Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: 9IzKHK4kWnQmBd1atNvU8+Lx8DY90vVJ4HBnF3nZHvY=
Subject key identifier: DF:AF:8A:F3:BF:D8:CC:8E:78:CB:D3:64:DB:47:F2:28:35:F1:A8:1B
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 019DCF3E77FBDB6939F9DAEE57DB10FF696B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 14:01:10 +0000
Manifest this update: Mon 27 Apr 2026 14:01:10 +0000
Manifest next update: Tue 28 Apr 2026 14:01:10 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: Bi0y9Ez/wbrVmRqkW54l+eSZvTGatQafPSWOWW/IKLc=)
2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:77:fb:db:69:39:f9:da:ee:57:db:10:ff:69:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Apr 27 14:01:10 2026 GMT
Not After : Apr 28 14:01:10 2026 GMT
Subject: CN=dfaf8af3bfd8cc8e78cbd364db47f22835f1a81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:f0:63:ba:35:73:36:3d:63:61:ee:44:7b:
c2:fc:6f:f2:37:bd:2a:74:95:02:76:31:34:6a:23:
a6:f0:a0:f1:c7:7c:b8:e5:bf:d0:28:69:a6:b5:3b:
f8:38:6c:b0:7f:c1:a7:d5:41:40:79:ed:23:87:cf:
ca:14:3a:5c:ec:fa:a8:d7:c8:dd:70:15:48:0b:0d:
ab:46:95:95:2b:bc:2d:13:1f:15:8a:83:49:e0:11:
4c:53:07:ef:97:9d:a7:fa:5b:75:1d:c3:ae:93:b4:
a6:d4:ad:02:c8:9b:08:39:e1:dd:41:1f:ae:63:a9:
ad:58:43:ab:73:34:ac:27:bd:8f:20:dc:70:bd:6a:
a7:28:83:1c:fa:8a:48:ef:90:85:8f:cf:ab:37:d7:
10:08:f6:5c:0c:97:17:03:f8:42:f5:4b:61:af:67:
b7:1b:cd:d0:2b:cd:18:b9:76:00:4f:14:df:47:2e:
84:93:0c:03:89:f7:80:bf:68:53:ef:f3:9e:72:8c:
23:5d:15:8c:12:c7:e6:96:5c:ce:ef:9c:6c:36:6f:
d5:eb:d9:ee:a1:08:18:f4:9e:6f:74:d3:fd:5a:0c:
fb:17:a2:f1:9e:03:46:89:70:52:cb:fd:50:79:a9:
ba:20:10:03:05:cd:37:fb:9d:5d:ec:74:bd:2b:df:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AF:8A:F3:BF:D8:CC:8E:78:CB:D3:64:DB:47:F2:28:35:F1:A8:1B
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:24:d5:1e:f2:e4:ef:03:93:a6:e9:a1:0d:52:fc:ae:78:63:
e5:71:2b:51:c7:3d:05:10:31:97:fb:ed:d2:98:39:e3:f2:f6:
cc:6e:44:f7:72:ac:53:52:d5:00:c2:af:68:39:48:5d:e7:bd:
b3:c7:5d:e6:20:c8:c1:55:e4:ae:de:12:42:6e:93:97:12:5f:
e4:b2:b0:e9:37:1a:83:46:8c:f0:f3:be:68:90:03:21:c6:bf:
75:62:02:39:25:c3:7d:b5:a1:2e:b3:b5:d5:cd:81:11:7f:f5:
06:50:b6:26:4b:b2:fb:9c:01:7a:26:4c:6a:b6:66:6c:d3:1e:
f2:f6:ff:72:bd:ce:6b:57:83:ec:b8:a2:be:e7:45:f8:91:79:
de:01:5f:0b:c6:5e:9f:f6:3f:1d:0e:bd:68:1a:12:b9:d5:83:
c4:e4:03:3f:0d:65:98:e5:d7:40:16:78:f1:11:e6:64:1a:ef:
6e:57:27:fd:66:c9:cf:bd:c4:02:af:04:53:a1:4b:c5:e3:79:
1f:4b:34:e0:5d:2e:44:64:59:f1:01:0f:07:32:0c:b4:7a:ad:
bf:69:4a:26:42:59:02:02:8c:f5:c0:4c:eb:80:8d:8e:e7:f1:
f4:ce:6f:e0:b2:17:c1:9c:d3:70:bb:1a:04:79:ae:ca:36:f1:
e0:10:44:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:04:10 2026 by rpki-client