Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
File: E_OtQPlu1efznY2eGWq_D6I4How.mft (raw, json)
Hash identifier: sCHXouvmfXDjVF0KH7QkByNtacW6HWT1gvl5qaw5hxE=
Subject key identifier: 6C:2C:C5:C7:20:12:EE:1C:F8:A5:28:ED:DA:64:41:2F:98:ED:97:16
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Certificate issuer: /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial: 019CAA215344848C26F80C7938C7C4312601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
Manifest number: 138B
Signing time: Sun 01 Mar 2026 16:00:36 +0000
Manifest this update: Sun 01 Mar 2026 16:00:36 +0000
Manifest next update: Mon 02 Mar 2026 16:00:36 +0000
Files and hashes: 1: E_OtQPlu1efznY2eGWq_D6I4How.crl (hash: cDs1LZ9OIQ/x6jLrVVq8JburEeqrWv9i9lnm0p/ezzE=)
2: _BiThTGjxk4mTLq-x93nIMvlUFM.roa (hash: eb4KvoDqDMfsY+rM/WfNgq/w+lmr8scY27yz0mI6HFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:53:44:84:8c:26:f8:0c:79:38:c7:c4:31:26:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Validity
Not Before: Mar 1 16:00:36 2026 GMT
Not After : Mar 2 16:00:36 2026 GMT
Subject: CN=6c2cc5c72012ee1cf8a528edda64412f98ed9716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:6e:a4:68:d2:ad:ba:f6:fe:e4:03:7d:b4:
4f:b4:84:a1:3a:23:ae:bf:b2:49:66:72:f3:8f:81:
e5:ec:3c:61:64:55:31:83:03:8b:72:26:30:c4:d4:
62:77:2f:b7:de:32:76:59:2b:69:49:55:d9:f3:c0:
a9:c4:66:92:b7:1e:f8:40:0c:42:f6:fb:a4:eb:41:
b6:23:a2:f1:34:03:49:e0:89:cb:ea:ce:d2:91:72:
c4:45:2a:16:cb:7c:a7:7a:4f:63:de:8c:81:5a:be:
00:76:1f:dc:fd:ab:0d:92:bd:f1:a3:f9:9c:48:91:
8d:54:55:b1:67:00:85:ce:ce:b4:b9:24:25:78:3c:
27:dd:a2:9c:e9:18:45:4d:7d:4e:2a:63:20:97:5a:
38:27:77:f3:f3:a6:ce:29:4d:9d:98:3f:cc:e1:51:
a3:6f:3c:71:b7:13:4a:0a:d0:c1:b8:05:5f:18:d9:
65:02:22:b1:98:58:83:51:2a:3b:ae:61:35:4d:51:
19:bd:74:d1:e8:60:ef:81:73:14:80:5e:3d:68:19:
6e:71:ef:08:1f:2e:e0:a5:0d:99:53:7f:4d:ce:f6:
76:55:a0:41:03:05:b1:67:e7:7b:6c:b8:64:86:1d:
c3:72:7d:cb:22:7a:fb:44:79:db:7d:03:c6:87:b6:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:C5:C7:20:12:EE:1C:F8:A5:28:ED:DA:64:41:2F:98:ED:97:16
X509v3 Authority Key Identifier:
keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4f:ae:11:05:63:7b:4b:12:be:f0:04:04:22:b0:67:6a:b0:
c4:70:b4:29:c8:d2:6e:4e:69:8c:c8:09:e6:92:1c:bd:43:19:
19:2a:1c:8c:f5:ba:e9:d0:33:9b:6c:1d:ad:44:86:98:e6:3a:
c9:7f:d5:9f:e3:cc:14:1e:41:f6:f3:4b:ac:28:e1:d6:97:40:
e1:fd:dc:dc:e0:0b:59:8d:c8:c4:f0:86:02:44:41:42:61:e3:
0b:8a:65:0c:07:ec:b6:99:72:93:f8:95:49:5c:d4:17:09:96:
f3:b8:73:39:37:2f:a5:00:90:b2:38:a8:8e:a2:b3:de:78:94:
a8:8d:8b:71:a5:45:cd:7a:e1:73:3f:d7:2a:5f:a7:fb:6e:d8:
c2:f5:aa:b1:1e:2a:52:53:ac:5c:ac:b9:87:39:91:6b:43:3e:
cd:01:6e:a2:47:b5:66:48:fb:5d:58:dc:06:07:b6:07:a2:58:
69:bd:6d:3b:13:04:d5:58:a1:86:e8:69:e2:d7:7b:8a:d3:e8:
16:3e:51:21:9e:6d:d2:95:6a:5f:f2:71:87:7b:92:51:6a:8e:
19:7c:a4:f7:c6:8c:17:e9:24:b8:de:2a:b9:2f:9d:f1:2e:99:
6f:89:4b:0f:98:9c:9d:49:89:31:27:6a:07:de:63:a6:80:27:
15:e4:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:36 2026 by rpki-client