Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: zKHs1fMGiiQngOC8DlDw2oP3gGxdbI6gSYUGYXF7SOM=
Subject key identifier: E2:BB:00:E0:B1:76:A4:5F:C2:13:41:76:C4:55:03:48:60:37:11:40
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 019CAAFD2DB9A765F7A6565D819FE8AA9ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0B9D
Signing time: Sun 01 Mar 2026 20:00:44 +0000
Manifest this update: Sun 01 Mar 2026 20:00:44 +0000
Manifest next update: Mon 02 Mar 2026 20:00:44 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: +8IcshhYu+DwnFCrIC41PgGtcJ3j1kazqDUSZ/zqTjY=)
2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:2d:b9:a7:65:f7:a6:56:5d:81:9f:e8:aa:9a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Mar 1 20:00:44 2026 GMT
Not After : Mar 2 20:00:44 2026 GMT
Subject: CN=e2bb00e0b176a45fc2134176c455034860371140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0e:0c:5e:67:9b:7c:93:ba:80:10:d8:aa:6c:
54:e6:60:a2:e8:7a:31:ea:54:df:1c:90:33:c3:4f:
a0:b5:ec:3c:a2:d1:46:e8:09:64:7e:9a:9c:e1:43:
3c:c6:5f:82:ce:76:5b:6c:e8:75:30:74:3a:d3:34:
2d:02:1f:53:4e:d8:fe:f7:3b:26:8d:08:a4:88:5d:
9e:28:2f:4a:27:47:53:a8:f2:53:b3:68:17:a6:ec:
e1:77:6b:05:fc:2f:2b:bd:5d:08:51:f5:8b:d5:bc:
2e:5d:ce:99:d7:56:dd:d0:fa:a7:ae:8c:3e:3e:2a:
14:93:99:33:45:37:fa:aa:58:64:90:94:8f:6c:cf:
9e:11:41:e8:88:62:39:12:fb:f7:4c:bd:42:de:be:
44:10:b9:a6:40:1a:93:76:69:80:fc:79:4a:e3:b4:
a0:6a:4f:fd:80:b3:a1:f7:e1:c6:d5:30:f2:eb:b0:
c6:e3:ac:4d:03:52:11:25:70:61:ba:45:88:07:ed:
e9:6d:63:60:fb:ba:b3:88:b9:81:a9:48:65:d2:f1:
ff:27:bd:aa:bd:76:cf:d1:13:30:d9:16:bd:7b:60:
c2:f6:d2:f0:60:7c:1c:66:6e:59:72:e3:83:71:f4:
67:05:43:ce:00:82:93:f7:0f:c9:95:f9:6b:3c:28:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:00:E0:B1:76:A4:5F:C2:13:41:76:C4:55:03:48:60:37:11:40
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:cf:62:8a:cf:b1:b1:e6:a5:0e:08:8b:41:8c:91:f5:0a:7f:
4c:eb:d2:a6:c3:88:c6:bc:e7:19:b9:25:ef:c6:14:c3:cd:cc:
78:cd:3e:5e:86:23:45:f1:7c:fb:5d:44:19:5f:d1:52:ec:54:
b6:6d:79:c7:4b:6d:91:fe:14:d6:68:51:e6:af:08:a8:8f:52:
1c:bb:a4:3a:96:49:37:52:af:49:bb:01:12:bd:5b:98:ac:8d:
e6:27:53:ef:01:04:0b:24:52:02:ce:0b:c4:0e:e7:35:c4:a9:
81:b2:0e:f1:51:08:aa:d1:f2:63:d6:a9:b6:ea:7e:87:11:1b:
c2:0d:00:13:ba:7b:ed:aa:35:30:19:3f:ad:a8:71:3f:2f:c0:
b2:ac:a9:ef:32:49:02:b6:75:d9:3b:62:c4:bf:e8:f2:33:85:
fc:06:ca:f5:6e:9e:26:e7:f2:33:b7:b0:74:16:e9:38:81:18:
f4:da:39:12:75:f7:c7:f3:79:37:f7:19:a6:30:31:b3:3c:01:
4a:22:dd:78:94:01:de:90:d3:62:ff:e6:10:64:1d:0c:08:92:
ff:7c:76:1c:f2:a6:06:45:74:27:30:92:8b:76:b5:59:08:4e:
c2:fb:b8:b9:2c:63:44:bf:fc:bd:55:24:e3:ed:1e:dc:5c:2a:
ae:41:98:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:16 2026 by rpki-client