Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: e4WeU5Qc8CkIHKWL55+vDziQ5EyeicEejx1kde6Op5E=
Subject key identifier: 11:E9:9B:9E:02:C1:06:2B:2D:A4:4C:52:C9:07:B9:FB:D9:B7:05:B7
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 019E1F7ECD4CA3D8573A41C441BD692D473A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 189B
Signing time: Wed 13 May 2026 04:01:04 +0000
Manifest this update: Wed 13 May 2026 04:01:04 +0000
Manifest next update: Thu 14 May 2026 04:01:04 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: ZBOT+1/q+Cjr6eUmg1Ku3Cd0MY1YBkdv6X/O2jjMOrU=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:cd:4c:a3:d8:57:3a:41:c4:41:bd:69:2d:47:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: May 13 04:01:04 2026 GMT
Not After : May 14 04:01:04 2026 GMT
Subject: CN=11e99b9e02c1062b2da44c52c907b9fbd9b705b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:4d:6d:e7:c5:d7:ca:74:58:cc:09:12:ab:
eb:ca:f9:63:8b:84:3b:c2:e9:41:d6:f2:8a:e0:d6:
18:34:d7:57:46:b0:63:91:84:20:9d:de:c8:fb:50:
cb:06:92:83:5a:a3:20:89:dc:1e:c2:f9:af:80:47:
f9:12:25:bb:ee:66:1f:9c:80:f5:08:d6:de:dd:de:
08:02:b7:4d:c0:da:08:04:ba:69:2d:51:2e:5c:e2:
9e:c4:95:0b:ee:e2:25:69:e3:5d:32:5b:c1:b9:91:
c4:95:c7:09:90:0b:17:2c:1a:d2:38:fb:8a:01:e7:
ee:79:33:22:72:c7:28:d8:c3:f6:14:07:28:6b:41:
da:78:9b:ca:a4:26:e6:22:98:e3:f2:e8:30:23:84:
0d:77:fb:f4:20:d1:54:37:0e:1b:1c:75:3e:64:63:
3d:7e:5c:4e:e9:55:f1:ea:29:fc:c0:c5:e5:fc:32:
77:a3:58:47:e2:b1:37:2c:49:56:c7:cb:d3:6d:45:
67:56:da:fa:76:42:f0:2e:bd:6d:fb:db:0f:fe:16:
9d:8f:e8:a3:c1:59:fd:7c:8f:ba:cc:5c:2f:08:ec:
0f:33:4c:ce:bd:a5:05:59:bf:4f:89:e4:cb:2b:e3:
b6:4f:f8:b8:50:e4:0b:41:a4:4e:e5:1d:9f:af:95:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E9:9B:9E:02:C1:06:2B:2D:A4:4C:52:C9:07:B9:FB:D9:B7:05:B7
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:01:00:ab:24:05:96:c1:be:6b:99:52:f5:16:b1:17:84:d4:
9e:ba:44:b7:87:58:35:36:56:7f:df:22:84:76:71:8b:20:87:
28:3f:27:1d:ce:22:19:ca:96:03:7b:87:ea:6f:47:f4:00:27:
a6:b1:9f:4d:fb:2e:69:02:d4:31:1b:e3:a8:70:fc:52:28:f6:
96:7f:24:e4:45:0c:68:40:27:b7:7a:5c:b1:d7:77:9b:51:6a:
47:ff:6e:47:d1:cc:0d:82:d0:69:3e:16:02:4e:c5:30:d7:db:
c5:99:61:a4:e3:b9:d3:1d:f2:d4:18:8e:b6:0e:ba:f9:fd:c9:
ad:86:68:3e:f0:72:2b:7b:24:12:87:7a:48:98:d5:5a:35:e7:
e1:00:f1:68:c9:95:0d:8e:af:d1:87:b1:ae:75:b1:a2:36:b9:
0c:a7:d5:02:8f:e5:e6:94:9b:5c:14:7c:4d:de:25:41:f3:bd:
6b:e3:75:ce:dd:08:e6:49:0d:f4:bf:90:c5:bb:7f:d2:91:26:
05:f9:54:15:d1:e3:bd:8f:18:3a:2d:ee:d5:5f:f3:30:b3:0a:
c4:2f:4a:d8:08:c3:2c:43:fd:28:87:b4:74:a2:ec:8b:0c:f3:
27:0b:02:47:cc:dd:fe:23:cd:21:11:4b:1c:70:72:a5:9d:c3:
57:b2:00:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:57:38 2026 by rpki-client