Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: rdRWvumR+iedz/67pQd9ecSSWSSvcn4AP126/kLgboQ=
Subject key identifier: C3:5E:1C:3B:54:51:91:31:A1:46:01:21:7B:D1:15:CC:9C:0F:8B:5B
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 019CE636D7151A98AC106EC0E9F49AEF028A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 08:01:19 +0000
Manifest this update: Fri 13 Mar 2026 08:01:19 +0000
Manifest next update: Sat 14 Mar 2026 08:01:19 +0000
Files and hashes: 1: E3lm4FvyrvLHTXkXDSTYjOHsHVY.roa (hash: 6QZmnjSIaFmg0mpij0y/20sY5ruAuIBmod+jn1qrIQA=)
2: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: PeclEVnCDcdtkCfeCgu1WgmCbj3zX0FaTjKq2/MalFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:d7:15:1a:98:ac:10:6e:c0:e9:f4:9a:ef:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Mar 13 08:01:19 2026 GMT
Not After : Mar 14 08:01:19 2026 GMT
Subject: CN=c35e1c3b54519131a14601217bd115cc9c0f8b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:30:65:78:a5:88:f5:a8:9c:6b:ee:5d:c4:
77:32:95:4a:d5:8c:2b:76:59:a5:b3:b3:e9:e3:0d:
93:32:9f:cb:8a:d7:b6:f9:06:70:b8:c9:60:5b:99:
db:e8:3b:09:c6:43:a4:7a:01:dc:4e:a9:e4:da:8f:
f9:12:6c:70:be:2d:3e:27:25:7e:e1:2d:f0:d0:0e:
f1:22:49:21:21:92:09:cb:f9:72:1f:66:a3:ea:0d:
53:93:74:db:d5:4c:f4:38:06:08:86:f5:fe:95:63:
ae:96:3e:ae:08:58:a3:89:5f:6c:74:88:9a:f4:3c:
0c:23:b0:5c:75:1d:47:94:7d:a8:98:e0:81:a1:5f:
8a:34:81:16:bc:fd:bf:28:a7:2b:b9:c2:a9:35:e4:
ad:eb:1c:77:1d:e9:b4:02:0a:6b:63:15:36:ff:4a:
78:a5:4b:4e:ed:5a:9c:df:30:c1:45:0b:64:fc:92:
6f:1c:54:c6:ef:ff:5a:4e:c0:af:fd:f0:c6:82:9f:
95:c4:81:06:eb:e0:f2:f3:87:9e:e5:c6:14:80:2d:
0c:53:b4:c2:78:ce:c9:8d:a5:f1:0d:b7:6b:7c:28:
96:43:5a:24:5f:33:f2:31:a9:c7:fb:03:96:89:39:
31:93:8c:30:40:2d:ab:87:fa:9b:4e:4f:6c:f2:5b:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5E:1C:3B:54:51:91:31:A1:46:01:21:7B:D1:15:CC:9C:0F:8B:5B
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d2:08:dc:b1:c2:cb:cd:bc:9b:15:42:3b:0a:05:72:72:f8:
5d:0c:cd:ff:70:3c:cd:15:cb:90:4a:e0:8f:7c:42:0a:d6:16:
a1:be:e5:38:6d:7c:52:d4:e2:03:cc:93:42:0a:4f:0d:9e:24:
84:84:d7:75:cc:cb:a2:a4:d1:7e:92:3f:89:d9:fe:48:9f:b8:
6d:40:00:ff:a0:da:d6:cb:85:70:04:ff:e4:1f:c8:49:da:7a:
27:f8:5e:66:38:88:68:dc:42:a4:e6:64:ea:3d:84:67:2d:c7:
0c:fb:b4:1d:de:98:f7:71:13:84:90:90:a9:c5:d4:e8:7f:95:
bc:bf:cf:f8:7e:4e:ad:6e:9e:ed:bb:fe:bb:ab:a3:fe:55:b1:
83:90:69:08:3f:33:f6:50:f5:34:13:5d:8c:6d:97:74:a2:8b:
aa:fd:67:a0:df:04:78:c7:3c:29:b0:6a:22:2b:d2:65:f3:c5:
12:d4:cb:18:74:b0:8a:a4:0d:13:01:7b:c6:35:99:97:e4:45:
91:bc:9e:36:d1:2e:79:d2:64:72:7a:3a:86:e2:50:87:0c:50:
8d:10:da:15:76:3e:28:01:4e:7b:2f:d7:db:e5:ab:9e:a6:8d:
88:55:6e:b4:7e:39:65:93:1e:1f:97:52:9a:85:24:17:df:df:
9e:84:0b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:23 2026 by rpki-client