Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: xXHq/+DKjmYJ3dfCVkhnsLQ0S6kZS/xwhslKoVtbbWw=
Subject key identifier: 9C:E3:69:45:5D:17:44:07:D0:8C:3C:77:41:5C:17:55:C8:2C:C2:F4
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 019D390A1BE215DE03FE1D51C2BC51A43E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 1332
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: fpJWkDTDxVo8r4rmB+EjPg/ox/K1L6C6GGVggFR3J5w=)
2: wKG5f7dn1-pgRZqivJIzmXImgvk.roa (hash: 9MbV7Vdo6+ToMH+TbPulkfdTZLPlSBCEwYkmIQl3ggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1b:e2:15:de:03:fe:1d:51:c2:bc:51:a4:3e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=9ce369455d174407d08c3c77415c1755c82cc2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:4a:5f:5e:ac:23:54:99:74:e9:01:f0:cb:
1f:99:3c:ca:fc:c1:de:67:96:27:c9:b3:e2:69:dc:
3f:22:fd:17:6c:49:05:71:7a:92:cd:b0:1c:6e:46:
28:0d:41:04:bf:46:4f:ca:b1:b9:90:65:f4:ac:ce:
61:6e:72:d3:1d:2d:b2:e2:e9:80:6a:95:e3:71:47:
4c:be:36:fc:d5:d2:60:45:7c:f9:12:c2:c7:8e:fa:
3d:c0:ce:11:68:72:ab:2e:b5:45:1d:bf:11:ca:df:
de:3e:59:e2:16:1e:32:1f:0a:b9:65:8f:b9:c8:bc:
af:90:43:12:69:38:9a:2e:65:bc:66:4a:4e:a8:8b:
cd:00:94:04:b7:76:d9:44:e0:4e:14:04:d6:9c:ea:
fd:a4:bb:89:74:80:3a:2d:61:b2:42:d3:49:ba:31:
6a:4c:28:95:be:d8:7e:bd:25:e7:b5:c0:2e:4f:1f:
ef:a9:34:ca:f1:39:78:d5:82:42:14:5b:0f:cd:6b:
f5:3e:f5:3e:04:8b:3f:04:b2:f3:14:b4:d7:93:3f:
40:96:ab:7a:1d:4a:c6:75:1e:28:94:06:a2:79:c8:
7c:b5:02:9d:4e:10:5d:d7:1c:c8:d4:d2:e9:8b:fb:
4c:54:65:0a:20:eb:12:42:f5:64:28:85:b2:c3:34:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E3:69:45:5D:17:44:07:D0:8C:3C:77:41:5C:17:55:C8:2C:C2:F4
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:42:1a:fa:12:6d:6c:f5:00:1d:cd:0e:95:4a:88:89:30:09:
95:7a:e6:2d:b5:e1:a1:19:8a:a1:54:79:29:64:a0:99:55:f0:
6c:8b:00:d0:44:19:66:2e:c4:d7:00:17:70:2a:1b:e1:aa:2c:
81:f4:b2:8a:bc:f5:ab:22:28:d8:9c:71:ce:4b:7d:6e:64:21:
93:60:c2:37:88:69:b4:57:29:6c:84:49:6a:a1:e7:4d:56:ee:
9f:16:aa:87:d7:20:0e:ad:21:5f:7e:48:06:bc:b5:b0:03:b6:
d4:32:f9:2e:e5:1c:91:49:a6:77:5f:1e:30:93:fe:2d:2e:ee:
ca:df:35:4a:75:07:ee:de:a6:40:63:b9:3e:54:8c:6d:46:1c:
45:5b:68:25:81:9e:12:e3:74:6a:9a:f1:27:1a:63:97:f3:d2:
f7:91:eb:42:df:e6:14:a0:a4:17:23:dd:52:25:49:0d:97:0c:
a3:64:8e:97:a4:65:4e:42:00:27:a8:ad:fc:8a:b5:63:24:db:
96:6d:45:30:ad:90:99:2a:04:aa:31:47:05:65:51:e2:b0:9f:
21:ff:67:c5:12:40:f5:8d:39:8c:6f:03:e7:cc:04:e0:ca:28:
ce:53:8d:60:75:b8:8a:de:57:f2:99:ad:f5:92:69:21:72:f8:
20:67:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:42 2026 by rpki-client