Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: 6s4o6TOYJM6+oPVU9Gc0fvnUeatfHpfx9IHfFRd8Hso=
Subject key identifier: E9:BB:CA:FF:A0:10:A9:81:27:33:EF:82:29:CA:DE:AA:78:1F:BA:C2
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 01A0F1C382C815397FB91DF8942A87FF01B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1A11
Signing time: Wed 30 Sep 2026 10:01:57 +0000
Manifest this update: Wed 30 Sep 2026 10:01:57 +0000
Manifest next update: Thu 01 Oct 2026 10:01:57 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: peUrAc8n7IYaopNbbiIl5XTI9OBfBRuy3eO5nCNU3ho=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:82:c8:15:39:7f:b9:1d:f8:94:2a:87:ff:01:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Sep 30 10:01:57 2026 GMT
Not After : Oct 1 10:01:57 2026 GMT
Subject: CN=e9bbcaffa010a9812733ef8229cadeaa781fbac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:60:eb:3f:e6:88:1d:f1:ca:a1:5f:d8:f4:
59:d8:b7:10:23:8f:6a:e7:56:f1:74:74:ff:81:0d:
42:8a:1e:e5:c7:71:10:89:24:38:90:a9:94:e9:63:
75:1a:34:7c:9f:ff:d4:ba:ad:60:d3:82:13:ec:d7:
0b:19:ce:99:3d:d6:b5:80:37:77:7d:15:59:6e:03:
b5:18:9d:2e:66:97:26:5c:91:40:f1:42:cd:69:40:
5d:3b:ba:9a:d3:86:a2:67:d3:be:19:28:15:25:45:
f0:d8:5f:fe:64:24:86:7d:2b:e3:01:de:56:c9:09:
fe:43:ac:5b:f7:2c:98:15:ec:f2:6a:5b:9c:9f:88:
d7:03:71:16:9c:c3:d3:35:2b:b3:2f:2e:27:f4:c2:
77:9e:60:d5:68:0f:8c:52:e2:77:1e:8f:67:32:e6:
5c:4b:0e:4f:54:37:1d:3d:6b:a8:de:72:29:f0:a9:
33:ed:b9:80:d6:24:9b:fe:89:f8:3a:e6:91:59:fa:
7b:2a:de:a8:3c:fe:b0:9b:a3:b5:f9:d9:52:d9:22:
48:78:5c:df:62:ec:e9:ed:07:04:b7:98:9b:1a:e9:
f5:fd:2c:bb:ae:fc:94:7d:51:8e:18:eb:3a:ee:99:
fc:41:11:61:66:ac:32:2f:5a:8c:20:0f:08:05:28:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:CA:FF:A0:10:A9:81:27:33:EF:82:29:CA:DE:AA:78:1F:BA:C2
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:04:11:df:fb:b7:e4:00:d2:6f:69:85:5b:73:39:2f:33:bf:
87:37:ae:77:34:65:06:5f:34:22:a3:96:af:d8:e6:73:ba:83:
1c:40:22:91:c9:cb:58:84:f0:6c:cf:56:5a:5e:97:f3:90:bf:
ab:00:fe:31:78:d3:97:a2:f8:a5:f7:b3:7d:e9:d2:3e:40:88:
2d:83:95:95:e1:15:39:0c:ad:6e:50:2c:dc:39:28:6f:ef:e3:
1f:39:5e:d3:fc:6c:d6:1f:93:4f:ca:5c:e0:e0:b2:de:64:89:
3e:e0:86:e4:2a:de:1a:81:5d:c8:29:dd:5d:59:47:e9:6b:03:
28:8d:94:84:c8:85:32:46:71:01:84:a6:be:65:b7:79:de:85:
a4:8d:a2:25:c1:85:86:5f:77:43:f7:ac:af:f5:0d:c7:6a:63:
e6:bf:a1:41:92:df:a7:28:f9:5f:20:70:64:39:e6:12:f3:26:
50:49:79:c2:3e:2b:fe:cd:9f:3d:55:9c:21:cd:3d:e9:62:39:
11:76:72:ed:f5:72:3f:6f:4d:8b:a4:b1:b0:6b:0b:06:97:7a:
e7:61:0f:57:af:13:57:82:7c:4c:a7:3d:54:92:d9:4c:8d:4e:
1b:96:f0:29:a8:cd:20:98:68:15:9e:61:93:c1:f8:36:c3:b0:
6a:23:e5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:10:23 2026 by rpki-client