Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier: WF98kw/GMquSi4dGNAx/XTe+dYIvUdVG1Z9h9wj3Zrs=
Subject key identifier: 42:10:CB:B5:2B:A9:7A:21:91:2A:71:0D:11:63:FE:81:E6:65:F5:C9
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: 019D27E063AB8A62D740CDCDD74B96F81E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number: 0F56
Signing time: Thu 26 Mar 2026 02:01:50 +0000
Manifest this update: Thu 26 Mar 2026 02:01:50 +0000
Manifest next update: Fri 27 Mar 2026 02:01:50 +0000
Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: UgfVopHPjh10Jqe+9KukYR1S2iygpMSPiucAkcTFUyM=)
2: ovrf878QfyGREV5ySXZAKG2wEj0.roa (hash: 8FVx6K1N+lYlmVzhGRofLmSyeuuSSiLMjYmgLA57T9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:63:ab:8a:62:d7:40:cd:cd:d7:4b:96:f8:1e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: Mar 26 02:01:50 2026 GMT
Not After : Mar 27 02:01:50 2026 GMT
Subject: CN=4210cbb52ba97a21912a710d1163fe81e665f5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:70:28:95:0e:09:dd:35:f6:87:9a:40:f9:
23:75:9e:8f:e8:ae:85:d7:be:c0:df:9a:71:60:f0:
d9:e9:17:7f:fa:a0:60:8e:39:48:b5:36:28:5a:3b:
10:4c:2d:32:12:b2:a8:8a:23:32:75:e4:a3:c5:6d:
28:e5:ad:60:cd:f3:06:d4:4f:55:bb:5e:aa:fc:66:
50:2b:77:ac:6c:40:21:4f:a5:0f:0e:9f:92:d8:f2:
40:78:d0:84:8b:f3:39:21:5f:94:a1:bf:61:aa:e2:
80:09:0d:a7:16:6c:f9:b7:80:e1:0e:95:98:81:f3:
11:78:ae:f2:33:c1:e4:1b:38:e2:bf:9e:90:5b:41:
04:9b:70:2e:e1:88:ad:bd:70:9e:02:60:21:34:b9:
14:26:49:91:05:52:57:3e:70:3d:2f:c2:23:9a:40:
0e:f0:7d:2b:12:fd:ef:a1:b6:fd:df:a9:be:7f:3d:
34:0b:86:e4:1c:48:10:b1:0d:a2:6a:c6:1b:12:3c:
3b:18:43:91:80:1a:ed:f7:43:80:c6:3f:31:54:35:
76:02:ef:44:b0:a3:20:3c:ee:73:48:21:88:05:46:
24:93:bc:6b:10:93:20:a9:32:a2:59:2c:a0:70:3f:
45:2c:f9:2b:7f:ee:19:0d:6a:83:01:3f:c1:b3:e8:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:CB:B5:2B:A9:7A:21:91:2A:71:0D:11:63:FE:81:E6:65:F5:C9
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a9:23:87:0e:f8:44:fc:e7:df:59:ea:6b:99:85:90:b1:02:
44:ab:bf:1d:e5:82:b4:38:21:b6:f3:d1:cf:74:35:e8:eb:12:
53:7f:66:33:4e:f2:7d:67:0f:94:12:29:9f:21:b9:50:30:e2:
9b:34:d1:4c:39:5e:6e:96:95:e2:71:92:04:4b:83:30:07:3c:
10:dc:62:9c:d4:66:78:6d:10:41:ef:73:4a:71:42:0b:c7:17:
59:36:8f:92:aa:39:9b:86:f2:9f:bd:5e:de:65:c8:97:49:57:
72:02:49:41:0b:94:14:f4:73:aa:71:55:db:54:2f:88:a8:71:
8c:2c:ad:91:b9:95:3f:c3:38:11:3c:11:76:18:38:01:20:f9:
39:cb:c7:ae:80:5c:5b:0e:cf:ea:c4:c0:f2:f3:62:81:f7:b1:
3c:82:a9:1d:f9:62:33:79:39:6e:21:26:8e:8d:36:92:71:46:
1c:2b:1d:38:b8:83:a5:98:f4:d9:e7:f2:da:20:9c:07:4d:3d:
70:c8:2d:3d:c1:96:29:7b:5c:f0:32:fe:04:e9:f7:6c:5b:26:
1b:b2:a0:dc:f1:91:1c:67:ed:27:ea:b0:ad:62:ac:8c:86:bc:
a9:2e:c7:60:f2:1c:8e:49:65:ac:0d:eb:81:7f:33:67:dd:1b:
6f:3e:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:07 2026 by rpki-client