
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: h3A059u+QODHUR4pvs+bD3h8VmPrAf1H75jelYlO/tE=
Subject key identifier: 19:A9:62:AE:0C:AC:3F:95:FE:1E:0C:34:8E:15:4E:E5:7E:2B:C5:75
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 019F9392617BB58E29A4A0E75DFB71383F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 146A
Signing time: Fri 24 Jul 2026 10:01:11 +0000
Manifest this update: Fri 24 Jul 2026 10:01:11 +0000
Manifest next update: Sat 25 Jul 2026 10:01:11 +0000
Files and hashes: 1: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: iOaUPMEzmer9b/+TYaXDUprjq4nsAYXiD8EVkJYyqXE=)
2: wKG5f7dn1-pgRZqivJIzmXImgvk.roa (hash: 9MbV7Vdo6+ToMH+TbPulkfdTZLPlSBCEwYkmIQl3ggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:61:7b:b5:8e:29:a4:a0:e7:5d:fb:71:38:3f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Jul 24 10:01:11 2026 GMT
Not After : Jul 25 10:01:11 2026 GMT
Subject: CN=19a962ae0cac3f95fe1e0c348e154ee57e2bc575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:1d:ab:d4:d5:f1:82:79:9d:02:8e:a0:50:
12:fe:d3:1c:82:18:c7:5a:c7:bd:b3:9a:70:d1:33:
3a:f8:1d:b4:d7:f0:21:d9:cb:fa:2f:7f:ae:d5:e4:
6f:da:72:3f:66:31:38:18:7e:09:38:eb:8a:ff:09:
32:c4:80:a1:b6:71:c6:3f:51:b9:a5:ec:29:55:f1:
a3:8b:47:ac:e7:18:10:bb:ce:6b:1e:b5:2b:80:60:
9e:27:d1:92:e6:c9:6e:0b:15:25:a6:6b:19:76:96:
cd:a2:ab:19:d3:3b:b7:2a:33:b7:6e:1b:34:df:a9:
17:81:c9:59:53:b0:fd:36:84:53:25:4f:5f:2b:82:
13:16:6d:56:c7:12:7f:bc:d3:15:3b:01:96:7c:4c:
ea:a6:22:0b:55:fc:ca:6e:52:27:97:1b:3f:d8:a0:
f8:dd:9e:97:cc:56:22:8b:22:64:84:33:fa:55:97:
d7:14:e2:9e:10:c2:1f:c0:4b:9c:1f:ed:fe:6d:5f:
fc:be:3a:14:e1:83:fc:b3:d0:e0:cb:e0:0c:5a:da:
db:e7:e0:6d:5e:fa:45:9e:9b:4e:f8:44:39:28:e8:
d6:a7:52:48:2c:e8:86:f6:d4:cf:8d:f8:53:ba:b2:
97:6d:59:b9:ce:ee:45:53:fb:7a:32:60:95:8a:42:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:62:AE:0C:AC:3F:95:FE:1E:0C:34:8E:15:4E:E5:7E:2B:C5:75
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d2:d1:43:ee:17:b3:4d:35:aa:32:cc:e4:6d:03:7a:97:45:
e8:80:f6:13:8e:23:46:41:20:4d:2a:0d:38:a2:25:d6:9b:88:
07:6b:4d:d5:d4:88:4a:81:5a:5a:14:3e:f4:0f:5f:3b:11:1a:
a9:8a:a3:ee:fb:b4:42:fe:e1:37:9d:6c:95:70:f1:eb:0d:18:
26:f0:8e:cd:2d:44:cc:30:6f:c5:04:8f:82:1a:f0:23:3d:eb:
2f:3d:8e:00:80:b8:45:21:b4:89:e6:37:e0:14:68:24:0e:3f:
13:5f:8d:37:14:cf:87:a1:10:e9:e2:8a:69:4c:ff:08:32:de:
cf:31:36:48:5a:4d:6d:0a:23:4a:89:8d:5c:07:f7:3b:f2:45:
21:d4:8a:f6:62:de:02:60:1c:5e:4f:b1:89:db:6c:a0:49:c8:
fe:d1:80:ef:57:21:ab:27:67:dd:de:68:8f:f9:58:0b:73:5a:
f3:63:55:57:13:d6:be:04:64:ad:90:b7:be:f4:e3:30:6a:b2:
dc:7d:b4:21:24:5e:d9:44:43:cd:6c:20:61:fc:40:8b:58:ea:
80:d5:8d:ae:f7:c0:7a:6b:5e:a9:9e:76:26:a8:1f:fa:2b:7a:
4e:4b:7b:22:d6:71:02:e6:3c:d8:6a:9f:25:7c:8c:80:27:49:
90:de:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:25 2026 by rpki-client