Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: UrEmWfDb1kUOfWnK4aTdOYRtwosruWODUhPeGePLV88=
Subject key identifier: 51:8D:0E:7C:5E:BC:E3:2F:51:19:5C:7F:39:32:F4:73:2C:54:C3:56
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 019D273B0776CB202D292DD215D388190AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:13 +0000
Manifest this update: Wed 25 Mar 2026 23:01:13 +0000
Manifest next update: Thu 26 Mar 2026 23:01:13 +0000
Files and hashes: 1: QVqjoZxOanPkSrpEE0sDBKehWCQ.roa (hash: k/xCn5DILtdCdVds1aCxyFqhcnoj9r7lODhjJ0bo6sk=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: RsSc3blPQ9JNgMjyTNBN4nRlVbtfYwLXllMmzZzkP6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:07:76:cb:20:2d:29:2d:d2:15:d3:88:19:0a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Mar 25 23:01:13 2026 GMT
Not After : Mar 26 23:01:13 2026 GMT
Subject: CN=518d0e7c5ebce32f51195c7f3932f4732c54c356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:66:2a:8d:e4:4f:88:b8:4f:f4:38:9e:f6:
a1:20:79:88:6f:20:eb:6f:75:e2:93:ec:47:f4:87:
3a:56:77:d2:e8:3c:18:7e:bf:a2:6c:7c:a1:37:d8:
36:d2:ae:c2:9e:5f:bb:f7:7f:65:ff:10:bf:4b:df:
05:df:15:77:3e:82:21:ed:f0:48:ea:a0:79:e0:0f:
e8:44:ba:81:a6:dc:32:00:e1:8b:79:d1:01:4c:10:
98:ed:6f:70:0c:1c:c4:ce:2e:9d:d6:a5:30:7c:78:
d5:0b:db:da:61:0b:d9:f6:2b:39:75:d8:e9:f2:64:
7c:63:9d:75:bf:49:50:d8:d4:6e:a6:23:fa:f4:10:
1b:75:54:29:58:d9:6a:d5:bc:ab:4c:af:8d:18:81:
af:e3:3e:42:81:27:cc:e1:86:bd:7e:5b:20:f9:d4:
f0:af:19:a8:38:c6:8c:9a:9e:74:d2:63:38:b9:b1:
c8:ae:eb:73:01:a5:cc:c6:58:d5:aa:5a:74:2d:9f:
c5:3a:39:8b:de:38:2c:7e:87:4b:22:59:4f:3b:9d:
75:c7:5b:0c:9b:59:fa:68:23:93:de:0a:3e:7c:cf:
d8:fe:d4:bf:7e:8d:1e:fd:7d:b4:d3:21:20:ec:c3:
df:dd:3d:7a:ec:ee:c5:8f:6a:48:ae:43:19:0d:fd:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8D:0E:7C:5E:BC:E3:2F:51:19:5C:7F:39:32:F4:73:2C:54:C3:56
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ee:f7:f7:1a:d4:aa:8c:92:1f:07:9b:64:a1:91:81:a6:b1:
42:22:6a:3e:cf:b4:33:5c:b0:23:e4:a2:06:80:bd:2f:b0:8b:
51:84:f7:01:3e:d1:ff:bd:e9:06:ee:a4:f3:2f:06:71:7e:c3:
ef:a5:14:5f:6f:8e:0b:d2:b8:f3:23:26:9e:06:cf:a4:0e:1f:
d1:23:d6:27:ad:ed:8c:29:48:9e:4d:3b:8d:8a:54:f1:a1:20:
78:a8:df:a3:cb:63:49:a2:7d:56:e8:ba:f8:db:8b:42:9e:a0:
4b:08:c5:34:e0:79:82:eb:88:02:8c:f9:bd:09:0a:01:dd:c2:
8a:1b:ab:a4:42:0f:98:97:0d:8a:b3:19:da:e4:52:54:eb:ae:
2f:82:20:11:55:1b:26:75:11:6c:7c:50:9b:8f:c1:12:1e:d9:
bf:36:56:1a:09:41:f2:f5:92:06:b3:f9:0d:59:8a:0e:87:68:
df:6b:8a:70:0a:26:ba:e3:34:3f:ab:87:75:d9:82:b2:c5:31:
77:f3:49:5a:c3:75:28:a6:36:36:0e:b1:14:d7:5f:3d:ef:4e:
97:36:a5:b8:e3:dd:d9:ba:4b:11:3d:29:1b:19:59:42:9c:d1:
99:d0:4f:6c:c9:0b:50:4f:d8:0e:bc:3a:10:65:f6:57:64:09:
e6:18:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:24 2026 by rpki-client