Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
File: _OTzlnKb9HjmNlSYIfb2lw2JP1I.mft (raw, json)
Hash identifier: os+E/OKwGV3etByuyeFCC2lf8ascLHEwB98d9HBZFtE=
Subject key identifier: AD:ED:B1:B1:D9:2E:96:2A:61:84:D2:95:C8:A6:8D:22:EE:28:90:B8
Authority key identifier: FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
Certificate issuer: /CN=fce4f396729bf478e636549821f6f6970d893f52
Certificate serial: 019D28844829652BE965CC253373CD1F6CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:50 +0000
Manifest this update: Thu 26 Mar 2026 05:00:50 +0000
Manifest next update: Fri 27 Mar 2026 05:00:50 +0000
Files and hashes: 1: C9Ra18IQZMYPkfBHca82xhr0cTA.roa (hash: SV7yW/23Qp7R5wgSCdgQtEDtBATncL3nb2e5yjh6BqQ=)
2: _OTzlnKb9HjmNlSYIfb2lw2JP1I.crl (hash: wqGXjmEJfC6InB0mMnlNXx3NeDQkDAOuXDVYC5EemDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:48:29:65:2b:e9:65:cc:25:33:73:cd:1f:6c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce4f396729bf478e636549821f6f6970d893f52
Validity
Not Before: Mar 26 05:00:50 2026 GMT
Not After : Mar 27 05:00:50 2026 GMT
Subject: CN=adedb1b1d92e962a6184d295c8a68d22ee2890b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:37:c0:9e:da:61:36:cc:62:5f:b1:88:27:
55:71:eb:60:90:ac:df:ff:8e:9a:f5:ea:a7:bf:81:
96:6d:96:4f:6a:63:03:1b:a6:ce:50:1f:1d:09:04:
a7:fe:55:55:76:a7:75:16:91:87:03:39:eb:00:3a:
fb:a6:31:07:65:cf:7d:3e:dc:09:80:40:ba:a7:b3:
02:88:2d:99:c8:b7:19:4a:43:5e:ff:04:3c:35:28:
e9:00:83:17:01:74:5c:a6:69:59:d1:b9:c8:dd:96:
7b:fa:d7:35:e5:80:3a:03:a5:4b:66:37:89:f5:42:
17:75:56:17:73:19:9b:b2:b4:11:d9:3c:b1:ab:9d:
c1:a3:db:df:86:0c:93:c0:51:87:cd:5a:3e:36:3b:
5b:d1:87:be:1d:48:36:db:91:0f:9c:5b:c6:a5:0a:
bb:61:70:55:35:86:34:27:b9:bd:d6:94:5a:79:3f:
fc:79:05:7d:67:15:0d:0a:9b:88:28:fe:3d:44:f5:
45:42:1c:8e:bc:09:df:66:bf:e8:01:64:a6:69:44:
1b:64:d7:aa:f8:b2:94:89:e5:44:ec:14:b8:23:26:
60:5e:cb:13:03:a2:ed:3a:41:7a:b7:f0:0f:05:0f:
4b:48:a0:1e:13:09:be:6e:46:a4:41:b1:0e:8d:30:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:ED:B1:B1:D9:2E:96:2A:61:84:D2:95:C8:A6:8D:22:EE:28:90:B8
X509v3 Authority Key Identifier:
keyid:FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:83:5d:7c:c7:a6:bf:a9:36:36:44:a3:a7:5b:ee:4b:28:6f:
4d:93:51:e3:74:1c:a1:86:d1:6c:d5:13:fd:7e:32:27:97:76:
4c:cd:ea:9f:64:5f:ce:4f:e7:4f:74:8c:d3:8e:9c:74:95:27:
c8:f4:fd:b7:49:72:c1:0a:39:ad:f6:11:ff:98:09:f0:c1:c0:
36:f1:f2:1a:e4:4e:66:8a:bb:37:46:7b:64:72:58:16:03:7a:
f0:4b:e0:b3:8f:87:46:0e:c1:89:40:9f:4f:e6:9a:d7:70:5d:
b2:6d:40:55:72:0b:1b:fc:00:30:6f:f0:de:a6:36:57:b5:30:
a6:fb:a5:a9:4c:20:e4:ca:3c:af:64:aa:41:14:31:0c:8a:ea:
6a:1b:94:fb:a1:00:dd:ee:8a:cc:d3:66:06:38:c3:ee:58:84:
a1:13:70:40:d2:cb:f3:e1:a5:54:b6:60:65:08:9d:29:c9:03:
22:47:77:53:94:93:dc:a9:f4:41:7c:cf:aa:38:33:6a:67:31:
ba:ef:59:09:5e:ff:dc:ab:20:28:f5:b7:c4:c0:63:56:c0:ef:
ff:ee:68:5e:b1:c3:bc:25:a7:dd:74:f7:07:df:c3:19:1c:86:
d7:09:d2:48:ed:a4:94:e4:de:f8:64:2c:6b:08:ac:3c:bf:d5:
e1:84:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:02 2026 by rpki-client