Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
File: OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft (raw, json)
Hash identifier: eCkQuSYTAkc4cHExYR2l3lzxaWmGG/LeP3duZsrw4c0=
Subject key identifier: 2C:5D:E8:F9:C5:A4:D6:1A:65:4B:E7:BB:03:E7:04:7B:4D:F5:DA:32
Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
Certificate issuer: /CN=39348867dcb2956aca65d08348e440d4727a3743
Certificate serial: 019D284E10A81C442C675F2107A97A010D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
Manifest number: 062B
Signing time: Thu 26 Mar 2026 04:01:37 +0000
Manifest this update: Thu 26 Mar 2026 04:01:37 +0000
Manifest next update: Fri 27 Mar 2026 04:01:37 +0000
Files and hashes: 1: OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl (hash: JwVjtDRp1b9dPmICpnPA0SSdoUQXCM+rSOKbV8VStEg=)
2: T72oUjEo0s0JrOYNowoRHWjX0w4.roa (hash: y4/cjDz+TB542z9AKMzNcOCpxzpFqML97uF7RmVq7YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:10:a8:1c:44:2c:67:5f:21:07:a9:7a:01:0d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743
Validity
Not Before: Mar 26 04:01:37 2026 GMT
Not After : Mar 27 04:01:37 2026 GMT
Subject: CN=2c5de8f9c5a4d61a654be7bb03e7047b4df5da32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:56:5c:a5:d0:ea:b5:df:dd:ee:c6:96:ac:74:
ab:80:65:20:77:3e:c0:79:c6:52:83:f1:31:f6:b9:
f7:36:95:c4:81:93:8e:89:36:18:9d:c3:76:a8:5e:
29:a6:40:57:f6:93:2c:fc:70:63:7f:18:f9:a1:c5:
e8:99:b1:82:d0:6f:07:46:31:df:52:54:b3:32:5f:
ec:a7:0f:16:dc:37:0e:4e:7b:c6:cb:5e:82:5e:a6:
19:e2:52:48:1c:47:e7:7a:4b:ce:67:a2:b6:47:03:
83:f8:50:5c:73:33:fa:0d:93:61:e3:c8:9a:3d:4b:
d5:70:fb:48:f7:21:f8:0d:8e:23:41:be:18:c0:ae:
f0:ee:81:65:c7:86:08:8b:82:a8:90:b1:fd:2c:12:
52:4a:4f:53:d1:3b:74:24:d7:f3:bf:77:c3:9d:7e:
a8:29:5e:be:12:02:f1:9d:fe:00:88:59:67:fe:6c:
a1:36:9d:e2:1e:4f:88:41:6e:9d:1f:ec:9e:e4:ba:
d6:f5:0a:3b:d3:39:d5:f1:4b:6e:ba:82:4b:67:ef:
ac:a7:01:91:64:14:d6:27:a8:ef:e4:21:a7:4a:dd:
7f:6d:a9:3e:61:3e:ac:86:f0:51:22:9c:aa:5f:ce:
4e:53:59:60:b4:97:b2:9e:ac:59:cb:f0:dc:d6:e5:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:E8:F9:C5:A4:D6:1A:65:4B:E7:BB:03:E7:04:7B:4D:F5:DA:32
X509v3 Authority Key Identifier:
keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f0:82:f8:07:86:31:ab:7d:22:46:3a:e1:1a:d7:58:be:e3:
45:80:3b:48:ce:65:94:b0:77:8c:e2:0c:de:75:2e:1d:00:e3:
2a:13:7a:c9:a5:2b:0f:cc:ad:b8:95:66:81:d2:80:11:9c:4d:
7f:bf:e3:97:20:17:13:a6:23:8b:05:d1:6f:a1:95:75:e8:31:
0f:89:f3:df:5d:a6:30:2c:06:b3:77:f0:41:f7:15:47:5a:0b:
12:5f:e7:db:2c:e0:37:20:2b:5f:12:23:62:ec:ef:21:75:d4:
80:c4:b2:6e:cb:30:c0:41:5e:27:f8:be:ae:20:1e:bd:6a:4d:
d7:9c:9a:e9:5d:d0:ae:b7:22:a5:08:94:f5:15:cc:cf:1d:10:
89:84:4a:5c:e0:bb:d1:59:03:46:48:c1:61:e1:39:b9:90:c6:
fb:5e:a0:39:1a:0d:a6:bb:db:4d:9a:b7:4e:29:c7:ce:dd:7b:
0c:dd:36:0d:69:21:0c:c4:91:1d:ee:f8:2f:39:55:bc:b0:af:
df:bc:6c:a7:86:6e:fb:e2:32:ca:5a:1d:21:2e:4b:48:fa:5b:
f9:b5:b2:a6:5c:e0:78:e3:5f:27:a2:6c:51:a6:94:68:a5:4b:
a1:38:f6:6f:ea:09:b3:a2:a1:22:f6:87:4a:ce:c5:57:8a:3b:
92:6a:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:53 2026 by rpki-client