Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: ja7mrPCtsHLpqCeYSx1+2ovQPlzjWVKMf3/JXxue1dk=
Subject key identifier: 7E:21:91:07:E0:62:1E:8B:5A:5D:63:8D:D0:D2:D9:DA:2C:07:15:BB
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 01A1016CF700288BE496F31CFA1093894A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0DDC
Signing time: Sat 03 Oct 2026 11:01:20 +0000
Manifest this update: Sat 03 Oct 2026 11:01:20 +0000
Manifest next update: Sun 04 Oct 2026 11:01:20 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: p0qZ9UOcXTknapyEiGQiRPfQp1rD7NRD6sZbDPyrV9A=)
2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:6c:f7:00:28:8b:e4:96:f3:1c:fa:10:93:89:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Oct 3 11:01:20 2026 GMT
Not After : Oct 4 11:01:20 2026 GMT
Subject: CN=7e219107e0621e8b5a5d638dd0d2d9da2c0715bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:e4:20:41:f5:0e:34:c1:6e:ff:06:ec:a1:
f1:71:30:29:e0:07:75:9c:5d:a9:e9:50:ec:9f:f5:
89:01:52:0b:cc:a9:37:fb:66:37:7a:45:17:39:63:
d4:e2:23:ba:e8:3d:6a:7d:44:47:0f:49:d1:8a:47:
ff:77:19:5a:35:63:bf:21:45:aa:f1:e0:52:54:fd:
ba:04:08:08:7b:50:5b:78:f4:20:83:df:5a:bf:3b:
ac:f9:07:30:4f:7c:73:ff:bf:00:92:3a:3c:af:0e:
a7:b8:37:13:c7:22:3c:5a:5b:15:52:8c:55:f0:25:
59:ee:6b:9c:4f:4f:b7:59:6c:27:f1:62:8d:86:48:
00:d3:6b:e3:f6:c2:0f:39:ac:87:54:ce:86:c6:81:
29:32:d1:5f:44:e0:65:c7:44:27:41:86:50:d6:ee:
05:43:fe:b5:39:37:7e:8d:52:d7:c2:2b:7f:11:66:
b6:7f:46:ee:04:5d:b5:8c:8f:f1:f0:89:bb:f2:39:
6e:96:7a:43:ed:cc:3f:31:99:c4:48:42:03:1e:71:
db:dc:99:78:2a:10:a4:44:37:8a:38:83:11:90:f5:
9c:67:d2:3c:cd:13:96:2d:71:46:08:8f:fe:07:c7:
a2:48:78:ea:b4:76:fc:3c:d1:6e:f8:82:c6:24:1f:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:21:91:07:E0:62:1E:8B:5A:5D:63:8D:D0:D2:D9:DA:2C:07:15:BB
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:1f:b4:2b:15:1a:b2:0b:5b:95:ec:71:db:3f:b8:7a:d5:53:
b5:99:a3:59:70:9c:e6:0d:4c:7f:68:94:0a:bd:0c:d9:3f:0b:
05:e6:19:2e:8e:32:13:bd:b1:6e:f4:e2:91:c5:71:73:cd:28:
34:b7:61:8a:f1:dd:38:fe:05:03:7d:4d:13:a9:ee:86:df:bf:
b9:3f:11:25:e2:db:0f:2e:31:4a:ae:db:39:3e:e8:00:b4:6b:
74:6a:51:f0:eb:09:cc:72:bc:d4:33:47:9d:fd:e4:f8:67:f5:
ec:a8:1f:4e:56:0d:a7:a5:15:82:dd:f3:0a:d2:bd:56:29:dc:
8a:9d:f0:f1:9b:f6:bc:63:5f:33:a5:65:8d:ed:c5:bd:65:70:
03:3a:18:7d:91:dd:65:c2:90:0d:d5:e2:90:88:44:b7:0e:4d:
e2:99:ad:8e:df:0b:96:d4:ef:ed:91:ec:7f:e7:5b:64:19:0d:
28:c5:08:1b:57:96:44:1a:66:bd:a9:9c:b1:a2:eb:2c:87:ab:
c0:aa:43:24:5d:a1:49:f0:ea:90:f4:e7:d3:c9:f0:01:e8:9f:
c8:ac:66:13:6b:e1:e1:b8:d9:d7:d0:2f:3e:9f:ae:7c:f3:04:
ee:a3:ac:d2:33:db:8f:b1:b0:b0:a1:dc:31:a2:c1:90:b2:7d:
55:76:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:51:37 2026 by rpki-client