Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: kFTA8yrNOMBZZKt7tlASZjSyNvJVmGBq3z/Xmc+n0G4=
Subject key identifier: CC:5E:C7:4D:A0:08:13:0F:29:85:9D:BD:2F:74:77:05:83:DE:4B:7D
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 019F905A7A476B832A734A64C390465C8787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 19:01:16 +0000
Manifest this update: Thu 23 Jul 2026 19:01:16 +0000
Manifest next update: Fri 24 Jul 2026 19:01:16 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: LXUrLZEh6vt1MuXmO59BmbEp5C4NiwA3HxaZdPRWo7c=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:7a:47:6b:83:2a:73:4a:64:c3:90:46:5c:87:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Jul 23 19:01:16 2026 GMT
Not After : Jul 24 19:01:16 2026 GMT
Subject: CN=cc5ec74da008130f29859dbd2f74770583de4b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:30:1e:5f:18:6d:d8:d2:ed:d2:9c:00:91:
83:fe:46:7a:18:d6:7f:e0:6a:f7:f5:93:74:3e:18:
04:b3:3c:ed:79:42:cc:6f:47:1b:04:76:79:69:ec:
2f:38:e1:a2:61:49:93:fb:f4:51:47:fc:81:ab:49:
4b:5d:03:fb:98:96:bf:11:4a:4d:ce:81:b8:46:5b:
11:1d:2d:f2:65:fb:46:b5:5b:7a:49:ca:a3:83:95:
45:c0:82:b6:f1:1d:5e:7a:d0:f2:3d:8d:e4:6e:bb:
7c:28:27:db:d6:19:cf:fb:7d:3b:47:1c:2b:99:6e:
4b:6e:9f:3f:1f:54:4a:8f:6f:81:e3:22:91:cc:2b:
6b:c1:e7:33:36:8f:b9:cc:7c:59:c4:9b:db:31:b8:
f4:bc:b9:68:7a:ca:d6:73:0e:bd:ad:5b:67:b6:e7:
13:eb:9d:57:f9:56:fb:e8:99:79:19:b6:2c:6f:3c:
b7:5b:77:56:ff:2a:89:c4:0e:c2:69:15:d9:0d:31:
50:8f:be:d8:ac:e3:fa:8f:f1:32:e0:40:1f:f2:a0:
db:16:46:9c:4a:05:08:e3:a1:64:e4:a5:ae:83:06:
58:37:3e:10:a2:5b:3c:dc:75:68:42:cc:07:1a:ba:
e2:e7:c8:4a:45:c6:a8:ce:ab:5e:05:57:a8:02:4b:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5E:C7:4D:A0:08:13:0F:29:85:9D:BD:2F:74:77:05:83:DE:4B:7D
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b7:12:62:0c:26:7d:43:c4:ab:1c:d9:81:04:76:ee:ee:a4:
c9:cf:2b:27:a2:1c:2b:fe:e8:40:4b:56:40:8f:84:d7:c5:ee:
d8:0d:eb:7e:2e:d0:b5:12:cc:f5:40:89:6e:a3:66:52:19:00:
56:17:39:0e:df:4c:24:83:e0:1b:36:4c:46:cd:e0:1c:a5:f6:
8d:d0:21:ca:dc:80:36:e8:8d:c8:30:ca:90:71:f7:45:5e:c5:
19:cc:ab:3e:80:b2:ca:f8:19:7a:d5:a8:03:db:b1:92:7c:87:
97:f7:95:dd:68:a7:30:f9:74:df:78:3a:f1:a7:5a:e4:a0:32:
fe:e4:75:29:28:10:aa:16:3d:37:3e:64:0f:5f:0c:82:23:5a:
58:07:73:bd:55:2f:f5:f5:8b:1a:4e:72:5e:67:4c:ce:c5:6a:
0f:5f:fa:63:79:48:2b:1b:02:06:99:73:56:d7:f3:e5:5c:78:
e0:cf:8f:80:88:8c:88:89:b9:7c:9d:68:2c:a3:18:2c:04:ee:
29:b8:ec:57:12:c6:68:7e:7e:d9:67:fb:04:14:ef:a7:47:46:
82:d1:c5:62:97:3d:14:fd:ef:0a:58:f9:29:81:4a:49:2e:60:
dc:11:b1:b7:8f:98:c2:e0:bb:ed:ba:ad:6d:dd:1a:78:5e:5a:
24:e5:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:26 2026 by rpki-client