Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: 8QFpaujpoFBknps1EMJgjuRnbtfGJfSHraKZDFAZxrc=
Subject key identifier: E9:24:BD:D7:9E:6B:8E:ED:A2:6B:2F:6A:DE:D7:A3:C1:CA:BD:82:DE
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 019CAAC6D0D9FA0E839F90F894C0F0D5CAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 0803
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: F1sJih0zQrKGljsnOUmtg-YLfWM.roa (hash: jdsNnWcmvKyI8OLsL4MHN8saAAU5viDugMttRK7ykl4=)
2: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: 3T4YQ8rvhQMI3pjuEWYP+ysrTYOCoCMQXIdA25rD8X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d0:d9:fa:0e:83:9f:90:f8:94:c0:f0:d5:ca:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=e924bdd79e6b8eeda26b2f6aded7a3c1cabd82de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:c1:e8:89:4f:1d:70:82:ea:cb:01:2a:25:
29:45:a5:51:84:4b:5b:94:4b:3e:31:54:c6:cb:d4:
e5:60:92:3b:86:38:38:98:64:b7:b9:cc:41:77:a3:
51:05:a4:9e:ab:56:c2:16:6a:da:13:b2:2b:07:4d:
e0:1b:33:07:de:bf:e7:01:13:ee:3e:d0:a8:22:cb:
ea:c2:07:65:bc:39:01:52:ed:74:02:42:3b:11:29:
d1:9a:ab:4b:81:94:a8:c3:52:43:72:42:c5:69:5e:
f9:80:84:a4:f4:02:4a:ba:00:ac:16:ff:31:17:4f:
93:4b:aa:d4:17:26:0b:86:6e:a9:74:95:09:39:ca:
6e:a8:1e:fb:af:e4:2b:b1:b2:9d:c9:3c:60:70:17:
44:26:6b:46:8d:5b:87:b9:18:5b:18:95:cf:d4:dd:
da:06:3c:5e:40:08:01:08:1a:62:62:fa:86:31:3a:
2f:b4:ab:b5:65:7b:26:7d:72:39:ba:16:77:98:ab:
27:51:f8:d8:ae:db:ff:4a:b5:0d:6f:d2:ad:51:07:
31:a0:38:c2:ef:d2:ac:2b:68:3d:60:4c:0c:c4:ce:
28:9d:ae:ff:fd:41:5d:3b:e1:eb:e6:97:f1:0a:3f:
4e:c3:4b:61:01:a0:73:3b:40:a1:25:9f:68:a4:09:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:BD:D7:9E:6B:8E:ED:A2:6B:2F:6A:DE:D7:A3:C1:CA:BD:82:DE
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2c:93:f2:ce:ab:15:c5:87:df:ae:4f:2e:bc:9b:73:9a:3d:
cf:4d:5e:00:e0:2f:c7:27:a0:f1:fb:c4:98:49:15:6d:d4:f6:
13:09:1e:b4:38:44:43:69:af:5a:ca:ce:4e:1a:8b:b8:5b:b3:
b4:65:45:ae:0a:00:a4:40:0a:8d:ce:8f:cc:36:2f:bd:41:39:
9b:05:5f:bd:76:5b:1d:63:1d:a5:4e:e6:a2:f9:d2:4f:b2:c2:
6d:fa:17:b5:8d:89:72:d7:a0:c2:a9:f0:3f:c1:27:e8:18:f3:
fa:ed:ae:9d:28:5b:a9:a3:44:60:09:97:f6:5d:80:24:07:79:
a7:0d:bb:dd:55:fc:96:d0:b4:17:2d:81:8c:67:d9:65:92:13:
96:2e:c2:28:9f:47:52:6d:34:99:ea:4d:ca:88:3b:9e:56:3e:
3a:40:4c:48:bf:e0:15:47:19:66:9d:16:9e:16:e0:8b:08:91:
d7:60:ca:92:f4:20:dc:34:60:52:f1:07:5a:d3:53:45:02:ff:
b3:d4:df:84:27:b6:a8:c4:6f:53:7e:07:fc:68:a6:95:7a:6c:
b7:da:a3:86:1d:6a:01:a8:10:05:25:ad:3d:eb:c9:5a:b8:02:
e7:12:0d:14:ae:97:71:36:09:46:09:b4:5b:3d:5f:fa:e2:84:
fa:ea:b0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:09 2026 by rpki-client