Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
File: OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft (raw, json)
Hash identifier: l14RkezukzOZDiZDijvEmWVgBBR016oR6LowX31voRM=
Subject key identifier: BB:EF:3F:39:84:ED:E5:29:15:B8:D9:7A:86:1E:6D:F7:62:77:00:E4
Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
Certificate issuer: /CN=39348867dcb2956aca65d08348e440d4727a3743
Certificate serial: 019D37C09C94EB5AA9C36869CDEFF7196103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
Manifest number: 0633
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl (hash: /mUI9TQ9Nlrxq/FD9cWRdF4f9tQOTFDlgiBsauvp+W8=)
2: T72oUjEo0s0JrOYNowoRHWjX0w4.roa (hash: y4/cjDz+TB542z9AKMzNcOCpxzpFqML97uF7RmVq7YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9c:94:eb:5a:a9:c3:68:69:cd:ef:f7:19:61:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=bbef3f3984ede52915b8d97a861e6df7627700e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:0c:dc:29:51:cf:14:f3:e7:ac:89:c8:44:
ac:14:4c:2a:53:20:e5:f8:9e:2e:1d:3a:52:52:de:
22:d1:96:1f:83:5a:a8:35:e1:c0:f5:ba:de:61:a0:
14:3a:31:1b:2c:83:9c:36:93:8b:dc:11:1b:0a:7d:
51:82:08:bf:14:2c:10:55:4e:63:b1:2b:87:5a:1d:
be:51:a6:74:2c:91:b3:42:f2:d2:c5:29:9d:bd:19:
2d:16:28:6a:8e:60:bb:e5:2b:f4:df:97:26:43:ae:
1a:97:a5:00:b9:06:94:20:ab:99:b4:98:ad:7f:7e:
43:89:36:5d:bc:1d:27:f8:b3:54:bb:5a:73:b7:02:
5d:0f:63:d3:e2:f4:8f:9f:36:57:6d:8f:3b:58:0e:
19:46:c9:51:32:48:8e:5c:e1:f0:7d:58:65:c2:e6:
e8:47:81:e1:96:a2:06:d5:ca:66:a8:b7:24:56:18:
60:bd:60:d0:9f:0e:7c:aa:9d:67:57:80:af:28:35:
52:f8:74:5d:11:b7:3d:8b:01:11:d8:58:4a:8e:b6:
02:80:e4:d6:f8:dd:5a:a8:66:67:fd:5f:d7:cf:b0:
f7:f5:74:c6:97:b2:15:51:1e:15:1e:79:bb:39:5a:
5e:91:23:4f:d5:c7:86:b0:c7:64:66:44:6d:35:5f:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:3F:39:84:ED:E5:29:15:B8:D9:7A:86:1E:6D:F7:62:77:00:E4
X509v3 Authority Key Identifier:
keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5b:0e:73:77:6f:54:78:7c:e9:01:35:52:23:3a:2c:3a:30:
bc:1f:59:26:53:25:81:d0:87:b7:25:35:f4:c8:4a:04:21:93:
c1:f9:7d:8a:0e:19:e1:c5:87:cc:48:22:a1:36:da:7e:2d:3d:
9a:f3:72:76:af:4e:5c:19:1a:0d:ca:0e:78:4f:ce:ee:ff:4e:
6d:ba:14:35:18:dd:f8:e6:3e:72:73:55:c6:4a:47:b5:60:13:
e0:f0:59:41:16:4b:7f:3f:6a:3c:8a:c0:e6:39:f5:31:bf:10:
1c:d8:1e:22:24:b8:f3:b3:fd:b9:a4:66:31:32:12:a6:28:c5:
56:a4:58:2a:33:a7:db:c8:31:dd:c8:87:11:1c:07:f8:45:40:
23:6e:58:5b:cd:e4:5a:45:8f:e4:02:3d:46:66:ac:06:d4:d4:
ae:3d:51:96:19:dc:df:b1:db:d4:1c:af:8b:8c:9c:c4:67:d9:
ad:f9:2a:98:5d:54:9d:cc:9d:b1:08:98:94:60:5c:9a:c0:1c:
8e:27:3b:5f:82:6b:1d:6f:e1:0c:68:c2:f6:38:1d:dd:b2:f9:
af:53:30:d2:5f:44:98:bf:5b:f0:11:e2:0c:09:ce:30:c1:43:
02:72:7a:ba:67:de:b1:d9:17:be:85:bc:7c:76:07:05:8d:e3:
bf:bb:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:49 2026 by rpki-client