Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: s7oCaQwbOQCmzBiYusGlzFe4CgWvxpC+dRQ4Y6fo76M=
Subject key identifier: 40:F1:E0:95:1A:2F:84:EA:52:E1:B4:3B:3B:7A:6B:EE:25:95:0D:FD
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019D9AE3BD7F3AFBA395FD7138A5FDF9100F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 10:01:49 +0000
Manifest this update: Fri 17 Apr 2026 10:01:49 +0000
Manifest next update: Sat 18 Apr 2026 10:01:49 +0000
Files and hashes: 1: 1-gO4QgPPqp1Kak3_666d1-5pe9c.roa (hash: qTzaIkVWn2wQ4/BhUvBh5PhVLGzlNE9Q4I9h2wouay8=)
2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: P4ZUsX/WsY9aVHefAqxuS0Xxoh2WAe8Bzzw3Om5gtmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:bd:7f:3a:fb:a3:95:fd:71:38:a5:fd:f9:10:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Apr 17 10:01:49 2026 GMT
Not After : Apr 18 10:01:49 2026 GMT
Subject: CN=40f1e0951a2f84ea52e1b43b3b7a6bee25950dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:a4:98:a8:0e:14:67:25:72:69:a3:e7:50:
9f:cc:df:24:8b:29:0c:30:89:62:e8:83:68:c2:af:
04:20:95:29:5f:84:31:fb:15:8a:7c:b1:ff:3e:9b:
26:a1:ba:11:4f:89:cd:7a:0a:5c:50:63:00:79:49:
5b:92:28:05:e5:73:03:8f:54:5e:1e:79:e0:bb:5d:
75:b2:a6:a3:e3:b4:c8:f7:1d:3a:ff:c9:dc:6b:3e:
eb:4a:36:58:9d:95:8d:03:d6:17:8a:69:f1:32:82:
fd:e4:5b:f2:96:3b:63:97:5f:97:87:2f:21:ae:5e:
57:3f:60:30:61:9e:70:76:53:4a:f1:2d:ab:96:ef:
34:ca:c3:42:55:78:79:ba:c0:b3:e9:c3:1d:16:3a:
d8:7d:0a:52:30:3e:29:9a:da:12:88:66:9e:5e:80:
b4:1e:83:39:ac:4f:d0:ae:1c:78:68:02:9f:45:d1:
cd:b0:99:50:f9:3e:6b:ad:97:22:63:74:2a:ee:c2:
b4:4f:9b:46:62:12:99:07:5b:2d:04:b3:26:35:2b:
3a:fb:4b:3f:2b:08:52:b9:ed:c4:ef:1a:dd:3c:ee:
09:05:a4:87:29:e0:d2:b2:f1:90:fd:53:80:60:35:
cd:6e:82:ca:6e:93:57:1b:b7:97:41:c0:9f:a4:4f:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F1:E0:95:1A:2F:84:EA:52:E1:B4:3B:3B:7A:6B:EE:25:95:0D:FD
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:99:1c:7a:4a:bd:8e:a7:8b:8d:d9:70:4a:62:a9:04:0e:db:
ff:2c:5b:0d:85:2c:92:da:7c:42:17:76:b4:c4:e5:d8:50:63:
52:91:b8:27:04:f7:17:b5:ba:fd:a4:af:6a:bb:1e:df:e6:e8:
7b:94:54:b9:5d:0d:93:a0:82:cb:55:9a:02:71:ce:74:a1:b9:
8d:c1:a2:02:45:b1:da:61:48:29:f8:77:4e:25:62:4d:a0:a3:
3a:f3:14:0b:04:ca:73:c4:c1:4f:dc:cf:ba:d1:32:95:5c:5e:
06:0a:93:ba:35:06:b6:4c:1d:c5:27:64:67:5b:ba:6b:4f:a2:
64:56:0c:b6:6e:ec:06:4a:d3:7a:1f:0e:30:7a:71:0d:00:5f:
0e:cf:bf:0d:7d:f1:6c:80:ed:fe:90:c9:89:13:aa:a4:2d:50:
95:ce:46:b3:fb:80:5d:58:34:40:91:c0:44:8c:97:da:5b:4e:
ab:ac:0c:21:7f:74:0b:85:22:79:ca:5a:e1:ee:fe:a4:77:80:
64:ad:b1:47:60:e8:f8:4f:30:18:ce:fd:7f:21:9b:f5:31:ef:
69:67:15:ea:ce:2f:70:33:62:0a:20:5a:5e:05:bd:e5:d4:97:
a4:f9:79:06:fc:cd:75:63:10:74:ac:33:f0:3c:7a:39:ee:9c:
3f:26:8f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:13 2026 by rpki-client