Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: /5thy5omd2FcUJq4mZkM5yswvoDINAxkWM6w9iCP+6A=
Subject key identifier: B8:54:46:BB:13:DC:7E:64:48:0D:BB:EE:A6:9D:63:15:D5:D0:E4:C6
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 019CABA24503A90DA434ACD69799AB379EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:01:04 +0000
Manifest this update: Sun 01 Mar 2026 23:01:04 +0000
Manifest next update: Mon 02 Mar 2026 23:01:04 +0000
Files and hashes: 1: QVqjoZxOanPkSrpEE0sDBKehWCQ.roa (hash: k/xCn5DILtdCdVds1aCxyFqhcnoj9r7lODhjJ0bo6sk=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: vEy+Qcup8ZfFb5ztyEkDelkgNy4Dn6ml5GPNIDfjfOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:45:03:a9:0d:a4:34:ac:d6:97:99:ab:37:9e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Mar 1 23:01:04 2026 GMT
Not After : Mar 2 23:01:04 2026 GMT
Subject: CN=b85446bb13dc7e64480dbbeea69d6315d5d0e4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:6e:72:73:60:b8:75:8e:ed:f6:1f:91:e4:
e6:7c:10:68:a0:55:10:23:d2:1c:ea:1d:5c:68:22:
36:d9:d4:a0:1d:3c:b5:52:40:f1:0d:71:89:1a:35:
04:76:29:90:a9:3e:46:b3:05:8a:07:45:fc:de:82:
21:12:d1:7c:8f:b0:76:13:48:21:5a:a5:37:91:7d:
f1:be:07:bb:4b:94:af:9b:13:a8:8c:24:85:40:ce:
c5:0a:59:42:b8:c7:08:06:2e:2b:d8:ab:4c:e6:93:
d7:40:af:e9:c7:e9:9d:04:83:5e:e4:e2:d7:e9:5e:
7a:91:ff:4d:19:bf:de:82:be:8a:98:99:3e:70:b0:
11:4f:7f:ae:74:5b:c3:4e:d9:85:1c:18:cb:5c:ae:
5d:80:dd:cb:dd:ca:62:2e:3d:2a:92:8d:1b:24:a3:
d7:75:0c:ef:59:6c:8d:69:22:70:27:0e:96:fa:9f:
54:83:5c:5f:5a:9e:20:6a:26:66:23:28:6c:4f:08:
f1:ea:65:fa:de:79:cd:56:c5:b3:a0:3f:0a:da:91:
02:ef:b6:a9:35:1a:e3:d0:86:c9:3d:aa:d9:a7:f7:
26:c6:88:d9:13:f2:ec:09:45:01:56:08:2f:3f:47:
33:93:cc:ba:bc:a8:57:3f:52:d1:d6:ab:3a:2c:09:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:54:46:BB:13:DC:7E:64:48:0D:BB:EE:A6:9D:63:15:D5:D0:E4:C6
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d6:32:88:8a:26:7c:d6:04:d8:be:cd:c2:78:c4:c9:d6:c7:
81:cf:d4:f0:5c:0a:b2:20:64:c2:0b:1e:89:91:67:1d:9a:07:
41:9c:d6:a1:b6:d7:9b:e5:87:52:66:34:69:4b:81:8f:3f:e1:
bd:86:b4:10:3b:5e:36:c4:8e:e2:18:1e:df:19:e4:cd:c2:dc:
68:87:2c:f0:bb:04:56:15:92:5e:57:0b:51:58:9d:45:8e:7c:
f1:ee:55:4b:85:1e:9a:29:6b:d8:6c:f9:b1:60:b4:aa:18:9b:
c1:03:42:34:09:fb:9c:8b:ca:64:1f:d2:d5:ad:98:be:3c:0c:
c7:cb:02:1b:fe:ff:0a:4f:1c:75:13:69:ac:b9:64:a6:19:b6:
36:d1:4d:73:4e:83:d3:4e:66:3e:05:1c:fc:d3:93:fb:3e:f6:
e5:84:da:ab:b8:c6:83:9f:1b:ee:42:0f:92:a0:cd:12:7f:7d:
b8:29:cf:33:3b:43:af:98:bd:9c:d7:42:80:1f:c0:71:8d:c9:
a0:87:c6:42:61:6f:62:63:b1:e4:c6:33:2c:e8:68:06:5b:2f:
f8:5b:db:5b:98:f1:29:ef:f3:d1:67:69:ba:1f:f0:fd:c1:4b:
c1:4e:2e:e8:42:3c:95:c1:94:3c:39:ae:92:c9:2b:c3:5f:7e:
10:24:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:25 2026 by rpki-client