Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
File: OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft (raw, json)
Hash identifier: ky1Hf/NpsGnhYMMvQYoJny4USSvd3LIY84FBCaoF9x0=
Subject key identifier: 88:BB:4A:18:21:1D:8A:6E:D1:8D:02:CD:B9:7E:EA:E1:8E:0F:0F:39
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 019D25837075E04E010AAADA3263B97E7A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 15:01:04 +0000
Manifest this update: Wed 25 Mar 2026 15:01:04 +0000
Manifest next update: Thu 26 Mar 2026 15:01:04 +0000
Files and hashes: 1: OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl (hash: fIY+7MmRkFy76Emo1PMK6Kll6nJRxdRjKxZ4wTMhzUw=)
2: luPpvwuddPcCZN1NTiaMni77JHI.roa (hash: DOVqL/1YsJh2/IEMhAiSbVGoLv+4KRJvYubGuGLi8gg=)
3: nk3amjB4e9u8AqZGT3agxIG0ers.roa (hash: izVRx6WqxhkZ+o80/0xAqbErSsGG3hLjIH4cLGS0lDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:70:75:e0:4e:01:0a:aa:da:32:63:b9:7e:7a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Mar 25 15:01:04 2026 GMT
Not After : Mar 26 15:01:04 2026 GMT
Subject: CN=88bb4a18211d8a6ed18d02cdb97eeae18e0f0f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:7c:0e:f3:23:15:0a:60:34:b2:99:00:af:
ff:1d:87:2e:00:2a:f8:4b:7d:6a:96:ff:3a:1e:b5:
2e:7c:f9:7b:96:73:ea:a5:93:89:c2:91:81:dd:64:
de:f3:5c:ba:c1:3b:44:ea:3a:84:cb:86:f9:8b:c3:
ec:b8:10:fe:d9:a6:ad:00:c3:94:79:12:f1:d7:0a:
7a:30:bc:72:85:64:69:08:62:60:66:c4:28:2d:a2:
bd:e6:89:c6:ee:96:47:ff:06:2d:64:24:79:5a:05:
e4:0c:24:30:5b:8d:eb:71:61:2e:d8:3c:6c:6e:64:
49:c4:9b:45:bf:3a:4f:a7:06:88:19:15:ec:b6:a8:
91:1e:e8:26:af:d6:47:d7:57:45:fe:12:67:da:d1:
f0:06:e8:7d:ec:fe:7c:e9:8c:c7:7d:73:10:5b:95:
2a:f8:56:b9:f0:ef:d8:7c:bd:0c:a0:ba:36:28:90:
e2:97:bd:20:eb:15:81:4f:76:5c:0c:d7:41:8a:c3:
72:49:87:b0:fd:93:65:7b:20:ad:7a:be:6f:43:90:
fc:92:d7:80:30:76:9e:36:34:d3:ff:b7:78:f9:0c:
55:18:0a:08:ff:6b:6f:ba:00:2b:d0:c0:84:34:de:
14:94:a0:33:ec:c7:9f:d8:aa:9e:2b:be:39:97:b0:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:4A:18:21:1D:8A:6E:D1:8D:02:CD:B9:7E:EA:E1:8E:0F:0F:39
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1a:e1:9e:99:3c:a4:6a:66:21:92:d0:41:8c:5e:88:33:b4:
5d:57:0f:9b:fb:c3:23:d5:98:13:b8:4d:aa:fa:de:b1:8a:b1:
ea:b2:93:7c:7d:fa:fc:56:72:52:b8:cc:76:72:6a:04:d1:4c:
27:f1:10:d5:35:56:3c:02:6b:d7:d2:20:5b:09:ad:89:ab:3e:
86:80:d0:d1:8b:b7:b9:49:74:7f:a6:f5:9c:8c:24:f3:87:90:
79:95:15:d5:ad:e3:8d:78:fc:c4:72:83:c0:68:08:91:a7:87:
00:0d:f7:87:a7:85:82:0b:56:ab:37:0d:77:14:48:09:38:2c:
f4:6d:a8:58:94:47:d0:01:9a:0f:b2:72:a5:da:5a:9c:4a:6d:
6e:ed:c7:0f:6d:8b:4a:29:1b:ec:99:d8:f2:54:ae:b7:4a:74:
5b:4e:33:34:42:bb:44:6b:8f:03:13:92:c8:94:25:e6:93:22:
7e:1d:88:03:b2:2c:a4:d1:a7:7b:ba:fe:b3:1f:bd:d6:18:83:
74:55:61:15:19:d6:fd:cc:2b:82:fb:90:4a:c4:c1:24:0b:7b:
9f:67:b9:d1:1c:14:7b:39:17:f8:9d:ee:01:d5:bd:bf:f2:38:
5c:b2:82:08:56:3e:5c:a6:05:f2:84:f6:56:39:62:a3:58:ed:
2d:b0:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:46 2026 by rpki-client