Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: p8bBMtj49cMxkTIkt2q+TPW/y7FJeJzAzk7Nv20+ERM=
Subject key identifier: B3:36:2E:10:36:A6:CA:3E:EB:EB:FC:87:EF:66:0F:32:77:9E:FF:1A
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 019DA30A32FD61A0EFAD254EF5883E9AF559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 18C2
Signing time: Sun 19 Apr 2026 00:00:47 +0000
Manifest this update: Sun 19 Apr 2026 00:00:47 +0000
Manifest next update: Mon 20 Apr 2026 00:00:47 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: qTDlrS0sXPWUkqdTnAIfcmDJoIqKwLZ3t6oCx01LBi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:32:fd:61:a0:ef:ad:25:4e:f5:88:3e:9a:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Apr 19 00:00:47 2026 GMT
Not After : Apr 20 00:00:47 2026 GMT
Subject: CN=b3362e1036a6ca3eebebfc87ef660f32779eff1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:64:15:e1:98:ed:18:c6:5f:e4:7e:a5:44:
7b:5e:a8:27:1c:cf:1d:b0:39:49:66:6e:6c:f6:b5:
fb:13:1b:f6:5b:29:79:9e:1f:d7:76:99:32:41:37:
25:68:34:b9:cf:49:5c:80:a7:71:b2:35:b9:1c:11:
a9:a4:65:fd:19:7e:40:79:a3:52:79:7a:f3:5d:34:
f7:73:08:e8:e9:04:94:ad:64:81:a4:d4:36:8d:74:
8b:bc:33:fd:69:13:89:6e:00:5a:51:e1:2a:5b:ef:
78:e7:d6:80:94:48:e2:17:84:83:38:43:9e:3c:d2:
d6:20:f4:b5:2d:5e:97:b2:f2:d9:1a:c0:c6:86:cc:
03:37:5c:dc:ee:44:af:70:63:b9:f4:93:0a:45:36:
60:a1:d2:2d:e0:72:36:db:16:cf:84:33:16:7d:ee:
40:d4:57:5c:3e:05:4f:f6:9a:09:6c:72:da:62:d5:
3c:cd:22:ae:73:9a:f5:d6:3c:a4:d7:cf:26:cd:90:
ea:68:4e:7e:d7:ed:39:ca:7b:75:da:64:0b:40:dd:
95:1a:27:d3:17:76:24:a1:a8:f5:0b:11:d8:5e:ca:
5f:25:3f:33:30:81:9c:40:1e:5b:c6:76:25:aa:f7:
6a:80:41:84:01:f1:d8:98:6f:b4:f8:ad:99:14:33:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:2E:10:36:A6:CA:3E:EB:EB:FC:87:EF:66:0F:32:77:9E:FF:1A
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d4:ef:33:34:a4:b9:58:fe:7b:5b:1c:9f:4c:9f:92:7d:42:
be:d2:f9:89:55:97:4f:73:3e:ff:4d:e0:7b:3d:b4:91:5f:2d:
91:77:75:9d:9b:0e:08:5f:ec:8e:3a:f1:55:f2:b2:dc:bc:d9:
9f:90:b0:ed:43:16:99:81:fe:24:af:80:20:45:86:2b:a3:78:
9d:3f:32:1b:7c:fb:f3:59:e2:41:95:db:7d:7b:bd:63:6e:b6:
75:a6:96:7f:ab:8f:17:9f:ee:ba:cb:a3:8a:9a:5f:f8:d6:3f:
d6:c9:0d:2c:c4:59:24:81:4e:ba:5b:e1:ad:4f:8f:d9:11:03:
2a:51:8b:62:78:66:cf:57:d8:9a:76:80:bc:81:c7:b7:23:aa:
6f:34:09:96:96:f8:87:3d:d5:62:92:c8:08:c8:79:21:11:81:
79:f1:b6:18:de:1b:23:68:2c:f0:65:e5:f1:24:32:fd:71:6b:
fa:16:05:43:6c:42:bc:66:a4:e5:c7:7b:ef:78:f5:34:a1:2d:
19:62:af:43:a5:5b:49:22:75:fc:8e:16:15:e9:a8:b3:3a:24:
b6:5c:ad:75:67:1c:11:13:96:c2:88:bf:62:fc:25:f9:65:fa:
fc:c7:4d:86:98:f8:35:83:9f:f2:7a:54:01:54:f1:10:30:1f:
a7:f9:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:57 2026 by rpki-client