Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: Ct8yPp/F71CNQA77h0w8KRFOYRNNEHg2SzZUbdG8QHw=
Subject key identifier: 6B:3C:0B:53:F3:CA:C6:19:C4:F7:27:17:F1:D9:4D:AB:24:44:1F:51
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 019D9A74BF5492A6FAFA7E9FE52D647BAC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0C19
Signing time: Fri 17 Apr 2026 08:00:35 +0000
Manifest this update: Fri 17 Apr 2026 08:00:35 +0000
Manifest next update: Sat 18 Apr 2026 08:00:35 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: BAnve6veFBkck9Fl5o2afmqlzNrDwfLZNlM82qqU5tI=)
2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:bf:54:92:a6:fa:fa:7e:9f:e5:2d:64:7b:ac:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Apr 17 08:00:35 2026 GMT
Not After : Apr 18 08:00:35 2026 GMT
Subject: CN=6b3c0b53f3cac619c4f72717f1d94dab24441f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:20:de:d1:f6:8d:fa:eb:57:73:60:06:c1:
fe:cc:8c:6a:6a:a7:40:dd:42:19:be:c7:5d:ea:b9:
93:66:ff:05:d7:c0:48:19:a0:b9:60:1e:51:71:1f:
62:dd:55:be:75:00:7c:0e:0e:3d:85:a5:d6:83:53:
42:16:f6:2b:08:78:86:48:b2:88:ce:ac:44:9d:41:
b8:c5:9e:5d:cc:43:0c:03:b6:4f:de:bf:d8:44:13:
25:fd:ed:49:3b:82:6d:6d:6c:a8:e5:f0:41:28:16:
2e:6d:a3:eb:ec:1e:79:8f:b8:61:d5:64:7d:a3:b2:
3a:8c:df:c5:83:4a:78:ac:ec:84:f1:0f:ed:61:f8:
6b:db:b3:06:8a:2c:02:cb:3c:0b:97:bb:6f:8b:07:
77:e5:9c:ae:ad:c9:f2:ed:50:f5:86:92:40:64:1e:
7b:dd:29:a3:b7:0e:67:0e:c7:da:a9:1b:8c:64:9a:
11:46:6b:56:24:4a:08:02:f5:9c:f4:3a:f5:20:60:
61:4c:38:f4:86:27:be:88:f9:e5:13:38:31:2b:b0:
34:e9:7d:8e:95:d7:4a:52:b5:e0:d4:ad:bb:48:ee:
db:28:8b:48:02:94:76:23:15:98:d8:65:32:7a:76:
86:66:9f:71:2c:52:0b:2d:ac:00:47:07:29:cf:52:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3C:0B:53:F3:CA:C6:19:C4:F7:27:17:F1:D9:4D:AB:24:44:1F:51
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:88:5e:27:ab:21:b0:8b:7e:38:5d:3d:06:fe:ba:a0:df:b9:
60:b7:fe:8e:34:a2:71:52:64:9e:b9:d5:53:1d:06:6c:2e:5c:
34:a3:d6:2c:7c:46:bf:31:d4:6f:55:b1:f0:54:da:c4:84:53:
25:df:58:e7:81:a2:aa:71:c4:c8:87:58:5b:3c:7e:b1:db:cd:
4e:22:71:08:b8:d1:79:35:47:cf:29:64:7e:d7:4a:da:e4:e6:
96:4d:68:2e:27:ca:7c:02:99:0d:c6:97:38:5c:a8:47:19:af:
da:25:89:b8:47:36:ad:36:9c:05:df:a0:53:31:f2:3e:cb:e6:
5c:fd:a6:68:5e:72:94:f1:2a:60:26:71:82:e1:ee:ac:53:57:
65:0a:97:6f:a9:ae:2e:2f:97:3b:f9:66:3b:dc:c1:98:32:8f:
7a:1f:4e:7b:62:d4:5d:dc:d7:db:9c:88:92:e8:7c:66:94:3a:
aa:f8:d9:64:c7:cd:39:3a:66:7f:3c:f5:03:82:9b:a3:f0:1d:
98:33:3a:ec:99:2d:0e:1d:8c:1d:21:eb:9d:97:a3:27:de:24:
1d:7c:cd:b3:ca:27:09:eb:41:44:fb:f2:1b:0f:7d:48:2b:c3:
a4:bf:7f:8c:e9:73:56:62:29:b8:44:9a:55:89:f3:f2:5e:92:
18:96:d9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:27 2026 by rpki-client