Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: 3N0PCOVTKzJfRVt0E8SfP0eXK8daMaH83Wjsby5uqjY=
Subject key identifier: FE:6F:60:BD:CE:5F:9B:9B:28:81:A7:AE:4D:54:49:8A:77:D2:BD:0C
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 019D3A1C846ACAF1286E88004B5AD06F5A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 0200
Signing time: Sun 29 Mar 2026 15:00:40 +0000
Manifest this update: Sun 29 Mar 2026 15:00:40 +0000
Manifest next update: Mon 30 Mar 2026 15:00:40 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: gpLyivCJ4eieYGqSuqNzA05QgJZHgUAykZaIOEp9z8A=)
2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:84:6a:ca:f1:28:6e:88:00:4b:5a:d0:6f:5a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: Mar 29 15:00:40 2026 GMT
Not After : Mar 30 15:00:40 2026 GMT
Subject: CN=fe6f60bdce5f9b9b2881a7ae4d54498a77d2bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:71:26:16:81:63:91:10:f7:a8:cf:86:ec:
64:0c:87:a8:31:9d:0b:b8:fa:40:47:88:a2:ec:38:
b1:e0:78:7c:ab:43:a8:bf:d9:af:73:9a:12:47:5c:
c3:d4:29:b6:60:31:7f:8e:3e:10:81:ee:74:10:ef:
5b:b8:40:99:80:e6:2c:49:de:0b:dd:bf:0f:bb:7a:
e1:85:62:a0:f9:82:d9:3c:f3:9a:05:02:ba:aa:14:
32:d3:1b:01:39:12:3a:93:de:e9:3c:72:5c:b4:db:
9c:23:55:8f:01:94:37:fd:ef:bb:f3:3c:55:71:4e:
51:4f:48:b4:d9:95:9e:ae:4c:a9:75:3b:3e:5e:e5:
d3:81:86:8c:c6:66:03:9c:9f:96:89:a3:e4:df:71:
a4:f8:e0:60:04:e1:fc:51:14:1e:3e:b0:94:d4:f5:
76:86:6d:4f:7f:06:39:b2:35:86:09:d2:85:d2:68:
ca:d6:a3:39:05:47:0f:a4:a3:57:d4:78:a0:b5:65:
71:90:6b:b3:1f:e8:93:77:13:e9:a1:bb:97:7c:62:
13:33:8e:1d:a1:c1:05:ff:29:ae:c7:fb:0f:70:7e:
8f:9a:f5:00:30:8a:2e:7f:7b:93:61:56:7b:88:5f:
d3:1e:96:43:8e:8d:b9:40:77:cf:c2:69:6d:9b:be:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6F:60:BD:CE:5F:9B:9B:28:81:A7:AE:4D:54:49:8A:77:D2:BD:0C
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3e:0f:c0:f7:79:1e:4b:d1:6c:c8:04:76:a2:74:e9:68:35:
31:73:cb:aa:77:c1:0f:11:e0:ed:c3:ab:1b:f6:66:84:61:45:
3a:64:e4:d8:d0:df:ae:35:fc:fe:f7:01:3f:12:18:be:29:f3:
80:28:9f:a8:e9:86:a7:48:15:0a:2d:e4:91:5b:b2:ef:ef:a3:
7f:d4:92:49:cd:8f:17:6c:2f:95:97:01:d7:e9:d9:5c:9b:ec:
25:be:ef:8c:62:33:47:89:22:be:95:43:37:ff:b0:f8:0f:6d:
c2:8c:93:89:87:b3:17:de:36:46:24:61:f0:00:fb:08:2d:4e:
b7:00:98:b1:29:1c:77:ba:8f:75:86:ae:94:de:b4:ad:12:c9:
ea:f6:4e:32:7c:35:85:bb:07:44:31:85:4a:d1:4f:22:8d:65:
51:21:d9:27:15:fd:58:40:fe:b2:3f:6f:75:f8:32:0c:b3:b3:
41:2e:29:50:aa:53:a9:e9:3b:f1:27:26:44:75:34:4e:88:53:
13:6d:67:8b:2d:22:b4:da:17:b6:3d:3f:e4:c3:e8:76:fc:08:
7f:03:ca:c6:8e:98:fa:59:55:7d:11:e8:f4:f7:a9:87:37:83:
2f:49:11:89:70:10:73:b3:1d:fc:c5:d8:e7:73:2b:cf:56:b8:
53:24:77:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HIRqyvEobogAS1rQb1oyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWI3MzljNmQzZGM3MWE2MjA2YzhmMzcxMjQyNmZmNTMy
YTBhZmUwHhcNMjYwMzI5MTUwMDQwWhcNMjYwMzMwMTUwMDQwWjAzMTEwLwYDVQQD
EyhmZTZmNjBiZGNlNWY5YjliMjg4MWE3YWU0ZDU0NDk4YTc3ZDJiZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwplxJhaBY5EQ96jPhuxkDIeoMZ0L
uPpAR4ii7Dix4Hh8q0Oov9mvc5oSR1zD1Cm2YDF/jj4Qge50EO9buECZgOYsSd4L
3b8Pu3rhhWKg+YLZPPOaBQK6qhQy0xsBORI6k97pPHJctNucI1WPAZQ3/e+78zxV
cU5RT0i02ZWerkypdTs+XuXTgYaMxmYDnJ+WiaPk33Gk+OBgBOH8URQePrCU1PV2
hm1PfwY5sjWGCdKF0mjK1qM5BUcPpKNX1HigtWVxkGuzH+iTdxPpobuXfGITM44d
ocEF/ymux/sPcH6PmvUAMIouf3uTYVZ7iF/THpZDjo25QHfPwmltm76A9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5vYL3OX5ubKIGnrk1USYp30r0MMB8GA1UdIwQY
MBaAFNjrc5xtPccaYgbI83EkJv9TKgr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8wMTgxZjgtNGZhNC00Njk3LWEyNzIt
MzMzYjZkNGVhNDViLzEvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8wMTgxZjgtNGZhNC00Njk3LWEyNzItMzMzYjZkNGVhNDVi
LzEvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFT4PwPd5
HkvRbMgEdqJ06Wg1MXPLqnfBDxHg7cOrG/ZmhGFFOmTk2NDfrjX8/vcBPxIYvinz
gCifqOmGp0gVCi3kkVuy7++jf9SSSc2PF2wvlZcB1+nZXJvsJb7vjGIzR4kivpVD
N/+w+A9twoyTiYezF942RiRh8AD7CC1OtwCYsSkcd7qPdYaulN60rRLJ6vZOMnw1
hbsHRDGFStFPIo1lUSHZJxX9WED+sj9vdfgyDLOzQS4pUKpTqek78ScmRHU0TohT
E21niy0itNoXtj0/5MPodvwIfwPKxo6Y+llVfRHo9PephzeDL0kRiXAQc7Md/MXY
53Mrz1a4UyR3NQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 22:29:40 2026 by rpki-client