Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: kQ4qo8XfAvKZb3JUb6jojPr5yioZzp7nn/6cbSMUJ4k=
Subject key identifier: B4:99:33:11:0B:0A:56:99:24:76:A3:F2:A6:66:86:D4:CB:16:05:8E
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 01A00439ADF079F0AD64AA372698AE80450B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1996
Signing time: Sat 15 Aug 2026 07:01:23 +0000
Manifest this update: Sat 15 Aug 2026 07:01:23 +0000
Manifest next update: Sun 16 Aug 2026 07:01:23 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: YfuFAKQZTkzXrf67isvAXvDyVe5krO2wEFU3Hpxg+HA=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:ad:f0:79:f0:ad:64:aa:37:26:98:ae:80:45:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Aug 15 07:01:23 2026 GMT
Not After : Aug 16 07:01:23 2026 GMT
Subject: CN=b49933110b0a56992476a3f2a66686d4cb16058e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:03:a5:4b:d5:fb:20:c8:57:99:44:32:31:
94:20:31:ce:ad:e9:3e:72:df:74:11:c6:04:42:ed:
2c:24:a0:5c:b0:07:24:80:0b:e2:08:00:c0:a6:81:
45:95:e9:28:20:03:73:60:17:c4:b8:34:c6:92:f9:
84:df:4d:8d:5c:ba:53:e5:3c:43:31:eb:98:2e:66:
b1:6e:5b:ca:22:76:64:74:37:a9:10:e9:83:b0:e3:
a6:07:b0:d4:e6:54:a2:03:e5:73:63:0a:64:f9:7a:
2c:ba:7a:68:01:ad:cf:00:18:8d:cb:82:17:4d:ef:
0f:90:e1:59:fa:b0:57:67:72:1f:cc:08:e3:ad:26:
a7:9f:fd:70:11:2e:a4:5e:67:85:75:f4:1e:a8:44:
02:e9:85:00:c2:60:c7:04:97:a2:bc:09:c8:79:a7:
4c:ff:e0:d9:76:9e:e5:a0:3e:72:cb:b9:62:5e:94:
8a:42:8f:81:79:29:19:89:70:cf:f0:0c:17:ab:a9:
20:fc:ce:72:2e:ba:64:c5:c9:4b:f7:12:51:8f:44:
35:95:e0:60:3c:ab:64:c2:f9:27:fb:8a:54:44:5f:
be:86:81:ba:cc:c7:ec:23:70:cc:95:57:7e:65:11:
b4:7f:02:49:3a:f6:63:fc:81:8c:ed:2c:2d:7d:1c:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:99:33:11:0B:0A:56:99:24:76:A3:F2:A6:66:86:D4:CB:16:05:8E
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6c:a0:c4:9e:c2:1b:d3:93:65:75:85:e7:43:d8:90:ef:52:
41:ff:32:68:59:c4:e3:83:c5:30:99:96:b5:cc:e6:7f:06:3e:
fc:04:c7:e1:94:52:5a:cf:71:0c:2b:81:86:a2:36:40:9a:7d:
6a:60:f3:78:7b:d4:ad:ff:38:7a:6b:0f:22:85:9f:68:65:72:
3e:2a:29:f4:e8:ee:7f:47:b7:4b:18:f9:39:90:f7:3b:f8:54:
86:bb:95:ed:ff:00:af:01:bf:ef:44:4f:d4:13:18:17:d6:fb:
48:03:96:20:75:77:64:91:86:91:b8:53:90:8a:5c:48:de:28:
03:77:69:31:11:dc:fd:9e:69:9c:ec:5d:6d:1f:73:6b:4d:96:
de:14:23:46:3e:93:61:02:ec:76:78:a6:17:49:7f:9d:94:ae:
ab:d5:bd:89:40:1c:98:3e:e4:ad:15:40:79:b4:e2:7e:ca:26:
2d:5b:03:b3:41:69:53:38:d1:e4:ab:24:74:ff:ef:8e:1c:8d:
f8:2e:b5:57:d4:ac:25:5f:a1:20:48:63:ea:46:7f:5a:a2:f0:
a9:d4:aa:27:77:6c:97:85:d0:9a:a7:3e:3a:3f:01:49:b4:a2:
77:35:ab:8c:84:ad:a8:7f:33:67:16:ee:b9:43:c3:aa:23:2b:
63:12:83:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:36 2026 by rpki-client