Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: /zASrWSv8Va8HniHKf6PtehbnBHlRrjfnJAZYPMgT94=
Subject key identifier: F4:B9:25:8E:B9:07:09:E7:71:74:48:16:91:FE:26:83:8F:B8:FE:F5
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019D3865606FA7CB139F288C134DA828A307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: 1-gO4QgPPqp1Kak3_666d1-5pe9c.roa (hash: qTzaIkVWn2wQ4/BhUvBh5PhVLGzlNE9Q4I9h2wouay8=)
2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: 1PBkJQZq1tDEkZGcuDK6PtnYJIwCdwkb3yND6b7dHzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:60:6f:a7:cb:13:9f:28:8c:13:4d:a8:28:a3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=f4b9258eb90709e77174481691fe26838fb8fef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:4a:06:35:cc:99:16:7f:38:b5:a0:cf:fd:
31:60:44:89:e3:fb:cc:0d:c7:b4:f0:da:36:c4:c5:
f4:fd:f9:19:af:49:c9:91:14:3e:07:d8:03:b9:3f:
c5:84:81:59:da:f6:4d:b5:4a:f7:4d:0a:a0:be:66:
cd:50:26:69:52:56:4b:31:45:6f:63:7d:60:c9:f2:
d2:53:92:d3:d6:a3:31:41:e1:29:9d:5b:bd:0c:44:
d4:15:87:9c:59:87:c7:0e:e1:b5:bd:8c:27:06:fb:
1c:0f:3e:ea:1f:f5:57:c1:cf:95:f6:77:8f:eb:23:
ff:c1:d4:72:fd:93:24:a0:22:8b:4c:3b:a0:de:dd:
a9:c6:8e:6e:88:40:fb:3b:2d:24:b8:f2:ed:7f:04:
ed:a3:c5:c9:8e:2c:c3:b3:4a:1b:98:d9:8a:01:b7:
3f:7c:08:22:6c:40:41:1b:8e:e6:be:1d:0b:cb:c7:
5a:78:c3:42:1b:42:99:d0:a9:a0:0c:ec:89:bf:4d:
90:a4:94:fc:16:bf:ae:65:e9:63:30:69:22:1c:bf:
2f:e2:dd:50:42:f8:a8:8e:33:b0:d7:3f:d0:e1:28:
87:46:f1:5a:31:18:3f:46:1f:ed:1c:45:fb:10:ce:
2e:db:a3:63:ac:65:ac:b0:4b:21:0f:a9:38:b6:5c:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:25:8E:B9:07:09:E7:71:74:48:16:91:FE:26:83:8F:B8:FE:F5
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:09:d4:f6:84:34:1c:a3:16:86:ed:de:69:82:c7:ae:51:da:
b6:01:56:5d:09:e1:a4:9f:4e:cc:e5:7d:4a:27:e9:d9:3a:d9:
40:99:a6:78:49:37:c5:89:a1:94:30:05:6d:14:81:c2:ff:20:
55:b7:55:99:44:a8:8f:0f:49:7c:19:b0:5b:ff:19:fa:97:61:
7a:41:ff:db:58:44:52:d9:10:33:6d:07:dc:03:3c:07:09:b4:
61:0b:5a:58:5e:19:5f:c3:f3:fb:ec:2d:5b:d8:8d:33:85:0c:
f5:8f:e7:0c:fa:5c:1d:9f:2a:52:a7:59:e5:18:fa:7e:1a:5c:
31:61:0d:97:7f:c7:db:bf:91:9d:32:a9:87:4e:dc:98:57:49:
6f:96:fc:6f:27:89:0d:97:b2:93:5d:4d:55:e1:a8:5e:1b:f4:
1e:77:4a:69:b6:1b:8b:1d:19:d2:f3:a0:f1:aa:58:a3:99:e9:
50:51:44:93:90:ec:4c:b4:cb:93:dd:75:03:2e:92:64:80:71:
d2:93:ce:85:1e:88:9b:19:4e:44:24:3f:e4:ca:55:d3:57:bb:
04:4d:b5:ca:3e:ec:ba:89:6b:8d:57:90:7e:2f:40:a9:c5:7b:
75:d3:f8:82:4b:8b:c3:04:d8:99:94:2e:f5:e4:e0:3a:91:61:
eb:4a:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:11 2026 by rpki-client