Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: pQdvDBvYdaD6BBMOWeUlmwbqX8hWNFibVDdqovUyil8=
Subject key identifier: 8B:FC:6A:E4:3C:6B:D6:A9:56:DB:BC:F0:CD:5B:36:F1:51:52:C4:49
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 019D37C14158591454748A55123F9BC9A2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 04:01:45 +0000
Manifest this update: Sun 29 Mar 2026 04:01:45 +0000
Manifest next update: Mon 30 Mar 2026 04:01:45 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: yctSAP63hN6Mce6UDw1iMiXshXe8s+bcX18E10hBAmQ=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:41:58:59:14:54:74:8a:55:12:3f:9b:c9:a2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Mar 29 04:01:45 2026 GMT
Not After : Mar 30 04:01:45 2026 GMT
Subject: CN=8bfc6ae43c6bd6a956dbbcf0cd5b36f15152c449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:ad:55:7b:c2:c9:b2:0c:80:18:d8:4b:a2:
d0:ad:cd:bc:0b:90:48:ac:60:b9:5f:86:51:ca:66:
b4:66:87:70:9f:b3:c5:fe:e5:7d:bd:95:76:fc:64:
b1:49:92:70:97:2e:46:2b:37:02:da:6f:12:cc:a1:
51:4a:06:54:6e:21:2b:e6:9f:00:48:cb:81:3d:3b:
13:e2:d7:d7:1c:99:fe:a5:22:c7:0e:f9:c9:ce:e7:
d7:79:03:23:f4:d3:aa:2f:ec:67:a6:b4:62:81:bd:
96:b1:4f:a6:c0:2f:1c:b9:b8:36:a9:c9:cc:98:74:
63:6f:49:8c:3d:df:fc:31:72:c3:74:ff:ba:d2:a5:
d3:4a:8f:7d:3d:e5:f4:f2:6e:93:35:82:47:6e:51:
40:14:da:79:33:c3:e0:96:d2:4d:09:7a:16:ed:6d:
27:ba:48:bc:b1:5d:47:4b:7a:d4:db:22:3e:b0:fe:
a7:50:af:2d:97:50:af:25:0e:17:09:71:9a:d3:92:
12:cd:ba:19:7d:ad:8b:f7:fd:43:22:0e:d4:5b:b2:
3b:08:a6:1f:9d:79:4b:37:a7:78:99:da:62:7c:7c:
a9:f1:df:25:af:a0:d9:f2:4d:39:cb:a3:58:d6:57:
32:ee:ba:19:1e:f6:10:21:37:ce:df:8d:02:cd:33:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:6A:E4:3C:6B:D6:A9:56:DB:BC:F0:CD:5B:36:F1:51:52:C4:49
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a1:7e:b3:ed:c2:9c:0a:6e:9d:5b:35:f8:09:d8:cb:b5:c2:
ca:8a:2b:92:3d:0d:27:fc:80:be:2b:b4:49:8b:af:47:14:1e:
73:ca:af:71:3e:22:99:fd:a6:f0:be:f8:0e:d3:c3:15:a7:b6:
fd:ae:01:25:1b:59:b8:23:3b:b8:48:c7:c7:9c:28:00:de:b3:
42:36:a8:70:19:d9:6d:78:af:76:f2:c3:d3:17:63:33:4f:a2:
21:4a:2c:7a:c9:45:e8:75:e5:84:4b:d0:ab:0b:c9:f8:0f:98:
31:39:a5:77:b2:41:e7:d0:d2:e7:b2:ad:f7:b1:f6:16:62:67:
98:7f:43:a6:27:42:ab:50:46:ae:d9:48:36:ef:af:35:9e:9a:
82:91:80:fe:b7:4b:40:08:95:91:84:bd:c0:38:ca:c5:d8:17:
fb:1d:2e:a9:28:92:02:3e:a4:24:f4:de:b9:fd:b1:bb:0b:4a:
09:22:f7:00:9a:49:61:4f:54:17:13:f6:2e:cd:62:a6:ff:fb:
71:34:6a:01:09:46:7c:9a:a3:33:66:c5:3e:65:95:bd:61:02:
be:68:62:d3:c1:8a:74:91:57:29:40:3c:13:90:6f:d6:a7:12:
e6:c1:09:45:1e:8a:f2:11:1e:9d:28:07:54:00:84:42:23:7d:
4c:66:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:05 2026 by rpki-client