Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: S6QdzrL7p9MLlGu7OYaLTf+koAFwMAk7DSlW4cCDXW4=
Subject key identifier: F2:CF:11:36:68:22:D0:EF:A8:0D:F2:A7:ED:D7:D6:85:20:A5:E2:5E
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 01A15440BDAF6F44DB4CF3CDCE9338CAD5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1A44
Signing time: Mon 19 Oct 2026 13:01:31 +0000
Manifest this update: Mon 19 Oct 2026 13:01:31 +0000
Manifest next update: Tue 20 Oct 2026 13:01:31 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: H1bC4xW1AIj9EhNRODTFawqrO4UR9bTPBHkJKiOS/q8=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:40:bd:af:6f:44:db:4c:f3:cd:ce:93:38:ca:d5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Oct 19 13:01:31 2026 GMT
Not After : Oct 20 13:01:31 2026 GMT
Subject: CN=f2cf11366822d0efa80df2a7edd7d68520a5e25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:06:b2:0e:75:30:91:99:56:0a:ad:32:73:
ba:3a:1b:53:59:10:f1:92:9c:c9:0c:51:d5:62:4c:
bb:08:c0:6b:92:24:c6:16:60:bf:29:3a:94:26:58:
d2:c7:bd:f4:cd:67:f6:94:99:ec:09:7a:fc:e4:f8:
49:e9:de:6a:31:11:5a:58:0f:8e:8c:7c:2c:1f:9d:
1a:35:04:ff:77:e8:d2:cf:af:4d:c4:af:b0:26:37:
b0:53:3d:0d:7d:5f:a0:8d:75:ea:dc:28:94:31:09:
1b:03:3a:36:50:b1:c9:85:97:c5:fe:5b:e0:e6:07:
b7:ed:a2:d0:34:d4:1b:2f:89:9b:7e:20:6d:ae:b2:
71:1e:73:21:e9:93:71:97:e2:b8:1e:8e:04:a6:99:
d5:44:62:4f:9c:ea:69:9d:ec:52:9a:e1:1c:21:7c:
bd:da:88:25:6a:f7:41:97:9f:24:e9:b0:17:db:88:
44:8e:eb:58:c9:38:82:13:51:83:3f:38:8b:43:33:
3b:ad:07:43:f7:87:f3:0c:b0:46:0e:08:69:5c:29:
66:87:7d:0e:be:0f:1b:c3:80:a0:6b:e2:b1:25:53:
6a:2d:d1:7d:15:8d:12:f4:56:20:23:a7:18:5b:df:
82:c2:4d:69:87:73:3f:59:87:55:fb:19:95:3f:d2:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:11:36:68:22:D0:EF:A8:0D:F2:A7:ED:D7:D6:85:20:A5:E2:5E
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b7:a3:97:64:89:e1:aa:76:bf:18:cd:fd:44:75:de:1f:ba:
41:4d:6a:d9:f1:d2:ec:5d:81:3d:19:44:ea:2a:b7:49:17:9a:
87:f0:eb:a6:c2:1c:54:cb:c1:04:10:5a:ea:01:2b:78:5f:17:
97:c7:ad:04:d8:6c:ad:67:dd:7c:20:71:59:4d:bf:c1:b6:76:
e7:50:56:0b:ea:3c:5c:67:08:b9:f4:40:10:50:31:3e:f8:3c:
0a:4a:19:ea:38:c4:71:af:c2:57:42:8b:3e:58:31:45:ef:5b:
e0:33:fe:d1:b3:0d:10:85:17:d3:07:8c:25:91:f7:78:fa:05:
a7:09:f7:6e:17:b1:0a:09:03:d4:df:78:7d:20:a2:47:80:e5:
94:cf:01:a7:4d:9a:95:d0:85:8c:b6:b4:f6:b6:a3:23:1e:b4:
83:ef:0f:9d:39:42:6c:21:a1:0d:73:c8:7c:16:78:b8:0b:1a:
a8:43:6c:e2:25:88:b1:11:28:bd:9f:df:30:40:cc:4e:d1:33:
78:a5:6e:38:22:6e:58:33:43:54:29:24:16:4c:36:de:90:82:
f1:00:16:08:52:08:ba:bc:09:39:14:2b:7b:aa:eb:57:6e:b0:
52:33:98:0a:fd:12:77:ac:31:e2:03:21:07:a9:3c:cd:c6:e6:
b2:9d:2a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:49:39 2026 by rpki-client