:c2:ed:6f:
c6:e8:84:6b:56:53:70:00:84:b3:18:81:01:bf:f4:
46:5d:a5:9a:ed:25:2c:31:df:d8:04:89:02:1f:00:
a7:ce:cb:f0:b9:e4:3b:dd:a5:64:23:ce:a5:de:e4:
71:49:cc:34:d6:b6:f2:a5:e0:0e:24:14:b2:4d:56:
28:03:da:a9:1e:2f:83:36:79:24:ce:37:d1:bd:bd:
02:01:04:22:e5:1d:b1:4b:02:7d:fd:c9:87:8e:05:
ac:6f:2b:d1:80:5b:6f:1d:9c:a0:66:95:71:b3:f6:
8c:18:6c:66:db:8a:73:90:0b:7c:cd:66:80:47:72:
d4:26:e5:0f:e1:47:da:17:db:97:c9:66:93:08:c6:
87:37:06:26:77:13:ce:54:d9:b2:70:30:8c:c8:a2:
96:c1:ab:79:cd:1e:e1:41:6b:79:56:f2:05:32:d9:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8D:5B:06:C1:2A:96:11:03:00:24:13:6E:77:94:14:BB:0B:A6:A8
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:01:69:1e:a8:9d:02:3a:10:f1:55:3e:bd:82:9e:70:0d:cc:
b7:59:1f:9e:91:2f:ec:56:14:0e:14:a9:b1:4d:94:d4:cf:91:
89:31:37:02:52:ea:97:10:60:51:6b:a4:b2:88:a6:11:90:5e:
1c:cc:c8:3f:a7:72:ba:45:98:a4:44:49:bb:9c:c8:ef:cb:88:
ad:a3:2a:4b:5d:77:83:1c:95:96:4e:c0:02:c2:55:e9:97:54:
21:09:2e:35:3d:8c:02:7c:e2:6c:6a:24:cb:b1:b6:44:b4:c6:
a2:1f:6f:30:ec:fb:f3:eb:09:6c:14:52:83:67:5a:ad:5a:65:
c9:98:59:81:c2:87:ac:02:98:7c:4b:c5:5d:21:9f:dd:56:43:
b5:cd:23:a2:5a:51:f2:8a:0b:17:90:8b:6d:00:d5:a7:8b:d9:
45:f2:ca:10:b0:ab:bd:9a:26:3d:a8:4f:8b:e9:1d:78:c9:21:
21:5a:2a:d7:4d:fd:bd:ee:13:b8:49:f2:62:97:f4:10:29:64:
51:2b:c2:03:c8:5f:18:d1:ad:85:43:b7:13:2f:e7:0c:82:1a:
82:74:8e:b1:12:92:be:92:34:4c:7f:04:9c:c6:39:6f:6e:a8:
a6:de:51:98:7c:22:2f:db:7f:9b:c9:bf:36:b0:9e:57:d4:a6:
f2:50:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:48 2026 by rpki-client