Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
File: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft (raw, json)
Hash identifier: l0Ef2E8/UXIgFwsGai34UnosbiHHZmNeIYzNFY0F1B8=
Subject key identifier: E3:6A:AB:78:C0:4B:92:DD:A1:10:F4:04:F9:C1:5C:F6:33:DB:BB:51
Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Certificate serial: 019D28F3034EC1961BE59AC4AFE117A5138E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 07:01:47 +0000
Manifest this update: Thu 26 Mar 2026 07:01:47 +0000
Manifest next update: Fri 27 Mar 2026 07:01:47 +0000
Files and hashes: 1: Ih9S_kZcCOhq2N4y574bLA_RZG4.roa (hash: BK3QLHH47u/5bpJq4bbQNM29Xb79UfdHFqSx0wPQ9rw=)
2: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl (hash: Nx9aTXk5jRS91A+iFFUvqW48VG1Nkv20eQzIzne9Vss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:03:4e:c1:96:1b:e5:9a:c4:af:e1:17:a5:13:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590
Validity
Not Before: Mar 26 07:01:47 2026 GMT
Not After : Mar 27 07:01:47 2026 GMT
Subject: CN=e36aab78c04b92dda110f404f9c15cf633dbbb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8f:f2:16:68:92:81:3d:4e:98:99:07:1e:e4:
58:0c:cc:5c:96:e5:73:a4:06:52:8a:f9:13:45:3b:
c0:16:31:30:16:ce:14:af:a3:b2:0f:11:8c:19:f5:
70:b7:08:a3:20:f3:50:05:1a:86:03:ff:e9:59:65:
65:60:05:60:30:90:56:30:b2:54:16:dc:07:20:a8:
16:4c:1a:87:fa:54:ae:63:4b:ee:43:84:ec:28:b7:
a8:b3:be:7d:9f:7d:14:71:0b:12:89:36:c3:8d:a1:
2c:f7:e3:b6:32:40:43:94:fb:ea:18:6f:84:a0:8d:
a0:25:3d:84:aa:5e:df:29:d4:b5:a2:1c:23:e6:65:
c8:f1:4c:67:8a:d4:83:5b:52:d9:35:c2:3d:b4:37:
1f:58:43:9b:fc:02:a3:ab:e3:41:6e:9c:fe:62:27:
c8:ab:6f:be:3e:43:a1:b9:07:69:52:c7:2d:20:71:
7b:a7:9c:1b:2e:26:f8:6c:21:59:5f:d9:13:84:09:
87:3d:4b:56:48:43:a1:93:ac:35:e1:2a:a3:99:93:
2f:8d:c6:31:43:40:61:50:08:6f:a4:d8:e5:66:af:
49:06:3a:cf:7f:76:6a:41:26:fa:6a:78:55:dc:04:
73:0c:5e:4e:32:9d:cd:6e:a5:dc:f9:bc:a3:5a:4d:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6A:AB:78:C0:4B:92:DD:A1:10:F4:04:F9:C1:5C:F6:33:DB:BB:51
X509v3 Authority Key Identifier:
keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a5:b9:09:35:f0:9a:d0:b3:b3:1f:86:58:75:22:1f:94:95:
c0:17:66:e7:4b:78:26:61:c6:2c:a3:06:36:57:e8:41:49:ec:
67:cb:5b:c1:ca:87:64:8c:2c:5a:04:ab:07:f1:26:4f:43:80:
36:37:d2:51:51:c2:f5:a0:b1:58:1f:57:83:d6:12:1a:b7:5d:
74:f1:df:0d:25:8d:fc:f2:96:93:47:ac:aa:9f:a7:3f:c7:4d:
02:a2:1e:6e:eb:d5:56:4a:6d:2e:15:83:ef:75:59:cb:4f:cd:
cb:1d:f8:b6:ea:67:08:b8:df:de:c1:51:f9:63:54:36:ce:9f:
90:70:79:0e:36:9b:18:7b:4e:c5:a1:e9:3c:07:a5:14:c8:e9:
48:d0:d2:26:b4:15:31:d9:7e:a8:d6:ca:5d:cc:c9:d2:ca:26:
a0:f7:16:80:17:22:85:8c:9f:37:33:fc:b2:93:fd:d7:13:3e:
6b:5a:f2:63:a4:78:09:ad:b0:69:d6:13:7a:35:fd:56:ce:5e:
7a:9d:f9:bc:2b:b1:56:a4:33:ed:0c:47:d4:4f:54:d3:67:8d:
fc:e9:3b:9c:81:78:54:94:73:2d:75:64:6d:54:94:02:53:95:
8b:23:94:d7:53:99:6d:5f:f8:1b:2a:fc:b7:6e:59:70:aa:4f:
2b:65:24:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:39:57 2026 by rpki-client