Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: i/bzJJbzhZJ5ZuaSZDtFa8oAswzCp5FnHyyfWyqcP5w=
Subject key identifier: 80:C4:98:D4:83:5F:8C:99:5E:59:E8:E2:70:73:6F:9C:14:60:5F:DF
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 019D29CE961C4A59C3B98C60796A58CDC973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:37 +0000
Manifest this update: Thu 26 Mar 2026 11:01:37 +0000
Manifest next update: Fri 27 Mar 2026 11:01:37 +0000
Files and hashes: 1: E3lm4FvyrvLHTXkXDSTYjOHsHVY.roa (hash: 6QZmnjSIaFmg0mpij0y/20sY5ruAuIBmod+jn1qrIQA=)
2: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: Rb+9QZRILebyDHdWWD0HRMJzfOTslJyp1YaVKVWNYx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:96:1c:4a:59:c3:b9:8c:60:79:6a:58:cd:c9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Mar 26 11:01:37 2026 GMT
Not After : Mar 27 11:01:37 2026 GMT
Subject: CN=80c498d4835f8c995e59e8e270736f9c14605fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:8d:85:65:a7:d4:8f:bb:dd:19:b0:d4:d0:
fb:2f:ba:b8:fc:d7:1b:34:f7:fa:27:52:67:37:6e:
27:80:14:8f:6e:00:de:26:f9:a6:c9:4a:d6:2b:a1:
7c:d6:3e:13:e5:9a:b8:49:10:c0:31:bd:eb:f0:7e:
e4:ff:f5:3c:66:77:d6:04:89:9e:20:61:7f:03:e9:
48:5d:60:fb:f9:71:16:3d:c2:e2:3a:d4:09:e6:e3:
ac:f9:a9:8b:3e:03:e8:f0:f9:64:af:5e:1f:26:ef:
e8:d0:bc:c0:c2:0a:ce:13:f0:ac:fd:ca:23:23:26:
b4:a2:d3:ea:f2:dc:3a:a0:41:12:b4:5e:94:90:56:
72:64:97:cd:25:20:09:ad:d9:65:47:91:db:ca:d3:
d5:91:36:03:66:ef:7b:bf:c4:f3:cb:17:d9:ad:2f:
f5:23:57:1a:19:ea:eb:1c:ec:84:5f:ef:76:b7:f3:
e0:90:7e:06:17:11:dc:e9:08:ae:06:d4:69:95:1a:
c5:45:4b:60:26:fb:02:92:34:44:fe:f1:a5:8c:2a:
94:4b:2e:44:f9:14:bd:a9:c4:ea:b9:d1:c5:3d:8a:
13:04:e5:cf:61:05:c3:c1:23:3d:5f:3a:6a:2b:09:
dc:72:6f:e3:f3:7a:04:42:0a:d2:c9:31:3f:b7:0a:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C4:98:D4:83:5F:8C:99:5E:59:E8:E2:70:73:6F:9C:14:60:5F:DF
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:79:ba:47:a7:2b:bc:33:9c:ec:39:40:30:2c:44:ad:81:59:
f5:70:1a:26:ba:5b:36:11:b3:ab:0b:95:9d:86:9d:5a:81:31:
7e:d4:40:1e:af:65:43:d7:df:29:96:7c:9b:95:f6:db:ce:0e:
3c:b8:2d:0c:d5:bb:8e:03:fa:75:19:03:b2:1d:7e:43:b9:41:
a8:7b:5d:50:a5:c3:08:7c:3a:cb:bf:cb:79:79:79:90:00:72:
d3:17:53:c9:72:d7:11:79:3a:82:17:77:3b:ab:3c:05:4c:49:
e3:f8:cc:98:12:ed:6a:bf:8e:f0:4e:84:1d:4f:f2:3e:ab:42:
f6:f4:34:8f:d6:55:ea:72:03:47:82:cd:d6:2a:1e:89:df:75:
02:21:82:16:ee:a3:af:94:f8:29:ae:57:b5:fc:5a:b9:81:7b:
8c:d2:f8:b2:4f:05:9b:5d:6e:15:7f:a4:1c:68:09:ba:19:cc:
8e:dd:55:43:fa:9f:e1:09:a5:d1:c9:2a:ed:38:25:bc:34:4a:
16:99:5a:8e:cb:7e:ea:3d:00:14:d1:c6:9f:20:11:74:00:d4:
58:70:6f:ff:12:f5:4f:b4:98:67:2e:ae:32:f0:8b:51:2a:29:
45:d0:10:b8:8c:fe:1f:50:12:c1:03:cc:98:81:5e:9d:8e:8e:
0b:4d:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:00 2026 by rpki-client