Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: lbJ/85Q/lMVtzOOgxkJ5ic91aYGrDV0XkAkV00g5p8o=
Subject key identifier: F9:2A:2F:43:E0:F5:F4:39:89:F6:A9:35:1E:9D:C9:92:D0:06:D2:04
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 019D284DCF8F2675B4CE4A988BCAB6275B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 04:01:21 +0000
Manifest this update: Thu 26 Mar 2026 04:01:21 +0000
Manifest next update: Fri 27 Mar 2026 04:01:21 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: QirBWxW1SUbeT/nDbhd0PniekLEXrEmaWqv6bqoIqM4=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:cf:8f:26:75:b4:ce:4a:98:8b:ca:b6:27:5b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Mar 26 04:01:21 2026 GMT
Not After : Mar 27 04:01:21 2026 GMT
Subject: CN=f92a2f43e0f5f43989f6a9351e9dc992d006d204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:f2:3b:83:7a:c1:e7:08:79:9e:e9:91:a4:
92:23:52:29:27:0d:fc:c8:0d:a7:14:c5:6a:ce:91:
85:f1:12:ed:ea:6b:87:fc:65:b5:87:94:a8:0b:17:
cb:65:29:b3:0b:7f:f4:8c:2a:39:54:08:94:71:9e:
8c:a0:74:36:34:e9:72:97:a1:82:40:62:03:f2:9f:
48:47:d0:7e:63:0d:33:e1:17:85:23:f9:b2:7d:0a:
91:77:06:38:0a:bf:36:68:a7:67:1d:a2:dd:66:31:
1d:21:e1:32:ff:03:67:63:3c:6c:61:e3:f9:12:2d:
88:63:ed:c0:a2:06:c6:07:c7:ad:24:2f:6d:68:cf:
74:5e:0b:3c:40:3d:38:7e:b6:cd:f0:df:41:7b:f8:
b8:d1:1c:a2:08:8d:80:b7:ae:c9:82:90:48:e3:d1:
7e:e1:ed:19:05:18:06:1e:a0:ab:f7:1e:b3:de:ea:
58:bb:bd:2a:35:49:e6:d8:6f:15:36:88:be:4e:b6:
a8:35:ed:ef:99:a9:f4:4b:3d:ca:f2:39:4f:4c:19:
88:3a:b6:07:7d:c7:d3:93:01:84:72:57:fb:79:69:
b1:eb:87:ed:41:e6:a8:1a:bd:3c:6d:37:73:fa:70:
04:60:68:67:35:48:50:5e:86:16:0b:d4:9e:e6:5f:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:2F:43:E0:F5:F4:39:89:F6:A9:35:1E:9D:C9:92:D0:06:D2:04
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ed:92:a5:fc:70:e8:d3:50:a3:8e:2d:7b:58:8d:1d:c7:b0:
1e:f9:9c:d9:6e:22:a0:9e:cd:89:bd:be:d1:78:e8:c1:37:70:
90:3d:92:cf:e9:e1:9d:f1:1a:72:3f:44:91:39:f1:69:3c:a7:
7c:1b:27:c1:97:2b:e4:98:2c:ef:1d:45:4d:bb:cb:96:70:eb:
21:8d:5c:cf:95:62:2a:61:5a:bf:e1:6e:09:02:f0:b3:67:b4:
b7:e6:15:b7:7d:9f:ad:81:8f:04:b7:42:81:29:4a:d6:a1:59:
cc:87:aa:8d:05:a9:2b:07:d0:53:cb:22:bc:17:80:72:05:b0:
72:dc:0e:d1:49:6b:87:0e:09:e3:8a:90:a1:10:7a:ba:4d:a3:
0e:6c:f6:22:39:19:51:02:d3:21:c9:70:0c:83:c5:6b:7e:97:
b8:26:37:bc:0b:45:78:15:22:ff:33:7a:c0:84:cc:ec:be:dc:
d7:b8:2a:54:f0:e1:f7:e4:d0:08:88:ec:ad:86:9a:84:b0:36:
12:83:1d:88:68:f2:c7:13:0d:30:5d:e3:cb:d2:d6:e5:78:22:
dc:d3:a6:bb:99:0d:40:9f:93:ae:48:70:88:1a:0a:e8:64:20:
e3:0d:ba:6d:8a:b3:46:53:38:59:99:bf:e2:ce:40:3d:35:65:
de:4d:84:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTc+PJnW0zkqYi8q2J1taMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk
YmNiYmMwHhcNMjYwMzI2MDQwMTIxWhcNMjYwMzI3MDQwMTIxWjAzMTEwLwYDVQQD
EyhmOTJhMmY0M2UwZjVmNDM5ODlmNmE5MzUxZTlkYzk5MmQwMDZkMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMXyO4N6wecIeZ7pkaSSI1IpJw38
yA2nFMVqzpGF8RLt6muH/GW1h5SoCxfLZSmzC3/0jCo5VAiUcZ6MoHQ2NOlyl6GC
QGID8p9IR9B+Yw0z4ReFI/myfQqRdwY4Cr82aKdnHaLdZjEdIeEy/wNnYzxsYeP5
Ei2IY+3AogbGB8etJC9taM90Xgs8QD04frbN8N9Be/i40RyiCI2At67JgpBI49F+
4e0ZBRgGHqCr9x6z3upYu70qNUnm2G8VNoi+TraoNe3vman0Sz3K8jlPTBmIOrYH
fcfTkwGEclf7eWmx64ftQeaoGr08bTdz+nAEYGhnNUhQXoYWC9Se5l/T2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkqL0Pg9fQ5ifapNR6dyZLQBtIEMB8GA1UdIwQY
MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt
ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw
LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+2Spfxw
6NNQo44te1iNHcewHvmc2W4ioJ7Nib2+0XjowTdwkD2Sz+nhnfEacj9EkTnxaTyn
fBsnwZcr5Jgs7x1FTbvLlnDrIY1cz5ViKmFav+FuCQLws2e0t+YVt32frYGPBLdC
gSlK1qFZzIeqjQWpKwfQU8sivBeAcgWwctwO0Ulrhw4J44qQoRB6uk2jDmz2IjkZ
UQLTIclwDIPFa36XuCY3vAtFeBUi/zN6wITM7L7c17gqVPDh9+TQCIjsrYaahLA2
EoMdiGjyxxMNMF3jy9LW5Xgi3NOmu5kNQJ+TrkhwiBoK6GQg4w26bYqzRlM4WZm/
4s5APTVl3k2ESw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:17 2026 by rpki-client