Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: txisOdVHzAJQOu+UNsBodXrR9TptnuzVjEQ6wyitEs0=
Subject key identifier: 3C:33:76:82:91:3B:DC:65:06:AA:EA:26:8A:81:65:ED:6B:C2:A5:6A
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 01A002B899E105C83689D4B53ED4A38980FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 0371
Signing time: Sat 15 Aug 2026 00:00:47 +0000
Manifest this update: Sat 15 Aug 2026 00:00:47 +0000
Manifest next update: Sun 16 Aug 2026 00:00:47 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: jBDrFmVAjmxlKzMKGgqLaF9vnJxtIICwIs40v6SFAfs=)
2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:99:e1:05:c8:36:89:d4:b5:3e:d4:a3:89:80:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: Aug 15 00:00:47 2026 GMT
Not After : Aug 16 00:00:47 2026 GMT
Subject: CN=3c337682913bdc6506aaea268a8165ed6bc2a56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:be:00:9b:01:86:1c:f0:0b:b0:95:6b:d4:3d:
85:8a:2d:aa:d6:ec:c2:3e:ed:3a:62:e3:e7:58:6d:
e8:8d:39:f0:d4:c0:6a:c8:b6:a2:c3:4e:5a:4d:02:
50:35:ad:5c:4f:8d:23:d9:a0:f5:77:36:e9:77:98:
b8:18:9a:b0:e3:5f:31:7f:52:87:96:ab:ee:13:79:
6e:fd:1b:9a:7e:e0:ca:cd:e5:4e:65:cf:bc:c3:a2:
88:5c:0f:9b:51:a1:df:04:f8:7f:d7:8a:b2:f4:eb:
85:b6:0d:85:75:4b:38:49:cb:39:f7:aa:be:7f:ea:
39:9a:04:c6:0d:6d:97:60:b0:7b:2c:dc:8b:61:d6:
11:30:62:a6:8f:4e:a8:c6:b2:e0:02:f3:df:d8:f0:
1c:a8:61:24:26:23:5f:ff:87:6e:b5:ee:d4:c1:58:
ee:f4:0d:16:56:15:76:3a:74:6b:57:88:1f:11:f6:
45:5b:59:86:70:1c:75:9d:0c:dc:58:db:50:d3:6e:
4c:64:b3:c8:ba:55:dd:38:b2:20:05:5a:27:6c:a2:
63:45:ee:cb:d2:97:92:79:e1:2f:13:c1:5a:cc:a6:
97:03:e2:b1:85:c6:d0:89:1a:71:1f:20:9e:6c:44:
59:f5:ea:0a:c1:78:64:ac:e7:1a:dc:70:26:06:39:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:33:76:82:91:3B:DC:65:06:AA:EA:26:8A:81:65:ED:6B:C2:A5:6A
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:81:52:08:d5:fb:6d:f0:55:78:2c:0d:a7:16:d2:6d:fe:ae:
13:24:e6:1d:3c:5a:99:39:1c:58:fb:3b:32:30:23:d4:75:07:
0d:46:62:cf:5a:47:32:c8:31:c8:0b:92:e9:c1:8e:8c:18:4c:
01:18:96:57:2e:71:ae:f1:58:1f:e2:a4:f0:89:c8:b3:bb:af:
db:d0:a8:ee:d1:cf:46:fe:5f:9c:cb:6f:fc:cd:63:46:d9:c8:
46:78:7c:b1:8f:c4:07:46:c5:71:ce:3a:18:19:42:57:8f:ba:
00:c8:c9:37:22:a4:0d:c2:77:26:65:0d:88:46:a2:e7:3b:cb:
d4:62:9f:64:4c:52:15:1c:f6:d3:91:34:41:1c:37:21:a6:30:
82:3e:df:68:90:dd:5e:b8:16:8c:02:e2:4c:fb:5c:da:01:5a:
84:79:7c:01:1d:9f:2f:23:a1:c1:e6:49:42:c2:57:9f:2f:3d:
c0:27:52:78:67:24:4e:64:37:88:39:a8:f1:85:be:04:a4:67:
b5:93:87:a9:f5:3b:44:1c:53:ce:c6:bb:25:94:22:11:f7:96:
87:ce:ea:cf:92:ae:60:97:cf:58:5e:54:b2:97:7f:7c:66:fa:
4d:f7:54:96:74:0c:da:e5:e5:c4:55:4b:08:7a:36:3c:87:31:
27:ad:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:29 2026 by rpki-client