Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier: BpEhkRoyhAT6JiVdId5wkVlDfdkk4pjLv+H0TEJ6GcQ=
Subject key identifier: FA:50:95:86:F6:BD:24:85:3B:5F:EE:26:E0:9B:A4:5F:1F:12:D9:95
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 019D2B855166F4112D7033B8152559C7C1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number: 132B
Signing time: Thu 26 Mar 2026 19:00:50 +0000
Manifest this update: Thu 26 Mar 2026 19:00:50 +0000
Manifest next update: Fri 27 Mar 2026 19:00:50 +0000
Files and hashes: 1: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: JQTAX864LjtcBXN+J31eJidIjrD3snb16IzoOKLWq58=)
2: wKG5f7dn1-pgRZqivJIzmXImgvk.roa (hash: 9MbV7Vdo6+ToMH+TbPulkfdTZLPlSBCEwYkmIQl3ggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:51:66:f4:11:2d:70:33:b8:15:25:59:c7:c1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Mar 26 19:00:50 2026 GMT
Not After : Mar 27 19:00:50 2026 GMT
Subject: CN=fa509586f6bd24853b5fee26e09ba45f1f12d995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:16:ca:e4:92:73:a0:36:6a:9a:6b:6e:39:
b6:00:4b:84:bf:bf:37:23:63:e7:ae:ac:e7:6a:1d:
42:4b:00:bf:e7:be:82:ce:30:46:54:c7:82:ba:c1:
aa:01:38:ac:a8:c3:f2:cc:1b:cc:a7:81:51:22:f5:
59:a4:fe:73:da:67:33:50:30:99:ff:19:33:de:ca:
e3:09:b0:1d:bb:9f:0d:8f:ee:a2:54:c6:d0:df:3a:
74:b0:4e:ed:b7:43:f6:20:32:cf:48:71:f1:7c:b6:
5e:a0:a2:bc:11:82:f2:88:fa:63:19:9e:38:3a:0d:
6d:be:65:58:40:9f:1d:89:91:fa:74:3c:f7:e1:ce:
57:9a:7a:30:7b:d7:d4:84:87:1a:af:0a:73:e6:bc:
f3:ee:b5:7a:a0:fd:6e:ef:e2:27:a6:36:c1:85:f7:
3e:d0:08:d1:85:90:8c:c9:d3:5f:d8:6c:75:98:b7:
05:2f:a2:45:11:54:45:43:a0:d7:bf:31:ec:e7:0b:
f6:43:98:24:20:0b:08:2b:bc:81:18:c9:52:ae:e8:
23:f5:bb:0a:69:61:7d:ac:00:a2:49:d3:6c:58:f6:
94:92:eb:80:f8:af:47:ef:9e:f2:d1:7c:4d:cd:d5:
df:52:ae:a6:01:db:be:50:d4:72:10:c8:4c:b0:65:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:50:95:86:F6:BD:24:85:3B:5F:EE:26:E0:9B:A4:5F:1F:12:D9:95
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:29:1f:a0:6d:28:94:7e:44:e8:d6:8a:18:5b:a2:05:06:f3:
94:fe:53:79:54:2c:72:5f:f2:61:3c:a2:56:44:d0:68:ac:c4:
4a:72:4b:09:76:9b:9a:9b:f1:ae:bb:e8:48:f3:90:f4:24:8d:
1d:91:9d:84:22:14:89:63:f2:e5:23:c2:74:bb:5f:da:cc:1e:
40:a7:fc:d8:79:79:dd:b5:b5:e5:f4:56:7c:56:8f:21:98:98:
37:13:e4:15:94:44:91:ea:a6:f2:d0:43:5a:14:f7:b2:de:8b:
67:c3:78:46:cd:d3:70:c3:e0:b5:9a:0b:4e:ec:cf:80:cd:e7:
80:e2:68:a2:58:c7:89:f2:2d:08:3c:b6:20:94:4c:d9:b0:cb:
8d:4f:f5:f5:96:0c:5e:80:3e:5e:ad:8b:14:43:76:83:4e:8f:
22:f5:84:f4:71:18:d0:86:4d:4c:a6:39:31:e6:0b:1e:2d:df:
90:a8:b8:cc:37:90:69:a2:a4:2f:06:99:81:d8:26:ac:6d:11:
a7:ea:18:eb:09:8f:96:ac:14:9f:b9:5c:a8:a2:33:cb:4d:c9:
05:5f:c3:57:8b:06:17:35:ab:3d:51:83:4d:69:8a:19:0b:f5:
69:8d:c4:4a:f3:21:fb:c8:1e:19:75:8c:9b:fd:24:87:77:ce:
27:5c:4e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhVFm9BEtcDO4FSVZx8HFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzc4OTFkZDRmM2RmODM3NzJkN2NmZTcxODM4NDNjYmZm
NDRkNTQwHhcNMjYwMzI2MTkwMDUwWhcNMjYwMzI3MTkwMDUwWjAzMTEwLwYDVQQD
EyhmYTUwOTU4NmY2YmQyNDg1M2I1ZmVlMjZlMDliYTQ1ZjFmMTJkOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR4WyuSSc6A2apprbjm2AEuEv783
I2Pnrqznah1CSwC/576CzjBGVMeCusGqATisqMPyzBvMp4FRIvVZpP5z2mczUDCZ
/xkz3srjCbAdu58Nj+6iVMbQ3zp0sE7tt0P2IDLPSHHxfLZeoKK8EYLyiPpjGZ44
Og1tvmVYQJ8diZH6dDz34c5Xmnowe9fUhIcarwpz5rzz7rV6oP1u7+InpjbBhfc+
0AjRhZCMydNf2Gx1mLcFL6JFEVRFQ6DXvzHs5wv2Q5gkIAsIK7yBGMlSrugj9bsK
aWF9rACiSdNsWPaUkuuA+K9H757y0XxNzdXfUq6mAdu+UNRyEMhMsGUy2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpQlYb2vSSFO1/uJuCbpF8fEtmVMB8GA1UdIwQY
MBaAFKE3iR3U89+Ddy18/nGDhDy/9E1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMt
OGRkYTZjNmNhODFkLzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMtOGRkYTZjNmNhODFk
LzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSkfoG0o
lH5E6NaKGFuiBQbzlP5TeVQscl/yYTyiVkTQaKzESnJLCXabmpvxrrvoSPOQ9CSN
HZGdhCIUiWPy5SPCdLtf2sweQKf82Hl53bW15fRWfFaPIZiYNxPkFZREkeqm8tBD
WhT3st6LZ8N4Rs3TcMPgtZoLTuzPgM3ngOJooljHifItCDy2IJRM2bDLjU/19ZYM
XoA+Xq2LFEN2g06PIvWE9HEY0IZNTKY5MeYLHi3fkKi4zDeQaaKkLwaZgdgmrG0R
p+oY6wmPlqwUn7lcqKIzy03JBV/DV4sGFzWrPVGDTWmKGQv1aY3ESvMh+8geGXWM
m/0kh3fOJ1xOZA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:25:22 2026 by rpki-client