Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: k1zD/14K9jbVmxyemDrAABehWLcYUEI9EC0gyz/Cckk=
Subject key identifier: E0:83:D0:5D:8F:2F:25:C8:56:07:D8:D2:93:A8:BB:C9:60:6D:A6:80
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 019D273AA86DDC344F3CDF4A22D404C27B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 23:00:48 +0000
Manifest this update: Wed 25 Mar 2026 23:00:48 +0000
Manifest next update: Thu 26 Mar 2026 23:00:48 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: ddXiYh2Gg6Sur7DcB7dY+5pcuL944nebZE4ikJADaMM=)
2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a8:6d:dc:34:4f:3c:df:4a:22:d4:04:c2:7b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Mar 25 23:00:48 2026 GMT
Not After : Mar 26 23:00:48 2026 GMT
Subject: CN=e083d05d8f2f25c85607d8d293a8bbc9606da680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:cf:34:ad:5e:98:3d:8a:dd:92:11:72:05:
56:3a:98:27:ba:ea:1d:88:98:fb:7c:d8:36:64:be:
8c:f0:51:77:a7:75:86:d7:4e:ab:ac:58:e0:72:93:
d9:8c:7a:bd:96:48:40:e9:a3:6b:3b:0e:ea:19:26:
67:14:b9:4e:91:76:40:bd:69:9e:c6:0b:99:76:e9:
28:82:4e:89:37:fe:d1:03:a8:2b:d5:66:be:cf:00:
88:1a:98:20:60:d7:f2:52:02:ab:6c:4e:72:aa:34:
7d:da:3d:29:f9:32:8b:80:4a:fe:b7:da:24:e5:aa:
df:aa:34:ba:35:ed:9c:d9:b1:a4:c8:c6:86:53:20:
dd:6c:66:4f:e8:fd:88:88:d3:62:75:a1:e5:40:a0:
0b:94:20:89:ad:68:f0:02:dc:9f:1f:30:50:5a:f6:
a6:3c:d2:a7:5d:6f:4e:00:d9:4f:6b:11:6b:a3:e1:
9e:e0:d9:09:a6:8b:32:1c:d2:29:0c:3c:40:08:a5:
05:46:71:55:8c:1d:6a:9a:cf:e0:8a:c9:df:64:49:
63:22:9d:f9:8f:9b:58:1b:4d:a8:89:9e:ed:2b:30:
63:0e:19:3f:db:01:c6:56:bb:66:d2:e6:3a:ee:92:
55:69:99:ef:e3:b5:ff:10:fc:17:1d:04:b1:1b:ce:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:83:D0:5D:8F:2F:25:C8:56:07:D8:D2:93:A8:BB:C9:60:6D:A6:80
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bb:70:1f:89:c9:06:cb:67:78:9c:d9:7b:e8:e9:f4:f2:f1:
8e:49:19:2a:5e:30:66:f1:7a:2e:5e:e6:6d:f1:e2:bc:4b:de:
64:a1:71:ad:1f:18:99:4f:27:6b:b6:1a:f0:8e:6b:74:e2:f0:
4a:99:5f:8a:99:05:66:8c:81:4c:73:d0:fa:b8:81:87:82:1b:
8d:a1:f8:27:bf:fd:09:9b:1e:8a:ea:3f:03:b2:4e:16:61:c1:
68:dd:20:3f:2b:0c:ba:3f:ff:da:00:6a:5f:23:b1:62:b9:68:
d8:ff:2e:b8:81:ee:d3:3c:86:71:5d:e6:77:01:c9:3b:23:43:
64:f2:7b:5d:34:76:25:98:28:8b:ac:4f:79:8d:83:1b:9f:48:
17:28:a7:1b:f9:30:b9:40:dc:93:77:c0:3e:65:6b:f8:1c:33:
92:c9:99:b7:82:dc:b5:fa:55:91:3a:27:2f:36:37:ef:3c:7c:
cf:26:af:17:93:99:4c:11:e7:7d:70:f5:38:f8:97:05:2e:9f:
f3:d7:ec:ae:04:19:8e:35:a2:0f:58:7e:68:d0:03:ad:4b:22:
ef:68:f2:95:74:5b:aa:60:df:8f:da:96:e2:33:35:39:5e:a6:
a4:e9:69:50:74:98:b4:93:68:50:3c:82:c7:0b:d1:be:e5:d0:
24:18:d6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:07 2026 by rpki-client