Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: HgvIKe3PrOS4xKpEW/K0cUvk3WWKGwm7Rup6JQ/N0UQ=
Subject key identifier: 34:CD:37:EA:11:AC:7C:77:BA:4E:52:B2:10:72:6B:C3:2F:30:8F:CC
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 019F12D303AEA08047944EFD5DB9A38AECF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1919
Signing time: Mon 29 Jun 2026 10:00:46 +0000
Manifest this update: Mon 29 Jun 2026 10:00:46 +0000
Manifest next update: Tue 30 Jun 2026 10:00:46 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: mv84hzfXYuMzMdOOWvpcyU8FhrjkMRHdaDS7Id9B6OA=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:03:ae:a0:80:47:94:4e:fd:5d:b9:a3:8a:ec:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Jun 29 10:00:46 2026 GMT
Not After : Jun 30 10:00:46 2026 GMT
Subject: CN=34cd37ea11ac7c77ba4e52b210726bc32f308fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:78:2e:55:9f:f3:26:87:69:f8:b0:33:ae:
fa:f0:7c:59:ee:1c:d8:dc:04:a4:ba:1d:ca:52:15:
70:25:9a:d8:bc:71:ce:7c:cd:9f:c7:f8:90:65:fa:
e9:15:6a:23:ed:7a:0e:d0:21:df:9b:2b:e7:4e:fb:
c5:62:79:b8:04:4a:20:56:70:99:93:36:52:c6:4e:
32:6e:6f:07:c1:da:64:0a:57:7c:34:3f:75:26:90:
9a:40:11:40:08:94:fb:d2:7c:12:7b:5f:51:78:a9:
42:ca:a1:bf:6b:dc:9e:39:5c:4d:70:f9:d9:7b:70:
f2:cb:b1:f7:13:bd:f9:ab:53:bf:ef:e0:97:68:fd:
37:ee:e8:27:28:9b:37:cb:c7:7d:92:69:1c:03:c3:
96:2e:aa:3e:4e:6a:63:d6:11:eb:ce:bc:0d:11:4b:
a7:8d:9c:f8:9a:f1:67:24:e4:25:6b:a6:0e:b8:7e:
62:63:65:1f:a7:53:56:b4:56:fa:57:a1:a6:00:c2:
90:98:3e:8f:21:d3:64:f4:64:14:67:ed:d4:e5:e5:
16:4c:11:56:c8:58:b8:eb:0b:95:9e:e9:51:2a:6d:
81:cb:a6:7c:df:16:2c:33:da:a4:53:16:07:3b:f1:
33:06:1a:6a:13:4c:c2:b7:42:bf:67:11:a5:9d:54:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CD:37:EA:11:AC:7C:77:BA:4E:52:B2:10:72:6B:C3:2F:30:8F:CC
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:10:4c:5c:66:40:76:c2:dd:db:08:51:75:f9:bf:c9:96:98:
87:88:6c:04:2e:ae:2e:a5:47:9d:22:b6:60:51:b1:ff:db:f8:
4e:46:f0:99:cd:b3:1b:5e:5d:bb:27:f5:fe:00:07:ae:0e:76:
92:45:af:05:de:a6:19:5d:32:25:47:99:5a:ff:97:d7:4d:8a:
f5:f8:c0:82:d2:f1:5d:a7:7d:20:e7:67:30:47:31:bc:e3:59:
36:0a:77:b7:d7:67:4d:7c:0f:7f:5e:58:4f:53:45:4a:ca:ae:
98:0f:78:a1:df:75:e0:e6:20:ab:94:53:61:ea:d4:e0:63:99:
2d:16:78:ce:bf:d5:01:fd:86:4f:4c:30:c5:c8:d6:8c:c3:b6:
25:ad:80:0c:e6:5e:3e:55:52:dd:af:9f:9a:17:2c:16:6d:d6:
16:bf:09:8d:20:ac:b6:26:a8:2e:f0:52:7e:51:ce:1e:dd:2a:
e7:9d:ea:e9:60:97:c1:2d:e8:cf:b2:00:40:57:a9:da:fe:34:
3b:87:8d:ef:c9:82:c3:19:24:3f:e1:8e:61:09:89:4e:63:0d:
b3:be:da:5a:c9:69:6a:c5:9b:9a:af:93:08:e6:cf:7f:55:69:
6e:3f:d2:a5:3b:4a:c9:01:01:56:d4:f9:85:bd:26:12:84:d1:
bb:cf:9c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8S0wOuoIBHlE79XbmjiuzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk
YmNiYmMwHhcNMjYwNjI5MTAwMDQ2WhcNMjYwNjMwMTAwMDQ2WjAzMTEwLwYDVQQD
EygzNGNkMzdlYTExYWM3Yzc3YmE0ZTUyYjIxMDcyNmJjMzJmMzA4ZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbF4LlWf8yaHafiwM6768HxZ7hzY
3ASkuh3KUhVwJZrYvHHOfM2fx/iQZfrpFWoj7XoO0CHfmyvnTvvFYnm4BEogVnCZ
kzZSxk4ybm8HwdpkCld8ND91JpCaQBFACJT70nwSe19ReKlCyqG/a9yeOVxNcPnZ
e3Dyy7H3E735q1O/7+CXaP037ugnKJs3y8d9kmkcA8OWLqo+Tmpj1hHrzrwNEUun
jZz4mvFnJOQla6YOuH5iY2Ufp1NWtFb6V6GmAMKQmD6PIdNk9GQUZ+3U5eUWTBFW
yFi46wuVnulRKm2By6Z83xYsM9qkUxYHO/EzBhpqE0zCt0K/ZxGlnVTGBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTNN+oRrHx3uk5SshBya8MvMI/MMB8GA1UdIwQY
MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt
ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw
LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRBMXGZA
dsLd2whRdfm/yZaYh4hsBC6uLqVHnSK2YFGx/9v4Tkbwmc2zG15duyf1/gAHrg52
kkWvBd6mGV0yJUeZWv+X102K9fjAgtLxXad9IOdnMEcxvONZNgp3t9dnTXwPf15Y
T1NFSsqumA94od914OYgq5RTYerU4GOZLRZ4zr/VAf2GT0wwxcjWjMO2Ja2ADOZe
PlVS3a+fmhcsFm3WFr8JjSCstiaoLvBSflHOHt0q553q6WCXwS3oz7IAQFep2v40
O4eN78mCwxkkP+GOYQmJTmMNs77aWslpasWbmq+TCObPf1Vpbj/SpTtKyQEBVtT5
hb0mEoTRu8+caw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:10 2026 by rpki-client