Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
File: Otu0daQwTIRTQ_2U_ummuIAI44s.mft (raw, json)
Hash identifier: mcVpYPjjGsv3q/ALUXeKjucGzKl1+7FGiit4W53sZRo=
Subject key identifier: 45:4C:B3:53:8E:E4:31:AC:2A:79:C0:C5:F7:9F:C3:E9:98:62:E9:91
Authority key identifier: 3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
Certificate issuer: /CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Certificate serial: 019D265F27FC04F2DCA810A8AE8B180D3BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
Manifest number: 024D
Signing time: Wed 25 Mar 2026 19:01:03 +0000
Manifest this update: Wed 25 Mar 2026 19:01:03 +0000
Manifest next update: Thu 26 Mar 2026 19:01:03 +0000
Files and hashes: 1: Otu0daQwTIRTQ_2U_ummuIAI44s.crl (hash: Ibu2a75PVcWyjmDn1DF8sO4hKRCg5au4Tqfsu1d8i/Q=)
2: WEfg623at549gjZw64RcO_APHMQ.roa (hash: FO7uHOTKAm/yntYjpVC9E+eNIvpI6nRmgjdhZ1LH7Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:27:fc:04:f2:dc:a8:10:a8:ae:8b:18:0d:3b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adbb475a4304c845343fd94fee9a6b88008e38b
Validity
Not Before: Mar 25 19:01:03 2026 GMT
Not After : Mar 26 19:01:03 2026 GMT
Subject: CN=454cb3538ee431ac2a79c0c5f79fc3e99862e991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:6e:39:c6:17:c7:1a:6b:8a:91:fe:dd:16:
54:51:38:37:3b:03:6b:d3:ad:10:e4:0f:b9:02:bc:
23:ed:75:71:b3:81:08:dc:76:66:5f:93:bb:da:de:
3e:dc:ed:7f:95:b5:56:d6:c1:37:ef:34:4d:b4:56:
fa:e0:0b:a7:5b:c8:fb:ac:2c:a8:78:f3:6e:8a:aa:
84:47:32:a4:55:f9:62:17:e4:85:57:c9:17:4b:ed:
1e:17:ae:e3:0e:69:32:4a:b9:bb:ee:50:26:6e:cc:
49:82:b5:18:f5:b1:e0:99:9e:8a:e7:75:ee:91:80:
1b:b3:8f:e4:a4:65:84:0d:b1:7b:58:99:04:8b:99:
2a:bf:f2:94:01:9a:42:eb:2c:80:8a:ba:51:a2:61:
bb:5e:b0:17:b4:e3:99:49:09:41:1c:c2:2c:78:89:
bc:56:d8:25:47:75:ba:1a:57:80:0f:05:c4:cd:99:
14:ef:4f:f5:44:ef:ec:cc:30:f1:01:64:30:a1:74:
ba:65:bd:9a:75:26:e0:d9:c1:a4:cc:5d:15:86:85:
cb:7e:c4:b9:31:c7:d2:a4:a1:bf:b2:d8:6f:df:f0:
d4:c9:68:f7:4c:8c:2b:0d:fe:c4:f9:e8:aa:46:e6:
23:93:10:dd:47:9c:a7:83:38:e9:d0:9b:f9:11:d0:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4C:B3:53:8E:E4:31:AC:2A:79:C0:C5:F7:9F:C3:E9:98:62:E9:91
X509v3 Authority Key Identifier:
keyid:3A:DB:B4:75:A4:30:4C:84:53:43:FD:94:FE:E9:A6:B8:80:08:E3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otu0daQwTIRTQ_2U_ummuIAI44s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/226927-d656-4b91-a990-0ce0496a997b/1/Otu0daQwTIRTQ_2U_ummuIAI44s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f5:45:cb:bb:ec:d7:d4:df:fe:7b:e2:4f:ed:c6:47:5b:59:
21:d6:83:83:30:5e:58:5c:e2:c0:13:13:b6:a4:c8:ae:db:6b:
91:8e:7d:b5:56:ce:f0:fe:c0:a6:6e:e5:a2:f9:43:3c:4c:ed:
be:62:a9:5d:88:c3:bd:54:d7:82:0a:92:bb:cb:c0:1d:44:df:
ce:60:14:89:b0:86:99:86:48:71:53:c6:b7:f1:0f:1a:53:6b:
19:4e:ff:3c:46:12:c5:d1:6b:f2:c7:54:c7:6b:2d:74:7c:bd:
1d:f1:7d:b2:87:4a:13:c4:67:8a:f3:f5:0c:af:ba:e3:59:91:
62:a1:aa:74:b6:cd:dc:ec:fa:8f:93:cb:68:d0:1f:fd:ef:ca:
30:ca:60:e6:b7:5a:9c:52:ef:6a:a1:dc:7c:20:d7:5b:e4:7c:
40:42:4c:05:22:24:3d:4e:b1:dc:c4:5e:61:f1:5e:55:e4:c9:
fe:3a:32:ca:73:4d:38:92:0d:f9:cd:d8:f7:ec:03:45:a7:94:
9e:15:72:1f:1f:b6:e0:8a:70:4e:13:7c:0e:b5:48:f2:f2:5d:
7b:b3:6a:fa:64:81:10:27:63:60:a4:c3:a4:37:56:58:e7:05:
9a:f9:cf:a8:c0:b6:fd:94:3b:ff:f5:6a:cd:89:b6:53:67:a2:
3f:82:d4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:53 2026 by rpki-client