Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: sP8wyYMdaZgDDw7LOaH7qKfy4iIJ+2qKf72QolWq+mk=
Subject key identifier: 8F:D3:36:EF:E1:36:B4:66:CD:27:A2:D6:C7:84:1C:B9:22:F4:9C:2A
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 019D2695BF0ABBCA34D2DAF6C06DA8BFADEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0BDD
Signing time: Wed 25 Mar 2026 20:00:41 +0000
Manifest this update: Wed 25 Mar 2026 20:00:41 +0000
Manifest next update: Thu 26 Mar 2026 20:00:41 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: fHBbYA11VMWeh8ZVCi/RMpDW/JSW4PzzaN42PYmLlxk=)
2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:bf:0a:bb:ca:34:d2:da:f6:c0:6d:a8:bf:ad:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Mar 25 20:00:41 2026 GMT
Not After : Mar 26 20:00:41 2026 GMT
Subject: CN=8fd336efe136b466cd27a2d6c7841cb922f49c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:39:48:00:90:ef:7b:32:d5:a4:00:91:c7:
37:aa:b2:86:26:7e:f9:8c:c2:ef:92:79:f5:20:1d:
bf:be:ff:de:33:2f:c8:c8:ae:06:7a:20:f4:73:95:
ee:3a:e2:1c:80:5a:7e:14:6c:1a:d1:c7:67:a6:26:
35:20:b7:a4:8e:28:90:f7:5d:84:41:92:fa:e9:f9:
f6:9e:ad:01:22:39:8a:ba:fe:ba:30:7f:28:99:37:
af:aa:83:71:a7:e3:6b:d1:79:7a:ec:12:89:ce:72:
12:1b:68:d5:80:02:bb:3b:89:14:e8:92:1a:73:46:
a3:3c:70:5d:8a:29:ad:1f:a5:4c:76:44:9a:5c:87:
6e:0c:75:78:27:21:55:11:df:af:74:de:01:c8:5d:
4e:db:28:b7:7f:1a:1b:ff:00:37:aa:c8:f8:35:9a:
51:45:83:d3:c7:69:6a:57:37:a3:1e:33:73:ee:e7:
0d:ba:5d:ea:ef:61:2e:be:9b:29:b4:42:e2:f3:5a:
68:e6:d8:c6:f6:ad:76:4e:ed:9f:23:69:9d:16:49:
e2:1c:63:ab:68:66:9f:02:50:65:0a:f9:bc:03:d6:
28:32:7a:f8:a1:1f:7a:33:a0:b5:b5:1c:e5:37:15:
a2:24:df:27:1b:52:bf:c8:fa:45:92:9f:04:e0:4a:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:36:EF:E1:36:B4:66:CD:27:A2:D6:C7:84:1C:B9:22:F4:9C:2A
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c9:a8:42:90:a1:e4:59:ac:f4:15:4e:27:0b:f1:6e:b2:1b:
ad:37:3b:f2:d1:1f:e5:55:f2:1b:12:50:fd:5c:9d:e0:38:59:
d4:ea:fc:df:c7:de:30:2d:b2:e8:91:66:1c:d9:95:4c:81:84:
8a:fb:8a:5a:e8:b6:4b:cf:fe:44:87:0e:08:18:e5:95:ae:71:
74:f5:48:3f:a2:1d:eb:f4:8c:cf:9c:36:c4:d7:4f:0c:06:12:
7c:6a:3a:06:14:d1:82:78:92:9a:f5:ec:ec:9d:ca:1b:33:2f:
4b:be:a8:75:2a:7f:03:00:44:59:8d:64:cc:f4:33:9e:1e:88:
11:08:1a:c7:b9:4d:71:2e:69:d1:e2:27:3b:dd:01:f9:67:d9:
1f:21:4b:19:24:ec:f4:2d:c3:a0:4c:8d:be:22:87:70:87:95:
e6:ed:0a:30:fc:ff:9b:47:f1:56:e8:35:96:8d:34:ef:5b:a8:
b5:13:6f:1c:ec:13:99:54:cc:2b:9c:2f:73:28:61:b5:3e:ae:
d2:65:84:2e:95:95:94:ee:de:dd:61:b3:1a:fd:e8:46:26:bc:
1f:61:66:70:8b:86:de:c9:8f:4a:a1:68:2f:45:59:7a:62:82:
e9:56:de:b2:4b:15:c8:e5:35:a6:2c:23:73:59:03:2c:d2:5b:
ed:6b:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:48:26 2026 by rpki-client