Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: BzRq9cGtA2CG4/Tb4EW++SzH0hH8KlVNGmGuodaS5j4=
Subject key identifier: EC:6B:E7:16:C2:31:A5:19:9E:E5:10:C2:71:26:1C:B0:2D:9F:6F:F0
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 019D99CFD9D9A651DDC200A7F61AD1C7C7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:28 +0000
Manifest this update: Fri 17 Apr 2026 05:00:28 +0000
Manifest next update: Sat 18 Apr 2026 05:00:28 +0000
Files and hashes: 1: E3lm4FvyrvLHTXkXDSTYjOHsHVY.roa (hash: 6QZmnjSIaFmg0mpij0y/20sY5ruAuIBmod+jn1qrIQA=)
2: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: +Xo46BOP/oavJxsuzwHtseifyx1gedvaOcqj7QvTH4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d9:d9:a6:51:dd:c2:00:a7:f6:1a:d1:c7:c7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Apr 17 05:00:28 2026 GMT
Not After : Apr 18 05:00:28 2026 GMT
Subject: CN=ec6be716c231a5199ee510c271261cb02d9f6ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:24:b8:4d:9c:2f:cf:9d:16:78:2b:06:5e:
72:86:92:5b:e7:52:36:27:42:61:79:2f:8d:74:0c:
a6:c8:8d:39:26:6e:6b:c9:5a:6e:74:67:ba:e7:0a:
d6:76:a7:58:5d:ea:25:07:84:c0:dd:1d:3a:58:fc:
6c:8c:5f:5f:5f:70:0a:66:71:81:22:e6:e4:71:b7:
68:60:1a:5d:0f:83:2b:4a:d3:08:af:92:42:d6:94:
01:9f:fc:0d:d3:b4:cd:59:a1:bd:a0:29:ab:ab:2b:
79:e6:6e:b6:8c:5f:38:13:2d:0f:73:2c:7b:ed:da:
a2:a4:d1:f3:70:4b:aa:1c:22:95:82:3e:d2:fd:68:
00:d8:9d:6f:12:dd:e7:4a:58:22:6a:43:6b:05:c9:
1b:64:0c:0a:af:56:ff:9d:72:96:ba:b2:e5:8f:c8:
20:57:d9:76:a7:59:d8:d7:07:5a:68:9f:2a:f4:ec:
4b:09:4f:22:b8:30:19:0a:c3:25:7c:89:45:59:df:
fd:34:f8:5d:19:c2:a4:37:ad:17:dd:f4:3c:b7:dc:
78:d6:22:ba:37:60:70:9c:87:9b:9e:7a:8c:93:91:
aa:93:71:9f:aa:69:bf:15:5c:92:67:42:ee:07:97:
ce:2b:49:00:d0:42:b0:d0:0b:95:72:c1:be:72:17:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:E7:16:C2:31:A5:19:9E:E5:10:C2:71:26:1C:B0:2D:9F:6F:F0
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:99:63:75:93:da:f7:0e:99:aa:d7:a7:bd:47:e2:1f:d0:
77:f1:14:4b:d6:db:40:28:7d:8c:9f:e7:22:e5:f8:72:9b:31:
9e:03:19:ce:8e:5d:83:12:38:71:45:a7:02:4a:92:54:6c:29:
ed:82:3c:ff:08:90:f9:9e:f4:6a:14:a0:c4:54:07:f3:fd:dc:
aa:0d:9b:19:9e:2a:1b:9b:c7:68:96:cf:f3:62:9d:b3:1d:6e:
7a:aa:e0:fd:81:b0:77:80:37:90:ee:f2:72:ce:d1:48:d8:28:
42:b0:be:f4:e0:dd:9b:71:1e:c1:ce:8a:bf:57:b4:62:93:88:
1f:9d:70:f4:b2:c6:d6:42:a8:cc:fa:20:0f:6d:c8:49:cb:8d:
92:19:69:1f:df:d3:df:97:12:66:57:c4:38:a7:51:55:1b:f0:
f7:1b:0a:b4:3e:e5:01:ee:80:75:e6:fb:64:8d:cd:48:08:92:
09:b9:7d:4d:65:99:97:76:7f:88:e8:11:4d:fb:be:f8:ea:4a:
a6:af:7a:75:0b:ce:97:e5:a7:8f:25:76:ba:25:37:f0:21:a2:
d5:19:7b:aa:21:0a:e7:4f:e8:18:82:e3:f0:95:b5:45:6a:90:
e6:db:18:cb:2e:df:49:20:81:30:7b:35:c9:04:a9:16:f7:09:
32:70:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:41 2026 by rpki-client