Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
File: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft (raw, json)
Hash identifier: P4s/uEY3YmAa7zi+nkGRTtdHKpLEJhz5JVO9V27TVnU=
Subject key identifier: 8F:89:53:44:56:A4:6E:B0:56:52:2C:CB:34:C5:3F:92:A2:F1:57:CA
Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Certificate serial: 019D3A53FE0D9A2C0280E8523A249F7B709E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 16:01:16 +0000
Manifest this update: Sun 29 Mar 2026 16:01:16 +0000
Manifest next update: Mon 30 Mar 2026 16:01:16 +0000
Files and hashes: 1: Ih9S_kZcCOhq2N4y574bLA_RZG4.roa (hash: BK3QLHH47u/5bpJq4bbQNM29Xb79UfdHFqSx0wPQ9rw=)
2: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl (hash: pL9Fzr3uGy4mOqK6FxTS9XdHaA6DRkyjvsC/hZWzpRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:fe:0d:9a:2c:02:80:e8:52:3a:24:9f:7b:70:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Validity
Not Before: Mar 29 16:01:16 2026 GMT
Not After : Mar 30 16:01:16 2026 GMT
Subject: CN=8f89534456a46eb056522ccb34c53f92a2f157ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:e6:11:63:55:02:78:8d:8e:fd:ee:1e:79:
f3:de:a1:44:ac:b7:98:e6:b9:20:08:cb:1f:a8:9b:
90:b9:e7:d7:97:15:6b:af:37:2a:80:1d:3a:2b:b9:
a2:22:41:8b:77:a6:dc:1a:09:c7:ea:47:33:11:93:
17:d7:25:92:7b:43:63:6a:84:97:52:28:79:33:ab:
8f:2f:36:30:7a:70:e7:f2:a5:f4:c0:b8:21:17:d7:
da:22:d9:f6:36:a9:03:15:88:d2:c7:f6:f9:cc:11:
1f:e1:20:46:1d:a4:16:db:15:f1:f9:07:a4:9c:a8:
f8:75:6f:eb:0b:9a:e4:39:9e:c0:0e:dc:dd:f3:bb:
55:26:c0:33:5d:46:2b:c3:a4:21:01:f1:ce:42:d4:
08:60:cb:6e:08:f4:d2:60:f5:bb:f1:29:15:42:c4:
5d:3d:c2:1b:66:7a:62:44:0c:d0:f4:da:ce:c2:b8:
fa:91:02:08:c0:60:0d:25:a1:87:8c:28:d7:1d:ea:
5f:48:cb:ae:dd:07:d9:3a:52:77:7a:57:02:1a:50:
9c:3d:9b:4b:4d:07:2d:35:06:af:10:7e:49:e1:f6:
3e:0a:98:ab:c8:23:f3:29:9c:73:4c:8a:5d:86:bc:
34:33:e7:80:d6:e2:c0:70:de:2f:68:2c:d4:55:29:
53:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:53:44:56:A4:6E:B0:56:52:2C:CB:34:C5:3F:92:A2:F1:57:CA
X509v3 Authority Key Identifier:
keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0e:1d:a8:83:52:e1:b5:43:c5:d5:30:b9:fc:75:58:5f:a5:
ce:58:bd:05:e8:d6:71:2b:62:cc:63:9d:35:db:a2:5c:af:e9:
cd:77:65:85:0a:af:85:91:16:6e:b2:b7:6c:1c:a1:50:99:b3:
2c:9c:65:71:eb:b1:4b:c9:10:7e:1e:56:29:27:49:f3:32:3d:
75:0f:b1:05:98:a3:29:ff:a7:a3:ce:d0:84:1e:b8:6b:f0:62:
70:8b:1b:e7:1f:31:1f:42:78:da:3f:7e:b3:c6:f2:6d:9d:50:
93:7c:8c:da:44:95:b4:74:c1:18:37:29:21:cf:04:bc:b8:76:
b6:db:fb:05:f2:25:b2:38:90:18:4d:0c:64:62:de:40:21:f5:
2b:2b:c8:20:28:02:23:f3:07:92:73:35:00:c5:26:e3:f0:ee:
eb:5f:61:35:f6:9e:cb:27:7a:f9:d4:ef:83:d1:cb:66:8b:46:
18:8f:b4:a5:15:05:74:ab:a3:ad:10:f6:b7:11:f3:ad:b1:b3:
6a:33:56:52:b9:85:7f:de:12:58:a9:d8:89:19:73:57:06:e5:
fa:a2:aa:de:ad:fd:9b:da:f8:4b:de:a5:ef:d7:37:e8:fb:99:
a4:b6:18:ec:c8:a6:be:e7:4e:c0:00:b9:4a:14:08:12:9a:9d:
48:f3:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:06 2026 by rpki-client