Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: dKUia9Cn3G3Hf4bHLqZGPF+oEsFf3mc2GZnUUet2Gn4=
Subject key identifier: C1:0C:4E:56:5E:F0:87:65:A7:65:F4:AE:EC:CB:FB:65:35:7E:49:DB
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 019CE7805C35C2607C6B3B4E4FC237C2F3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 186A
Signing time: Fri 13 Mar 2026 14:01:14 +0000
Manifest this update: Fri 13 Mar 2026 14:01:14 +0000
Manifest next update: Sat 14 Mar 2026 14:01:14 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: jejrEzrqIcOCszaX3xLV5mGJ9Uoln3NkER4tQECDFbA=)
2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:80:5c:35:c2:60:7c:6b:3b:4e:4f:c2:37:c2:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Mar 13 14:01:14 2026 GMT
Not After : Mar 14 14:01:14 2026 GMT
Subject: CN=c10c4e565ef08765a765f4aeeccbfb65357e49db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:e2:92:70:64:2d:ee:b7:b4:69:62:08:55:
8f:9e:cd:2a:8d:ab:cd:28:7b:f9:64:8e:05:e9:06:
b5:10:ed:25:3d:ed:b0:00:ba:1b:d1:c4:2c:07:dc:
6b:8a:52:9f:a0:5c:09:56:43:99:53:39:e3:ad:25:
57:3d:4a:f6:a6:dc:c9:43:98:a2:5d:21:a5:cb:46:
41:29:8a:9f:83:b2:19:56:dc:c2:e6:a4:60:d1:b8:
36:6c:6c:87:cd:bc:cb:df:fc:48:f7:57:a9:48:7f:
05:20:46:6d:b7:72:43:4f:f1:8a:0a:f9:e8:0f:a2:
07:f2:cb:28:17:f1:12:8d:9e:5b:3e:7e:9c:98:95:
63:73:93:0e:c7:84:dc:e5:0d:1e:78:08:f9:a6:1e:
4e:cc:52:f1:f7:01:34:bd:13:0e:97:62:e7:56:2f:
4c:55:96:cc:f3:e4:82:a4:c4:37:12:83:f3:24:79:
c4:6a:52:0d:3e:ca:79:d1:bb:8d:88:2b:54:fe:86:
e2:a4:e9:5e:30:0f:5d:18:ee:83:9f:99:a1:a2:1d:
84:4e:79:d6:bc:dc:c1:f0:aa:89:16:af:4c:b1:a4:
bc:60:e4:f0:0b:ff:49:eb:3d:ef:3a:d2:f8:4a:4c:
ef:a3:6c:3d:60:a5:57:43:f4:49:c4:a4:0c:49:11:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:4E:56:5E:F0:87:65:A7:65:F4:AE:EC:CB:FB:65:35:7E:49:DB
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:16:1c:6a:58:93:d7:de:f1:8f:f4:94:88:df:0b:6a:f9:b9:
62:f6:a0:36:a8:9e:7a:69:b2:dd:62:2c:f3:32:36:3d:56:d7:
22:56:5e:2d:ad:bc:32:8e:c8:97:28:9b:3b:9b:26:cd:00:a9:
db:09:3a:c3:63:6c:95:03:00:0c:1b:66:f3:5d:c2:e1:e0:a5:
ea:0c:38:76:27:c4:c9:dc:23:9d:c6:92:cb:53:62:25:2a:97:
2d:bd:0d:2e:2d:59:a1:fe:5b:55:ed:b3:4c:80:cc:10:5f:6e:
03:bd:9e:67:e6:3a:92:c7:e3:fe:3a:02:b7:f7:23:36:44:9b:
57:2e:d1:56:59:75:9b:df:a0:78:a1:47:8a:35:b8:32:31:36:
4c:59:c4:79:99:31:5c:20:22:59:a4:d6:3f:1f:62:61:05:c5:
69:22:df:3c:e1:a7:92:cb:7b:1d:ac:47:53:70:b0:90:fc:d0:
a8:1c:45:cd:f0:75:ea:de:16:3a:b9:40:c4:a8:e3:bc:d0:4d:
d8:46:2c:66:fb:c0:92:8b:77:42:d3:04:a0:56:0e:52:1e:3a:
8c:f7:74:68:69:85:5b:f3:e5:f5:55:40:8d:10:e0:c3:ee:ee:
4a:f2:26:57:75:05:e3:fb:c9:93:d2:d2:f2:c2:8b:db:f3:1a:
3c:61:55:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:47:45 2026 by rpki-client