Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: 7QA9A5aYLajw+wXWifC9erTmKpwG7aoQrWyKWhRTmtw=
Subject key identifier: 8F:7D:1E:53:AD:08:8B:C5:35:8E:A1:A3:FD:4F:DA:56:D6:8A:21:58
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 019D28BBAA25A9060E8F4275C9830A37BB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 01F7
Signing time: Thu 26 Mar 2026 06:01:20 +0000
Manifest this update: Thu 26 Mar 2026 06:01:20 +0000
Manifest next update: Fri 27 Mar 2026 06:01:20 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: CwxbVHJuxuv1dAOeDfqWaGXMaAKvjLPo/5cbTsdgRXM=)
2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:aa:25:a9:06:0e:8f:42:75:c9:83:0a:37:bb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: Mar 26 06:01:20 2026 GMT
Not After : Mar 27 06:01:20 2026 GMT
Subject: CN=8f7d1e53ad088bc5358ea1a3fd4fda56d68a2158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:a6:d6:db:7b:3b:c0:79:b8:16:9a:d4:16:
fb:54:93:7e:7c:a6:4d:54:5e:39:94:55:d8:2e:cd:
63:15:13:8e:26:d8:26:bb:1e:28:d7:ff:2f:7c:e9:
34:03:38:ec:5e:39:5d:5c:3b:ed:c8:f2:61:b0:77:
ec:a4:bb:78:ec:7a:d7:dd:31:63:b2:fa:63:a0:ae:
3b:d7:37:8c:a0:14:2d:8c:36:e8:14:3e:97:12:c7:
90:31:1c:b5:fd:41:16:83:01:a7:64:8f:2d:3d:1e:
7b:ec:ae:36:d2:74:ad:5b:c6:5b:fb:86:c6:12:9c:
9f:6b:ab:08:ea:98:56:2f:78:b0:0e:40:e4:09:88:
e9:a7:7f:da:35:ae:5e:a9:2e:cd:24:08:4b:28:59:
64:c5:de:6d:c9:1c:f4:2d:7d:e5:bf:32:77:dd:e6:
fb:8a:59:02:bf:34:de:46:33:15:cf:c7:9c:9a:05:
3d:86:e5:e0:05:98:bc:64:37:df:81:a0:a3:2c:46:
f2:3a:1f:03:fd:93:8c:7d:e7:36:13:9c:b4:7e:8c:
5c:66:90:dc:dc:18:ce:c4:aa:07:3f:7e:83:c9:a6:
9f:38:3c:34:60:89:53:ba:e8:a3:06:8d:38:9f:b3:
41:1c:ae:9a:02:43:2d:e9:6d:46:24:18:55:ee:b4:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7D:1E:53:AD:08:8B:C5:35:8E:A1:A3:FD:4F:DA:56:D6:8A:21:58
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d7:51:c5:f7:ba:ee:82:6f:07:7d:e4:9a:62:96:78:8a:46:
a6:8a:1b:d6:44:2a:03:f7:98:26:cf:0e:cd:f8:b0:cb:fe:1d:
3e:45:a6:ad:98:b8:c3:df:ce:90:67:15:f1:e6:26:d4:19:4d:
93:ff:44:aa:70:26:08:08:d6:87:fc:4b:33:11:9f:21:ad:9f:
eb:7b:1f:0a:7d:f8:34:b3:9d:27:ed:c5:a8:26:b3:6d:97:ab:
62:a1:3e:1d:13:92:83:49:14:c2:0e:14:22:e7:04:ad:ba:7f:
5c:2e:1c:f6:83:60:a6:cb:17:57:ff:87:80:f4:86:d8:55:db:
a3:90:c7:10:26:56:d0:66:78:61:73:b6:7a:05:0b:c5:33:ea:
13:6c:55:28:07:fc:36:bf:89:f2:64:92:89:3f:a1:93:e5:d1:
a8:8a:f7:9e:13:8b:00:40:0d:cf:ce:fa:56:57:33:37:c6:bc:
d7:c7:ea:9e:24:c7:99:72:93:6d:e5:ad:7d:7f:d3:9f:2a:9d:
d7:ba:a2:ba:b8:a7:58:97:54:42:fd:1e:70:3b:df:17:18:f0:
ce:9f:b5:ee:3a:52:c1:4e:4b:42:a7:c5:e8:31:92:94:e6:3c:
4c:7f:24:b2:a8:ef:bc:cf:c0:97:0e:52:fb:6b:33:98:ff:2f:
01:9b:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:02 2026 by rpki-client