Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: 1H2PzBo4Y/hmBOBrl8geTe3cAnPQ30k4tx6AZIhpHxY=
Subject key identifier: A0:4F:8F:70:B1:B4:25:BA:42:1B:F8:02:72:A9:A4:0F:63:73:2E:B3
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 01A110DFCDFA1EABB4A09C7DB699BE642766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0DE4
Signing time: Tue 06 Oct 2026 11:01:04 +0000
Manifest this update: Tue 06 Oct 2026 11:01:04 +0000
Manifest next update: Wed 07 Oct 2026 11:01:04 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: d8PAyDUFSbwB8P7BIG1lZUEttyovW/LHdJENO5Hf0W0=)
2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:df:cd:fa:1e:ab:b4:a0:9c:7d:b6:99:be:64:27:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Oct 6 11:01:04 2026 GMT
Not After : Oct 7 11:01:04 2026 GMT
Subject: CN=a04f8f70b1b425ba421bf80272a9a40f63732eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:e5:5c:36:24:02:42:9d:4e:44:4b:32:b4:
33:b5:7e:72:33:a4:93:0a:21:ad:a5:36:d0:68:bf:
35:3f:c4:9e:e1:09:44:73:2b:59:1b:93:13:55:72:
f7:41:e3:b0:0f:be:4b:4e:7a:4b:69:b1:0a:6b:c4:
b3:77:2a:d4:88:ce:60:22:b9:9f:c8:30:b2:22:0e:
cf:a5:fa:04:43:81:4e:1e:78:e9:0d:11:ca:e8:87:
af:3a:61:43:f0:02:7e:d0:d3:84:e0:3f:b6:44:ac:
62:ea:9d:9e:1e:9b:48:53:52:f3:4d:58:25:01:3f:
81:37:a1:90:0a:f9:45:68:2a:0e:7d:89:c1:90:19:
3e:45:0e:a0:d5:15:19:b2:e5:08:39:23:4c:19:63:
97:08:e4:09:4a:c7:0c:e0:8a:b1:26:47:7f:04:51:
61:d5:3d:96:bd:f0:47:82:62:a2:82:be:1d:68:5c:
1e:9b:a1:51:57:b5:71:80:ef:6e:72:40:cc:c2:e8:
4b:dc:05:51:eb:5d:af:6b:57:75:19:b5:a2:0e:8f:
21:ca:44:ea:d9:7d:00:49:ba:dc:21:60:21:ee:7a:
45:23:5f:d7:7a:94:73:d7:85:d5:60:8d:4f:33:53:
1f:59:79:79:56:de:d8:fa:47:4e:49:c7:2b:ea:80:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4F:8F:70:B1:B4:25:BA:42:1B:F8:02:72:A9:A4:0F:63:73:2E:B3
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f3:fb:f0:29:ee:ad:86:78:73:b6:df:62:58:a5:b7:8e:15:
8f:43:a7:18:70:2e:de:44:d5:d7:48:e7:97:0a:67:c0:e2:7f:
cf:ae:98:e9:f1:80:63:72:58:3e:37:ce:b8:72:ac:32:bc:43:
d6:a2:28:f9:4c:c7:96:0c:32:af:7b:a1:be:02:52:fe:db:39:
9c:49:bf:6a:68:4a:da:9c:1c:6b:97:20:28:9e:44:6b:9e:28:
c5:c5:e8:47:95:97:5c:f6:a6:af:1b:a0:8b:3b:ab:ee:7d:e5:
bd:71:d5:98:5e:2b:27:d1:2b:42:60:b5:25:69:0d:ba:a1:8c:
3e:7d:8c:17:a9:10:9e:c0:ee:42:70:7e:95:49:a7:17:46:e9:
b0:45:bf:0a:11:a9:d0:8e:00:45:5b:16:28:1e:53:7a:5b:4d:
e8:0f:65:22:c5:9c:c3:c4:fc:d8:fd:e6:f1:8b:70:b1:f4:7b:
b3:4d:0b:55:e8:78:bd:d1:77:50:f9:49:03:f8:47:0d:1c:db:
ca:14:84:2a:17:53:b5:ae:d9:f8:da:b4:57:c8:4c:05:77:67:
cf:35:9e:e9:4e:ee:fb:d8:76:60:10:a0:f3:73:99:75:dd:87:
e8:a3:8d:49:bc:96:97:18:ad:81:4b:01:17:84:81:5b:e4:d7:
f0:a8:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:31:45 2026 by rpki-client