Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier: GhrwihXehw37niJqnrtqSecv9Ump5whnNX8no1t1sGI=
Subject key identifier: 39:CB:E2:C1:64:E4:4D:79:56:6D:D6:BC:B2:87:B8:8A:2D:41:B5:11
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: 019FA906F287CF2FE02229F404D28EBBA098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number: 10A2
Signing time: Tue 28 Jul 2026 14:00:32 +0000
Manifest this update: Tue 28 Jul 2026 14:00:32 +0000
Manifest next update: Wed 29 Jul 2026 14:00:32 +0000
Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: OqPfQO3V6mAKWi0f5e0/EPwAMJ7Kaq9T8bHlWTqm8mg=)
2: ovrf878QfyGREV5ySXZAKG2wEj0.roa (hash: 8FVx6K1N+lYlmVzhGRofLmSyeuuSSiLMjYmgLA57T9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:f2:87:cf:2f:e0:22:29:f4:04:d2:8e:bb:a0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: Jul 28 14:00:32 2026 GMT
Not After : Jul 29 14:00:32 2026 GMT
Subject: CN=39cbe2c164e44d79566dd6bcb287b88a2d41b511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:fa:8d:31:91:4d:73:10:02:eb:81:42:d7:
05:ed:8e:a5:ef:57:98:dc:9e:d3:3d:c5:61:f4:d9:
ca:bf:3a:f6:a1:38:7a:64:35:66:2f:32:4f:87:18:
ff:96:39:ad:77:81:75:41:9a:68:3f:b4:b8:6f:cf:
34:3b:ea:3c:c4:1b:97:ef:d2:86:54:8e:21:62:bb:
09:e8:36:6c:5c:3d:c7:b5:5c:bb:fc:e9:38:b4:31:
b9:56:43:e0:ee:bd:99:b5:b4:99:72:5c:dd:ae:32:
cd:30:31:62:4e:79:55:e6:a9:cb:4b:0e:62:35:26:
28:26:1c:68:dc:2a:bb:44:28:15:77:aa:d3:8b:fa:
f8:3b:3a:e2:91:e4:36:a7:31:bb:6b:63:bf:eb:24:
b3:7f:e2:40:62:80:45:6d:ae:e7:fa:db:56:c4:c6:
87:e0:3f:da:2b:e6:84:f9:bb:31:74:71:ec:7a:7a:
c4:dc:8f:e0:03:15:3e:cb:4e:24:ac:a9:a7:aa:11:
70:25:26:cb:3f:66:05:0e:7f:ef:b1:09:79:a6:4c:
df:88:ad:c3:6a:55:0b:a5:d3:43:51:28:f6:76:56:
22:df:93:2e:37:c1:9e:be:63:7a:0f:bd:d5:80:af:
a5:4c:48:1f:39:e8:87:ac:8a:58:03:50:0e:c0:01:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CB:E2:C1:64:E4:4D:79:56:6D:D6:BC:B2:87:B8:8A:2D:41:B5:11
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5c:c2:c3:bb:e9:d1:db:d1:a9:85:55:ad:54:16:cc:c8:f5:
ce:f6:af:5d:23:66:05:35:0b:b7:d5:0c:8a:da:79:37:8f:6f:
2e:c4:89:60:4b:a6:ed:e7:0a:59:c9:0e:e0:70:a1:a0:7f:0b:
ed:c7:aa:8a:f5:dc:29:ac:c7:54:c4:2d:f6:73:70:ea:5a:88:
cf:38:d5:37:af:36:0f:4d:f4:e2:62:65:26:b6:f4:35:93:3f:
6a:1d:d2:2a:65:d4:94:69:fe:1c:ba:c4:f2:c5:96:81:66:37:
11:b8:49:a8:f6:7a:b6:c1:d7:1c:3b:8f:fe:4c:89:46:93:ca:
b4:65:c7:7e:08:be:61:15:c2:89:12:4c:ae:08:b2:ee:b3:db:
64:b8:36:4b:6f:0c:21:91:48:0a:6d:25:a7:0e:50:f4:4d:a2:
eb:29:6c:70:75:d9:51:a9:b3:f8:10:3d:43:22:13:64:70:a5:
81:b8:02:b7:9c:47:94:1e:83:cc:fc:43:b9:0a:05:e4:2e:79:
53:0f:fa:9b:8b:69:4f:b7:15:2e:10:c4:e8:ee:fc:df:69:cc:
5a:d3:f0:2d:f5:cb:5a:96:58:e7:39:79:22:de:25:57:7b:fb:
83:62:bb:3b:d7:d3:99:9b:b3:90:50:50:04:c1:67:2c:26:2f:
c6:72:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:27:56 2026 by rpki-client