Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: umUOzvv5TCuRzgfug0dY3bMXpOz55McPD8mrt2FQKs8=
Subject key identifier: 4E:BE:31:80:8B:A1:46:EB:EC:34:F7:DC:ED:22:AF:BD:25:42:C8:37
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019D2704A13D66124A9D946200D7497D6AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: 1-gO4QgPPqp1Kak3_666d1-5pe9c.roa (hash: qTzaIkVWn2wQ4/BhUvBh5PhVLGzlNE9Q4I9h2wouay8=)
2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: 0cgWZ65JnlXBJ7Q+y92skEqHXTnSEA7zfUgb/GM4PxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a1:3d:66:12:4a:9d:94:62:00:d7:49:7d:6a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=4ebe31808ba146ebec34f7dced22afbd2542c837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:08:27:6e:d6:a4:9e:a5:cc:0a:90:63:47:
95:c8:df:f1:a4:85:7c:07:cd:72:6c:bc:ea:7a:86:
2b:07:cf:6d:ec:a1:c6:94:a6:b8:dd:a9:d3:03:4b:
8e:20:62:30:87:b6:4a:a2:2b:58:88:e1:71:8f:fc:
34:82:ab:66:22:ef:17:f8:c2:97:0d:80:b7:24:71:
79:88:6e:3f:23:cb:40:a9:c6:ca:57:91:57:66:0b:
9a:74:81:e0:77:62:76:9a:17:45:fa:6a:7b:2d:2c:
38:d9:71:4e:b8:c9:33:8d:b6:6a:da:c0:f0:7b:6d:
bc:0e:92:b5:2a:c1:6f:85:27:21:c6:f7:62:10:6a:
8a:ca:51:25:a0:3d:24:08:e6:54:60:b8:40:08:26:
73:9e:70:a5:b2:86:48:79:78:bc:3a:c2:6d:14:a9:
eb:a2:78:89:c6:a6:57:89:e3:8b:74:28:4f:a6:0d:
2d:5d:f5:74:e8:00:d3:ad:b0:39:73:e4:72:0c:ec:
f3:62:0c:4a:73:6d:9a:17:e6:2c:70:87:64:ae:dd:
b1:e7:dd:3b:8d:83:7d:48:45:70:c1:4c:59:77:73:
0b:0a:af:46:25:43:ed:bf:28:2d:88:e7:73:23:f5:
9a:95:5a:8d:53:fc:b0:b3:98:42:91:46:ac:3b:54:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BE:31:80:8B:A1:46:EB:EC:34:F7:DC:ED:22:AF:BD:25:42:C8:37
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:3d:7d:7b:a1:6e:dd:ea:7a:f8:de:65:95:df:32:ab:a5:53:
53:72:1b:a1:4b:53:28:83:f0:84:fa:52:4f:c9:c8:4c:c1:fb:
ff:81:85:31:8d:4b:c1:96:b6:1b:f3:06:d9:c4:b0:3d:6b:75:
07:ce:10:ef:45:4c:93:ab:65:68:95:c3:41:22:a7:31:eb:4e:
ba:b7:79:f3:b7:9c:6e:57:8d:e0:74:dc:c4:e0:9c:86:67:36:
20:5c:ef:e6:aa:46:99:ee:64:51:69:64:49:2c:af:b5:6b:87:
e1:d5:dd:1b:c2:a3:c9:2c:74:20:24:f9:93:3d:f0:c9:06:a7:
ab:a9:21:45:82:4c:ae:94:a2:5e:f0:f6:21:f3:a2:4b:58:0d:
61:cd:03:ab:7b:23:94:e1:29:ec:94:98:08:30:3f:64:0a:55:
3b:e6:9d:ab:8c:60:fe:95:cd:40:f6:18:74:67:e1:fa:82:85:
f9:d4:7e:f7:d4:da:7a:ef:51:12:33:43:f6:c1:f8:7d:1a:f0:
0f:4b:e0:39:30:66:83:87:31:b6:df:20:11:de:01:c1:92:ce:
87:12:9e:dc:da:89:a6:a0:93:45:f1:14:cd:cb:1f:67:10:b2:
96:82:c4:dc:c6:c7:58:a9:2c:2c:b6:50:82:92:48:a8:ed:a4:
8c:d3:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:56 2026 by rpki-client