Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: zLgqWzXIRJiD3TXw+LmJ0NSr4i+nCs6FX5Ajro/GF3k=
Subject key identifier: 2A:C4:9D:F6:62:F0:E4:CF:DE:2B:41:87:3F:29:C0:8B:D4:D0:FE:F3
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 019D39E5E6ABDAD1793BFED66F04EF02B00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0BE7
Signing time: Sun 29 Mar 2026 14:01:01 +0000
Manifest this update: Sun 29 Mar 2026 14:01:01 +0000
Manifest next update: Mon 30 Mar 2026 14:01:01 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: 7ZdhYz9hBzIEW1iuE6JCAZ734pOvOMfh1PLBUdlpDaw=)
2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e6:ab:da:d1:79:3b:fe:d6:6f:04:ef:02:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Mar 29 14:01:01 2026 GMT
Not After : Mar 30 14:01:01 2026 GMT
Subject: CN=2ac49df662f0e4cfde2b41873f29c08bd4d0fef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:8b:3c:50:64:54:9e:bc:cc:56:43:d4:e0:
d8:a9:e5:a0:56:b2:90:0d:95:11:7f:35:f4:c8:17:
dc:7a:17:03:73:d2:b0:fc:ce:f3:14:91:28:98:bc:
4a:77:28:2d:17:dd:51:2f:cc:38:e5:fb:63:95:45:
de:bc:9f:62:83:16:8a:b9:dc:e6:53:db:55:b5:9e:
82:59:30:17:5c:59:7d:a9:1e:af:22:18:68:a9:f2:
1d:c5:3e:21:e0:59:94:38:e1:7f:22:7e:28:5e:27:
4c:7f:6d:ad:59:9c:79:29:fd:58:68:c3:04:9b:80:
bb:2b:7d:c5:b3:93:86:bb:51:51:04:31:59:2c:ce:
df:1a:8c:2c:e7:20:5a:5b:0f:45:a1:28:c9:a1:1c:
18:ad:e0:27:f3:5c:6b:0b:c1:3e:47:74:37:bd:86:
27:d0:10:bb:21:bb:94:8a:be:ca:55:88:16:6b:05:
46:f2:ba:94:b8:54:60:b4:df:48:c2:19:3e:40:59:
6a:a8:e0:70:89:b8:7d:a5:68:73:92:42:0a:62:34:
ed:50:f4:bd:bb:2d:e8:19:5c:da:5b:e2:aa:12:92:
1b:0a:43:57:7b:e6:20:fb:35:f2:cf:27:4d:cb:ee:
46:66:75:12:8a:7e:c9:b5:4f:19:a7:f5:1a:65:b2:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C4:9D:F6:62:F0:E4:CF:DE:2B:41:87:3F:29:C0:8B:D4:D0:FE:F3
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:59:a6:86:f2:19:4e:a0:c1:b2:49:f2:af:09:fb:56:ad:7f:
57:38:16:40:e2:b4:d3:9b:56:15:a5:3f:b5:57:cd:9a:11:54:
07:21:1b:98:94:60:d5:f3:ef:1f:32:de:19:4b:fb:fd:40:f6:
82:36:14:d7:2c:52:7f:1e:c8:af:29:66:01:7d:4f:9b:49:be:
32:9c:4c:d8:00:83:98:84:45:8f:7b:63:a1:cb:5c:6c:82:07:
7f:8c:59:cc:0f:61:99:7e:73:c5:9d:db:79:5e:e8:dd:82:b4:
16:d5:3d:44:be:f2:03:32:12:3f:18:7d:e1:96:7a:49:02:65:
c9:21:f0:63:86:17:a4:06:54:a7:90:85:41:17:c3:36:97:87:
55:09:96:6d:65:bc:53:32:94:28:9a:91:88:e1:9f:e3:7e:d0:
a8:3b:f5:e6:a7:60:40:4b:fb:98:56:9b:c4:53:56:ca:aa:f3:
32:01:b1:37:4e:19:7b:bb:df:17:76:b1:be:45:08:24:0e:e9:
d5:57:30:35:30:18:8f:3d:b7:de:1e:ca:8a:c1:85:6b:81:ae:
9a:37:2f:d6:2e:86:ef:6c:02:8c:1b:db:b7:41:60:34:cc:48:
8a:f4:8f:28:a0:c8:00:83:22:c4:65:b4:65:9b:76:64:35:3a:
ab:0c:a8:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055ear2tF5O/7WbwTvArAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzhhOTA3NzcyYTU5ZmRmNTlmNjJmOWFkOTBiZTUwMjE3
MTk0NmUwHhcNMjYwMzI5MTQwMTAxWhcNMjYwMzMwMTQwMTAxWjAzMTEwLwYDVQQD
EygyYWM0OWRmNjYyZjBlNGNmZGUyYjQxODczZjI5YzA4YmQ0ZDBmZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuSLPFBkVJ68zFZD1ODYqeWgVrKQ
DZURfzX0yBfcehcDc9Kw/M7zFJEomLxKdygtF91RL8w45ftjlUXevJ9igxaKudzm
U9tVtZ6CWTAXXFl9qR6vIhhoqfIdxT4h4FmUOOF/In4oXidMf22tWZx5Kf1YaMME
m4C7K33Fs5OGu1FRBDFZLM7fGows5yBaWw9FoSjJoRwYreAn81xrC8E+R3Q3vYYn
0BC7IbuUir7KVYgWawVG8rqUuFRgtN9Iwhk+QFlqqOBwibh9pWhzkkIKYjTtUPS9
uy3oGVzaW+KqEpIbCkNXe+Yg+zXyzydNy+5GZnUSin7JtU8Zp/UaZbLABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrEnfZi8OTP3itBhz8pwIvU0P7zMB8GA1UdIwQY
MBaAFDk4qQd3Kln99Z9i+a2QvlAhcZRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjct
ZTVjMWM2MmNmZTM3LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjctZTVjMWM2MmNmZTM3
LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFmmhvIZ
TqDBsknyrwn7Vq1/VzgWQOK005tWFaU/tVfNmhFUByEbmJRg1fPvHzLeGUv7/UD2
gjYU1yxSfx7IrylmAX1Pm0m+MpxM2ACDmIRFj3tjoctcbIIHf4xZzA9hmX5zxZ3b
eV7o3YK0FtU9RL7yAzISPxh94ZZ6SQJlySHwY4YXpAZUp5CFQRfDNpeHVQmWbWW8
UzKUKJqRiOGf437QqDv15qdgQEv7mFabxFNWyqrzMgGxN04Ze7vfF3axvkUIJA7p
1VcwNTAYjz233h7KisGFa4Gumjcv1i6G72wCjBvbt0FgNMxIivSPKKDIAIMixGW0
ZZt2ZDU6qwyoKQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:04 2026 by rpki-client