Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: 3QCH4359DIC2m3qfEhF1BJmSX9kCeum/GsHnxQt8PDM=
Subject key identifier: EE:11:B9:0B:B8:7B:E8:F4:61:9F:58:44:76:98:D8:D4:FE:DE:BC:02
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 019E314DFC1D9C846096C6FAABF41E599C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 0280
Signing time: Sat 16 May 2026 15:00:54 +0000
Manifest this update: Sat 16 May 2026 15:00:54 +0000
Manifest next update: Sun 17 May 2026 15:00:54 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: OYrMi/XgFn4E+TMPXDV0tpOFULDP7L44XqpaCHtj/Ag=)
2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:fc:1d:9c:84:60:96:c6:fa:ab:f4:1e:59:9c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: May 16 15:00:54 2026 GMT
Not After : May 17 15:00:54 2026 GMT
Subject: CN=ee11b90bb87be8f4619f58447698d8d4fedebc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:78:77:e7:bc:8e:4b:b6:4f:63:96:0e:9d:
f9:82:86:00:f2:80:00:15:58:f6:0e:b6:ab:40:c2:
1d:4a:3c:5a:62:c9:92:33:63:b0:c4:0e:18:53:bb:
e5:79:dc:cf:3b:c9:ae:ef:05:b3:bd:1c:7d:97:6c:
f6:c5:07:fc:04:72:e4:47:9d:db:15:85:22:2c:93:
24:11:1d:d5:f5:5d:1c:29:ec:82:fb:3c:dd:02:91:
01:73:09:62:6f:46:96:13:e9:af:32:02:f3:3e:19:
3e:dd:d7:ba:5c:dd:aa:66:ed:34:33:6c:c6:9a:55:
a1:e3:f2:23:73:34:d4:45:2a:16:5c:1f:c3:fe:3c:
8e:aa:11:21:a8:6d:de:2e:b1:c9:a1:20:6d:68:43:
dd:dc:f0:b4:f5:9c:1c:f0:35:0c:a3:86:1f:17:cb:
c8:ee:e5:d0:90:17:8a:45:f4:53:41:b5:ae:2f:45:
80:01:27:3e:59:92:98:25:fd:b7:6e:36:ce:8e:57:
8c:ef:67:45:13:c5:1b:79:25:80:05:6b:0e:fb:1b:
1b:62:f1:87:6f:dc:46:c5:2c:dc:33:0b:f2:9f:8e:
0d:7a:97:c6:d5:5d:e7:c7:ed:8d:b7:fd:d7:cf:ca:
f8:d5:62:fb:36:6e:c5:57:9f:b4:a2:05:70:eb:da:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:B9:0B:B8:7B:E8:F4:61:9F:58:44:76:98:D8:D4:FE:DE:BC:02
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e3:7f:49:8f:b0:2c:e3:51:cb:20:b9:b0:4b:51:4c:79:45:
02:94:1e:b0:0d:d8:c7:57:0e:d1:4a:be:97:97:0a:cd:ef:3a:
82:c5:f5:3d:e4:df:f6:f1:28:6f:80:fa:34:74:02:4c:da:1c:
da:a4:98:d9:e0:69:03:47:82:1c:2a:a9:32:2d:65:ae:0f:14:
34:8c:05:d3:2d:74:76:85:a6:13:5b:d6:03:c2:cb:bd:a7:79:
6d:01:e3:2b:26:bb:e8:52:b7:e6:bc:d4:5c:66:50:30:59:64:
11:04:52:7b:41:a1:b6:d1:2f:23:19:64:66:fd:87:42:03:3d:
07:04:b9:c0:9e:16:2a:eb:70:f0:29:3d:d6:e7:63:be:58:18:
10:6d:e9:1d:0e:73:b5:29:06:e8:63:35:43:4a:24:8e:a1:7e:
f1:0c:40:dd:57:1a:a4:f4:79:dd:ed:1b:1a:74:08:88:9a:99:
3e:c8:ac:53:32:19:6c:ad:f0:ca:24:51:f1:cc:fd:1e:4e:ee:
9a:f9:02:0e:75:4b:82:57:fe:fb:3b:6b:01:10:78:bc:ee:62:
25:e6:7c:20:f1:3e:46:7f:b5:78:f0:62:55:f9:29:4c:b0:81:
29:2e:86:88:03:c7:15:e7:aa:69:56:7c:06:58:d5:27:ab:ab:
47:05:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:22 2026 by rpki-client