Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft
File: otdUZcLL7I5qW-bRpIFLaCguV98.mft (raw, json)
Hash identifier: Rt6LccrGV/pDDgLD2RrDLQYYZ/m1cJXbU6W9MoRG3oo=
Subject key identifier: 0E:6A:89:CE:D4:B3:F5:C8:B2:FE:E3:F1:ED:52:F4:0D:FB:6C:1F:DA
Authority key identifier: A2:D7:54:65:C2:CB:EC:8E:6A:5B:E6:D1:A4:81:4B:68:28:2E:57:DF
Certificate issuer: /CN=a2d75465c2cbec8e6a5be6d1a4814b68282e57df
Certificate serial: 019D34BF30AA6ECE5C825BEE4077383536D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otdUZcLL7I5qW-bRpIFLaCguV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft
Manifest number: EB
Signing time: Sat 28 Mar 2026 14:00:38 +0000
Manifest this update: Sat 28 Mar 2026 14:00:38 +0000
Manifest next update: Sun 29 Mar 2026 14:00:38 +0000
Files and hashes: 1: otdUZcLL7I5qW-bRpIFLaCguV98.crl (hash: ZlBY5SyTPHoaOkBsNS46G822JEw6VHV48mVRf3e88NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/otdUZcLL7I5qW-bRpIFLaCguV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:bf:30:aa:6e:ce:5c:82:5b:ee:40:77:38:35:36:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d75465c2cbec8e6a5be6d1a4814b68282e57df
Validity
Not Before: Mar 28 14:00:38 2026 GMT
Not After : Mar 29 14:00:38 2026 GMT
Subject: CN=0e6a89ced4b3f5c8b2fee3f1ed52f40dfb6c1fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:b1:13:57:c4:bd:8a:02:0a:11:c0:a0:65:
87:ca:c1:1f:a0:10:e1:a9:81:55:0b:dc:30:9b:94:
44:53:fb:88:a9:3e:58:15:15:d2:32:2d:bc:74:3a:
7d:7e:62:52:d6:b0:30:ed:13:be:78:80:b5:d6:9b:
12:69:0e:c7:99:9d:16:64:33:45:0f:a8:f7:c9:d1:
ed:2d:d6:e4:af:ef:36:54:66:06:96:36:ae:e5:37:
41:e8:fc:75:29:10:a5:34:ac:63:ae:82:45:a1:2b:
f1:e5:6d:03:d2:34:75:54:a8:f0:3e:b6:b6:09:f8:
90:52:d7:c9:39:8e:89:1b:10:9e:9d:26:77:db:0b:
be:b4:51:d7:45:78:3b:4a:1d:3f:ee:21:e3:9a:93:
e6:27:0c:6b:4d:e7:99:df:81:a4:06:84:3b:8c:8f:
fd:a0:d0:48:5f:6d:69:20:8e:d0:6a:81:de:43:8a:
d2:a7:4f:66:84:55:e2:be:12:c7:ef:e9:fb:1f:a2:
48:c3:a5:cd:36:05:04:f4:11:dc:ac:d6:c3:8c:1e:
dc:d2:21:6c:cd:10:dc:8b:e5:15:16:3f:54:35:ae:
76:4f:61:b7:9a:83:5b:e5:68:5b:01:d5:67:c6:d8:
8f:b2:4d:4d:c9:da:6f:a4:95:9f:2c:ee:06:6d:d0:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6A:89:CE:D4:B3:F5:C8:B2:FE:E3:F1:ED:52:F4:0D:FB:6C:1F:DA
X509v3 Authority Key Identifier:
keyid:A2:D7:54:65:C2:CB:EC:8E:6A:5B:E6:D1:A4:81:4B:68:28:2E:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otdUZcLL7I5qW-bRpIFLaCguV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8b:b4:70:84:11:d4:ff:47:54:64:9d:48:78:55:df:ba:a0:
e3:3d:d1:03:69:84:e7:58:97:22:78:0f:1a:51:6e:12:05:ae:
2c:d9:82:e5:ed:4d:c9:89:b6:fa:72:e3:a2:1b:49:8d:d0:3e:
ec:56:d8:53:51:29:be:48:01:96:4c:a3:14:e9:19:c5:0c:34:
5d:b1:70:0c:a8:00:97:d6:a3:06:80:1f:6b:43:a4:5c:1f:c7:
53:f1:14:a7:c1:59:7a:2c:3c:9d:64:de:e8:13:cb:5c:b4:49:
be:e2:6c:f5:98:dd:81:02:07:22:72:f7:45:a2:31:aa:3b:58:
b2:50:c9:c1:da:2e:9e:af:c3:1c:2a:3d:44:ea:da:e6:e0:33:
79:7d:62:55:d5:77:30:23:89:be:79:d3:15:c7:e6:1c:d4:ec:
94:78:c1:89:64:c0:97:48:b8:ac:1c:ce:a9:9f:00:48:0b:f9:
1a:29:8f:74:9f:1a:46:21:e8:49:19:2a:3d:b7:36:39:c1:26:
65:4d:d9:55:06:6c:65:bd:a1:5f:e1:52:78:c2:da:9f:39:c9:
09:02:dd:33:a1:8c:80:37:b8:fe:56:79:d5:12:df:30:68:fb:
51:2c:dd:ae:68:df:9e:58:dd:50:64:8f:cb:35:eb:5e:53:02:
ce:7e:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:14 2026 by rpki-client