Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json)
Hash identifier: S8+uLTLTCMlTZnyW8R0zuQiJqt+YM/TAXt9ZLLRWao0=
Subject key identifier: 92:14:70:1D:C1:3A:FD:27:BF:63:49:2A:07:B4:9E:99:A5:6A:A1:8F
Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Certificate serial: 019CABDA05DCDFEEEAAE329FE7256E8CF11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:01:58 +0000
Manifest this update: Mon 02 Mar 2026 00:01:58 +0000
Manifest next update: Tue 03 Mar 2026 00:01:58 +0000
Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: TIt+HpGmYmtOR4CRRetCZ6RdxUcVvWqSWEXQ6+Ds8mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:05:dc:df:ee:ea:ae:32:9f:e7:25:6e:8c:f1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605
Validity
Not Before: Mar 2 00:01:58 2026 GMT
Not After : Mar 3 00:01:58 2026 GMT
Subject: CN=9214701dc13afd27bf63492a07b49e99a56aa18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:5a:0c:ff:e3:ec:7e:ef:06:a5:78:89:38:
a0:f6:6f:f1:dc:00:45:25:79:97:38:6f:25:d0:1a:
1e:4c:05:ac:77:31:d3:41:c6:d9:1f:3a:99:20:d0:
29:3b:6a:11:04:2b:e0:89:8d:2a:a7:18:53:dc:6d:
da:f1:58:c7:ca:b8:6d:c5:99:35:52:ee:98:f9:45:
73:7a:26:7d:37:77:d6:86:69:89:ad:b2:7e:b9:73:
d1:f6:0d:b1:41:f2:99:7f:80:02:10:52:89:de:20:
14:54:f4:fe:d7:e4:37:79:fe:81:49:a7:1c:07:e3:
a5:a0:4a:eb:ea:72:04:b8:22:c5:bb:06:62:7b:c2:
85:71:22:90:eb:89:e3:72:8e:5a:53:4f:70:67:77:
8f:b2:6f:a9:69:3a:40:6e:f1:33:4c:58:54:67:2b:
5b:44:0e:f8:39:c7:38:38:62:df:81:73:26:a7:d0:
a2:31:6f:14:94:95:c2:14:d2:f9:2b:c7:91:a1:23:
d4:7c:74:3f:96:ca:e3:8b:5c:bc:3a:22:32:06:e0:
83:84:6d:69:6a:b8:63:0a:25:48:12:3b:14:5e:58:
f2:3a:9d:03:e2:ce:37:63:65:e8:be:6e:37:4a:34:
f8:6c:45:53:ca:16:ec:11:75:7b:29:3e:b7:48:e8:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:14:70:1D:C1:3A:FD:27:BF:63:49:2A:07:B4:9E:99:A5:6A:A1:8F
X509v3 Authority Key Identifier:
keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6b:35:50:a7:ae:b0:18:e3:29:83:db:72:fb:47:b4:a2:f1:
e9:51:53:2a:60:e0:07:23:5b:a2:fb:b2:7b:08:17:4b:6f:cb:
84:1f:ac:af:9a:0f:ac:eb:4c:61:de:2b:eb:d7:a6:c1:c9:e4:
25:96:45:d6:55:0f:0d:9b:55:c9:bc:41:15:7d:d3:69:a8:63:
c5:3c:9f:b5:92:3c:15:1f:50:96:ab:a7:5a:58:e7:26:12:1b:
65:38:64:3d:51:37:84:2c:6b:40:94:03:71:b7:36:68:5f:3f:
d7:f9:2d:df:65:c4:75:ee:4c:a3:6d:96:bb:71:48:74:c0:a5:
c2:81:d4:93:b7:71:e5:cb:1f:15:d9:c4:bf:1c:b0:7f:da:81:
9b:2b:28:b5:21:6b:a1:84:f6:d7:5c:eb:ca:a9:e7:e7:13:4c:
9d:bc:c0:f8:66:41:59:e6:49:1d:2a:55:38:a4:c0:a2:76:8b:
eb:4b:21:29:6c:21:79:83:1c:d0:d1:ed:77:e6:62:cb:cc:bc:
8f:de:d0:05:b8:19:7d:03:d8:12:c5:5f:77:5f:5f:af:88:0e:
2a:ad:bf:ba:38:97:8d:c4:61:0e:90:90:29:78:45:f5:c5:9c:
9c:95:6f:d4:3c:b0:09:8b:af:c9:63:5e:f8:d6:c7:49:34:0e:
83:67:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:38 2026 by rpki-client