Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier: VAaE3rUwDgNEgnDaBSNWIlfOly4RsyzE4xNkkCsC0uM=
Subject key identifier: B9:9C:40:FA:9C:76:1C:2B:BD:31:55:C1:28:6B:FC:80:AB:C5:F6:86
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: 019CAA58333B21EA327B6CD34EFBE6C48F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number: 0F15
Signing time: Sun 01 Mar 2026 17:00:32 +0000
Manifest this update: Sun 01 Mar 2026 17:00:32 +0000
Manifest next update: Mon 02 Mar 2026 17:00:32 +0000
Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: OGlljYiS9klFWkf25sr0i5myAo3bdZ1WPGegsnj6SS0=)
2: ovrf878QfyGREV5ySXZAKG2wEj0.roa (hash: 8FVx6K1N+lYlmVzhGRofLmSyeuuSSiLMjYmgLA57T9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:33:3b:21:ea:32:7b:6c:d3:4e:fb:e6:c4:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: Mar 1 17:00:32 2026 GMT
Not After : Mar 2 17:00:32 2026 GMT
Subject: CN=b99c40fa9c761c2bbd3155c1286bfc80abc5f686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:d8:2b:35:91:12:7f:ac:cb:2a:d9:72:f8:
67:76:b1:a0:3e:6a:0b:01:71:36:db:4f:ea:d8:1d:
83:02:08:6b:ee:ca:a8:05:06:20:8b:f6:e2:39:54:
6e:d1:8b:42:25:77:d5:2d:2f:a9:56:76:2a:a8:b0:
4f:da:de:a7:ef:ba:c8:ec:5d:a4:44:f5:05:29:db:
84:96:9e:b0:2c:1b:2b:ef:6c:e9:98:3d:71:ff:9f:
22:16:98:2a:ce:ac:0a:f6:25:bc:51:02:d5:90:96:
3f:da:a0:6f:27:81:b5:a1:28:31:cb:23:18:db:ba:
78:cc:3b:f2:ba:56:d8:e4:72:45:e7:c5:e4:d5:df:
a6:ac:59:30:82:a2:e9:bd:64:4a:1e:1d:2b:c1:fa:
5c:0c:93:a5:d6:67:b6:99:24:99:35:4a:c7:d2:21:
7f:37:e9:93:b4:78:d4:16:89:8f:80:3e:0d:1e:5d:
57:f9:6d:9d:8b:a3:74:3f:90:3f:d6:0e:ff:24:50:
92:bb:49:eb:2e:82:34:38:a7:f4:50:4f:2b:0a:b0:
11:b4:c9:b5:7f:cf:ac:bb:0f:15:da:43:05:ba:92:
17:75:46:ab:dc:52:6b:1f:8b:b7:32:bd:48:fc:d5:
85:5f:d7:f4:29:a9:89:0e:d5:21:d8:1e:c4:7a:20:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9C:40:FA:9C:76:1C:2B:BD:31:55:C1:28:6B:FC:80:AB:C5:F6:86
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:15:88:90:ba:aa:ff:33:18:28:52:8e:4e:f4:a5:65:19:5f:
9c:6b:7b:bb:b3:40:ba:21:e0:24:cf:20:1d:75:bc:70:09:e9:
2f:fb:b3:d3:4c:20:66:82:41:c3:52:4f:d3:56:a8:fe:e9:cf:
dc:44:be:57:ec:88:b3:9e:7b:63:e0:8a:f9:00:37:e0:13:9a:
c9:e0:d8:ea:86:fe:b6:0f:27:63:1f:2e:0b:82:da:6f:8f:36:
d9:3f:04:8e:e4:77:34:6c:82:03:15:e4:4d:ae:c4:88:1b:53:
54:94:49:ab:d2:2e:c4:40:cb:5e:49:67:0f:28:c1:7a:12:a3:
41:aa:3c:a5:e7:53:c9:f8:05:53:80:c0:de:d1:53:b0:6f:e9:
99:f4:aa:9f:f9:53:c1:30:f4:3c:66:6d:f4:48:5d:e4:80:55:
b0:62:d3:42:dd:1e:99:c8:a1:5f:34:59:f1:3c:03:b2:eb:0f:
8d:4a:c2:01:7f:eb:fd:d6:60:f2:41:2b:cb:5f:7d:d8:6e:3d:
14:a5:31:78:62:41:c8:ac:b9:dd:b0:3a:6d:38:9f:48:e2:7e:
43:34:13:ed:a6:a1:f8:1a:30:dd:f9:d9:24:71:da:2b:fe:1e:
df:03:56:56:ad:bd:2f:4c:ae:fa:f4:1e:13:9b:ff:67:7b:89:
05:c6:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:09 2026 by rpki-client