Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: IvgU57rYEoKuVhMlbCpw6f4lg9ujH4qmnreN8FnurEA=
Subject key identifier: FD:B1:E4:CF:E1:32:2E:40:DB:7F:A7:60:98:00:67:08:27:44:88:E4
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 019E2926ABB4CE58EC23D8BF0AC840018D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 18A0
Signing time: Fri 15 May 2026 01:01:00 +0000
Manifest this update: Fri 15 May 2026 01:01:00 +0000
Manifest next update: Sat 16 May 2026 01:01:00 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: hIkKHc86XBhdtOQ4AFhDxS5j8A0dR5bhi0oWjtFFx4o=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:ab:b4:ce:58:ec:23:d8:bf:0a:c8:40:01:8d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: May 15 01:01:00 2026 GMT
Not After : May 16 01:01:00 2026 GMT
Subject: CN=fdb1e4cfe1322e40db7fa76098006708274488e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:83:96:70:2a:43:d1:6b:3d:c6:1e:8f:6d:
e4:2e:a8:1b:a8:aa:90:9b:b3:fe:2d:8c:34:f0:0f:
04:cb:1b:21:4a:83:b1:33:b1:4e:96:db:b4:19:ae:
ef:bd:4f:20:26:b7:60:2c:f6:34:86:ce:82:fa:8d:
1d:77:bf:ae:fb:e4:c5:82:25:c2:7d:db:07:4d:c0:
43:a8:74:fb:39:dd:e5:34:ec:72:83:84:30:72:57:
0c:91:ee:f6:cd:3f:39:87:32:b3:a1:75:4a:21:bf:
8c:f1:e2:6d:11:72:5b:c4:60:0e:27:7a:0c:e3:95:
5b:93:19:de:67:cf:1b:16:b5:d4:22:8a:24:9c:75:
43:cc:4e:79:6e:1f:8b:69:02:9c:fc:61:c1:42:d0:
91:77:fa:f8:5a:49:9d:28:95:a7:de:1f:80:db:d1:
4c:54:04:47:ea:55:39:de:45:47:e0:5f:59:a4:9e:
87:8a:9d:f6:ff:c3:2d:78:94:2d:49:d6:92:b0:20:
16:7a:a2:6e:72:57:af:b6:97:d3:27:50:f5:4a:b9:
f8:db:3a:99:94:4e:e6:a6:a3:78:8f:9a:cb:6d:8f:
65:b7:68:ff:40:d7:47:d2:00:0a:ea:18:c4:50:db:
cb:26:0f:cf:53:12:a7:6d:c6:19:29:ff:7b:7d:18:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B1:E4:CF:E1:32:2E:40:DB:7F:A7:60:98:00:67:08:27:44:88:E4
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:91:6a:a6:9c:00:b6:68:c6:4e:7a:10:28:31:72:f2:e8:77:
67:ab:97:01:89:2a:12:1b:3a:98:de:4d:14:d7:bd:6e:ca:0a:
5c:f0:00:80:46:da:e1:9f:74:1a:42:bc:ad:a6:d3:e5:b9:45:
2e:9e:93:7f:56:5e:07:4f:e8:15:ac:ce:f9:a0:44:cd:9d:fb:
8b:3a:71:eb:bd:d5:04:a5:b5:80:30:ab:f5:00:44:93:af:92:
7b:06:6e:10:04:9c:1c:80:1f:41:b1:13:df:af:ba:44:54:80:
9d:da:13:ba:22:af:92:c2:19:ee:5b:d7:8a:15:eb:0f:8f:85:
2f:69:9e:45:66:5b:2e:0a:b9:2e:03:5a:e0:ee:ff:21:e3:a1:
a2:a1:7e:eb:7a:db:9b:0b:c1:a4:31:4a:8d:7e:c5:b4:d9:5b:
90:34:7f:d6:67:25:32:ac:af:0d:2b:31:e9:cf:11:9e:91:14:
60:80:be:59:3c:3e:c7:1a:6b:2f:92:e6:06:e1:c8:39:79:5a:
70:c4:cc:84:71:d2:8b:42:e4:90:64:5c:94:d7:ed:8c:56:c8:
77:7a:fa:83:20:ce:13:ed:e5:9b:4c:93:19:4a:f7:1b:2d:29:
08:b3:47:34:98:c1:19:d1:1e:80:e8:35:e9:1b:a1:08:6f:ef:
01:b5:0e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:52 2026 by rpki-client