Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier: rNw6UFJYTrL3F2397rFgt6Aef2oSeh+Q+mdrhJkxdi4=
Subject key identifier: 8E:D8:A6:8F:26:B5:22:74:D4:0C:3D:40:80:0F:5B:98:0C:81:14:04
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: 019D3752F5A3E3131383256162B95042E8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number: 0F5E
Signing time: Sun 29 Mar 2026 02:01:16 +0000
Manifest this update: Sun 29 Mar 2026 02:01:16 +0000
Manifest next update: Mon 30 Mar 2026 02:01:16 +0000
Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: +cO2kJSBq4+//leAEz1p3lm8pL/rfXGuBIs9iYTX6Ow=)
2: ovrf878QfyGREV5ySXZAKG2wEj0.roa (hash: 8FVx6K1N+lYlmVzhGRofLmSyeuuSSiLMjYmgLA57T9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f5:a3:e3:13:13:83:25:61:62:b9:50:42:e8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: Mar 29 02:01:16 2026 GMT
Not After : Mar 30 02:01:16 2026 GMT
Subject: CN=8ed8a68f26b52274d40c3d40800f5b980c811404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:3f:d2:01:f5:bd:fa:e3:8a:a9:eb:db:78:
45:5d:1c:69:2b:ce:84:81:59:80:11:c8:45:ef:73:
ed:1b:b2:34:5a:d1:4c:67:b6:f1:eb:e0:bb:1b:b6:
7a:56:56:8e:62:fa:29:df:00:e5:1e:79:fe:55:87:
4d:f3:d7:db:26:e9:7d:19:b7:dc:8b:8d:d1:57:b6:
67:2b:fb:0d:72:9d:37:ba:bc:c8:a4:fe:0c:f4:f6:
b7:44:91:7c:8e:11:81:bf:02:ca:c7:b7:c7:28:30:
91:38:b3:29:1b:50:75:a2:dc:00:d7:94:e5:46:ec:
8b:a4:73:72:4e:38:84:b3:e3:d0:82:98:0e:db:15:
a3:77:de:03:da:39:ea:bf:77:f2:4d:33:e9:9f:de:
14:53:9a:6f:25:b6:78:ba:b1:bc:5e:c8:65:f1:18:
e7:ee:4a:d2:91:41:f6:b0:94:c3:ef:70:26:92:6b:
6e:c6:f0:b0:4f:00:cf:1b:8f:10:10:e2:7b:32:42:
63:84:39:a9:f8:ad:3a:bd:7c:1a:46:b1:ad:dc:88:
ab:a3:8f:76:38:2f:0d:5e:95:be:8d:54:a1:af:67:
b8:26:e8:e4:e3:4e:0f:9d:fa:75:99:ab:43:81:2f:
ca:fb:f4:0b:4f:6f:08:1a:76:98:f5:76:b9:67:1c:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D8:A6:8F:26:B5:22:74:D4:0C:3D:40:80:0F:5B:98:0C:81:14:04
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:94:54:10:7e:54:bf:6e:e6:92:33:69:e5:f8:03:8d:21:1c:
95:72:17:0d:d4:bd:bf:f5:7d:34:39:f5:67:d1:a0:b4:03:61:
f5:a2:03:6b:ec:02:57:25:e4:97:e4:66:d4:5a:c0:b5:6d:da:
bf:df:7d:bf:e5:e2:e3:8c:b1:41:41:7b:68:b4:55:b7:dd:a4:
f3:4f:bd:19:d9:8b:4f:a5:f9:34:69:24:79:1b:49:94:53:5c:
21:a7:d1:4d:f2:d5:0f:33:45:fd:76:79:f9:43:7f:e9:c4:6d:
8a:62:c3:f9:72:5a:c8:fb:85:1e:de:cb:b4:bf:5d:5a:87:a8:
8c:e6:69:fc:43:46:8b:1a:6d:15:2a:77:6f:bf:f8:be:c7:09:
c4:8d:f1:95:d1:9f:1e:04:87:b0:f5:44:5b:04:12:d1:68:e7:
f6:9d:47:35:4f:9c:62:b1:69:d1:1a:34:e5:da:94:e1:ae:b9:
b7:9f:e1:c5:ce:4f:0f:c8:6b:15:c1:62:5b:d9:f6:ec:91:8a:
68:fe:fc:f7:e7:3d:e8:0e:88:1f:77:87:df:5c:c3:25:c1:58:
7b:bd:ec:50:cf:e3:e1:6b:d4:26:eb:3d:f0:86:e3:52:80:01:
32:31:67:38:89:27:f7:a7:c3:cd:a0:39:24:70:2d:01:ee:f4:
44:b5:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:51 2026 by rpki-client