Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: hFhYffluQvcrcIRs9vDWVmSV1QuLRWSfRICx8MVdDAI=
Subject key identifier: 53:C8:22:2A:7D:BB:E0:C6:00:5D:B0:F6:4F:A9:1B:A8:9C:2F:4E:FD
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019CAD59BF615AC2057C6AB703307CD53CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 07:01:05 +0000
Manifest this update: Mon 02 Mar 2026 07:01:05 +0000
Manifest next update: Tue 03 Mar 2026 07:01:05 +0000
Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: cY/2pnHMMXSRB3AgcZXmQh4+3gH3+54kWfY+gBCFOL0=)
2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:bf:61:5a:c2:05:7c:6a:b7:03:30:7c:d5:3c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Mar 2 07:01:05 2026 GMT
Not After : Mar 3 07:01:05 2026 GMT
Subject: CN=53c8222a7dbbe0c6005db0f64fa91ba89c2f4efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:e0:a9:7e:bc:06:d5:32:05:56:d3:bf:97:
ea:64:70:b0:18:33:b3:1a:17:0d:e5:ec:a7:b1:8e:
dd:45:93:10:3a:f1:62:e1:4e:d0:b0:8d:73:65:0f:
b8:b5:29:7b:14:5c:1f:28:cf:19:0c:c1:f6:22:88:
2e:ce:78:3d:f6:9f:a3:ba:43:74:11:ed:14:3a:75:
58:a4:b1:73:5e:3b:e4:af:69:5c:10:0b:c5:96:e8:
13:8e:67:4f:f0:74:c0:02:ae:91:cf:05:84:7b:22:
f3:0d:4d:e1:9d:84:25:eb:d5:c9:24:13:db:81:1b:
5c:15:cd:d5:87:de:17:20:24:19:86:fb:41:0d:9c:
6d:45:36:25:f0:f5:f3:6b:9a:bc:ba:3a:f0:97:43:
5c:90:be:af:9e:38:e4:64:00:ef:1e:c4:9a:a0:7d:
bd:71:c1:f5:74:73:7f:d7:70:d4:5a:6d:40:0a:2c:
4b:de:18:21:91:29:1b:5b:8e:ec:44:f7:6e:57:00:
22:7c:96:8e:f7:18:a1:b2:68:4d:d9:9b:66:39:a0:
98:82:9f:e9:bc:85:54:c7:70:82:3f:4d:f5:03:1c:
06:f0:18:29:bc:3f:b0:d4:88:e7:ad:ba:7b:3a:87:
e0:ee:d6:7e:f0:6e:a4:81:0f:09:5f:e7:9d:da:28:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C8:22:2A:7D:BB:E0:C6:00:5D:B0:F6:4F:A9:1B:A8:9C:2F:4E:FD
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:45:4a:63:bb:81:5c:81:16:ea:d8:c1:cd:2e:ec:77:e1:fa:
ba:db:1d:9f:56:c8:19:4c:b0:4f:10:d4:5e:26:90:6a:84:55:
35:f0:15:90:c3:4d:63:78:03:82:71:84:ae:86:7c:e5:92:9d:
8d:bf:4e:d4:aa:f7:80:05:32:bb:7e:95:1b:4c:34:73:6c:39:
ae:39:de:92:3b:24:92:e5:a5:da:28:8b:ff:42:65:3a:92:93:
55:72:c6:de:1c:b4:04:f9:38:7b:01:ab:40:df:7d:a6:4c:7a:
d1:86:06:d0:07:13:18:77:2a:3d:e8:51:29:22:be:38:15:4c:
fc:79:36:0f:2d:2a:73:6a:85:3a:4b:d2:be:18:08:45:92:b6:
00:be:98:65:93:c2:c9:42:78:a1:f2:51:70:cf:27:52:95:16:
b0:d8:7a:79:d9:dc:72:02:d2:4c:a7:b1:84:aa:86:e4:22:db:
da:df:b6:a5:df:4d:69:e8:6a:83:62:6e:f1:5a:e7:bf:83:b0:
53:cc:fa:ab:35:2e:28:9e:bd:e4:70:70:77:ba:44:c7:b8:97:
b3:75:20:3a:bc:7e:a3:16:ce:9e:fe:73:e1:31:6a:f3:ac:66:
03:eb:ad:d4:4c:38:bf:83:15:38:a2:b1:8d:14:a9:f1:df:d2:
15:de:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:21 2026 by rpki-client