Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: FFDZ4F9EuW1xNAV0JKlO8nWS6QdRj9WfjwbFb+AtqOM=
Subject key identifier: B2:B5:8D:9F:73:61:49:5C:B8:CA:8C:8B:37:14:92:77:E0:91:7E:ED
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 01A116AAD063657B5B11BC48616EA9027653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0DE7
Signing time: Wed 07 Oct 2026 14:00:55 +0000
Manifest this update: Wed 07 Oct 2026 14:00:55 +0000
Manifest next update: Thu 08 Oct 2026 14:00:55 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: 0VdAFY7yum1tqrgUc6sSP5TEYhbkNxAbrPDflLWp3nc=)
2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:aa:d0:63:65:7b:5b:11:bc:48:61:6e:a9:02:76:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Oct 7 14:00:55 2026 GMT
Not After : Oct 8 14:00:55 2026 GMT
Subject: CN=b2b58d9f7361495cb8ca8c8b37149277e0917eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:dc:51:ea:0b:70:f1:04:7c:3b:c5:c5:91:
32:7c:bf:e7:90:9e:15:3b:7b:b2:32:10:00:fc:f0:
d2:74:98:20:be:a1:10:5f:ec:de:18:71:01:02:f8:
55:29:bf:ed:7c:31:e1:34:56:50:5c:ba:4f:43:fd:
51:a8:d0:e9:67:d5:94:b8:54:9b:07:04:5c:fa:9e:
24:46:30:ba:e8:a4:39:50:d5:98:80:2c:a4:be:ba:
4a:16:79:3d:8a:ac:df:5b:3b:28:7d:ca:f4:94:b9:
98:ab:31:e7:fb:c6:33:0e:45:08:e4:91:b7:46:aa:
d0:55:8f:57:d2:a3:54:6d:e2:b6:56:33:b3:cb:c1:
21:22:ee:6a:fc:a7:25:d5:dd:93:76:e7:a1:36:20:
dd:7a:4d:b7:41:ef:ef:ac:81:d7:72:4e:4c:60:f9:
76:a5:b9:0e:09:65:83:f7:d6:a0:a9:8f:c1:09:99:
6a:d0:5d:40:0b:bb:b6:49:46:3b:34:d4:92:5a:2d:
ea:22:f3:ff:f3:bb:75:62:52:78:b9:f6:fb:70:c1:
93:86:51:00:6d:ac:ae:f7:19:b1:9e:bf:8c:7e:24:
7b:a3:20:d9:26:61:7f:6d:ef:48:73:7e:d3:a0:1c:
8d:af:8f:ea:f9:e7:59:57:16:f8:8e:ac:53:da:cf:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B5:8D:9F:73:61:49:5C:B8:CA:8C:8B:37:14:92:77:E0:91:7E:ED
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b1:9c:ce:86:97:84:9a:2d:ae:39:66:0e:d4:4b:2e:76:1b:
5b:c3:db:11:dc:34:27:13:4d:88:48:b6:e2:83:cc:a4:af:02:
3c:66:51:0c:d1:89:0c:2f:ca:dd:e8:0b:8a:8c:fc:70:ea:be:
ca:c2:4c:9e:bf:2a:ae:79:21:67:be:15:89:8f:e1:c8:99:6d:
fd:8c:92:f1:19:c9:c6:69:ed:96:9d:50:c4:95:db:a6:ac:aa:
89:ef:a2:5e:85:5d:3f:87:ed:ec:7f:27:17:58:ec:8c:b3:98:
8c:6e:52:a0:c6:b5:02:0f:5e:56:e5:2f:6d:d8:fa:4c:b2:5e:
26:0b:99:3f:d2:b7:73:f9:e2:18:8f:a6:91:a3:94:b6:87:fb:
1f:4b:a7:00:61:7d:f7:f7:5f:e8:54:29:16:19:14:5b:59:2f:
e4:7f:38:9d:aa:bb:cd:2a:22:ae:58:41:5d:4d:a2:8e:55:b0:
fe:ba:07:06:0b:83:d1:81:51:a9:f7:b6:27:54:af:6b:22:0f:
6c:c1:d0:f5:22:ea:d1:f1:52:5a:3a:d9:94:86:d3:3d:80:1a:
68:50:03:94:6f:1c:a8:f7:d0:ab:73:47:3e:88:b8:1d:c5:37:
a7:d2:20:dc:a3:bc:9e:81:fa:a1:2c:ae:aa:e9:27:e8:a5:45:
bd:d5:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:11:37 2026 by rpki-client