Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: 4M4DNtRjLyWUSHZ3AkYbTseAeCMyTJ9QNX8b+t70aXY=
Subject key identifier: D3:85:65:EF:23:0B:5E:31:90:45:75:E2:CF:29:E6:A3:E2:FC:2F:0D
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 019D3AC17E0E6485DF6B2A8BB8E51D261D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 18:00:52 +0000
Manifest this update: Sun 29 Mar 2026 18:00:52 +0000
Manifest next update: Mon 30 Mar 2026 18:00:52 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: WNjS35IiLOiD8Mc5v63RERqFsxlWvnYdZmXdHmSSBdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:7e:0e:64:85:df:6b:2a:8b:b8:e5:1d:26:1d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Mar 29 18:00:52 2026 GMT
Not After : Mar 30 18:00:52 2026 GMT
Subject: CN=d38565ef230b5e31904575e2cf29e6a3e2fc2f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:90:e7:14:8f:d9:20:30:9d:2a:cb:9d:f5:
9f:e9:76:ab:18:f6:28:f9:11:65:f4:f4:27:d2:43:
11:f0:bd:5f:3f:0b:69:15:0e:52:0f:f2:70:10:8a:
0a:fd:cb:30:cf:fa:19:5e:99:ad:b5:42:7a:87:dc:
21:0a:05:09:2f:d7:86:12:21:cf:55:b7:1b:db:2f:
49:7d:2e:ab:11:6f:ed:e2:d7:e0:14:f4:9b:2b:fa:
dc:1c:91:b2:9a:06:d0:20:d1:56:60:9e:55:0b:aa:
85:0c:cf:8c:df:89:07:bf:e1:50:75:d2:1e:4e:e4:
8e:83:48:6b:d0:c3:f5:c2:40:94:00:b1:fb:d8:49:
44:97:4b:f5:bf:08:d2:c1:42:ac:21:91:42:04:4f:
34:fc:e3:6c:6c:7e:33:05:0e:95:55:ab:98:fe:ed:
6d:60:a2:e6:a2:a8:66:7b:4d:e7:3b:d7:25:4c:67:
cc:5d:bb:5a:f3:6b:7a:5c:57:e8:c7:07:96:70:65:
85:a4:07:2f:9b:e1:6f:02:c4:1d:ab:b4:cb:67:96:
39:ce:f2:19:54:32:b8:d2:1a:d1:ef:dd:ec:3f:97:
84:10:06:db:0d:d6:05:07:d4:2c:71:45:9d:00:d0:
13:1f:06:d1:bf:cc:1b:36:31:7f:94:67:ec:3a:4e:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:65:EF:23:0B:5E:31:90:45:75:E2:CF:29:E6:A3:E2:FC:2F:0D
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:15:1a:10:76:e6:2b:ad:36:2e:59:c1:d1:a3:53:68:35:1a:
94:2f:6a:51:2d:9b:d6:5d:6e:2c:74:1f:7f:45:aa:a9:3a:0d:
11:c3:a7:bb:e6:b1:dd:9f:13:16:16:3b:db:17:39:21:d2:78:
de:04:2f:89:c6:25:44:7a:d5:3b:d5:1a:18:72:c8:80:d1:0f:
b4:9b:8e:c6:ba:ff:1b:e7:ec:a1:2b:5f:c7:96:70:e0:1e:59:
ad:cc:38:8e:17:52:77:42:38:dd:e8:2c:31:2e:7e:51:39:34:
93:a1:16:4f:26:4c:f4:85:7e:02:eb:ce:8b:c4:29:77:00:55:
76:c6:69:9c:9f:65:eb:81:9c:73:5e:76:79:d9:31:be:8a:56:
eb:c8:1f:9b:46:2a:07:7b:58:80:36:04:ff:2c:3d:fa:e7:d4:
7e:23:71:9b:46:65:2a:28:19:8f:60:a6:f2:0a:cc:7d:e6:dd:
61:e5:08:52:f2:3b:83:67:a3:54:c5:cd:b3:04:94:b3:45:fa:
ea:a1:e5:0b:18:5d:71:2b:97:f0:eb:d5:15:7a:c3:8f:71:eb:
1a:e1:ae:4f:4f:56:66:01:f2:2c:10:03:b7:11:3a:45:51:b7:
a0:bd:fc:9c:bc:13:32:52:99:fc:da:80:91:7c:24:4a:f9:24:
b9:8b:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:01 2026 by rpki-client