Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: PJz8TFjf7mKo7yFU4nWDJC98IEHlIZHn+jDxeoDbsWU=
Subject key identifier: 93:1B:E4:11:07:0E:AA:5A:8D:CC:7C:5C:9E:82:2E:52:EB:D0:1F:F3
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 01A1317D7C7D55CC10607C1E3D7B2F48F7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1A32
Signing time: Mon 12 Oct 2026 19:01:09 +0000
Manifest this update: Mon 12 Oct 2026 19:01:09 +0000
Manifest next update: Tue 13 Oct 2026 19:01:09 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: s8esTc+Qpq3/8NFRWzzl2rGsitQSY5eFNwUqAjs/DpU=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:7c:7d:55:cc:10:60:7c:1e:3d:7b:2f:48:f7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Oct 12 19:01:09 2026 GMT
Not After : Oct 13 19:01:09 2026 GMT
Subject: CN=931be411070eaa5a8dcc7c5c9e822e52ebd01ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:dd:77:1f:18:38:0c:f9:55:4d:80:23:ad:
6a:ba:53:27:1f:99:6f:c9:b6:de:07:9e:9c:55:29:
4f:c8:32:e6:88:cc:5a:d8:bf:73:35:90:38:87:5e:
5f:8e:76:13:0a:32:cc:11:69:77:48:6f:d7:99:47:
03:4f:ad:fb:8a:0e:c9:4e:45:36:84:4e:92:f0:5d:
41:83:2a:c2:a5:1f:3a:0e:7e:5c:6f:c6:33:d6:47:
f6:76:60:e8:88:ef:20:a4:ed:d2:64:a7:f0:0b:de:
13:ac:0d:64:11:71:d6:6a:72:d4:1f:85:76:c9:64:
2c:e5:f4:a9:b0:f0:cf:fe:c9:8c:24:60:52:25:f2:
af:d9:a1:b3:11:9d:44:b5:12:6b:5e:8e:bc:de:2a:
40:3d:3a:56:fb:b4:56:f0:3b:4b:6d:4e:79:0d:b5:
70:f0:e6:24:9b:da:67:a4:f4:3b:03:6d:63:5c:12:
36:30:f5:0a:c9:aa:2c:5d:c4:d9:38:97:c0:01:0f:
d1:3e:dc:2a:8c:c6:c1:51:2b:b8:3d:12:b9:c1:15:
5c:47:85:a5:bd:d9:3a:54:00:4d:cf:52:52:a6:19:
c5:e0:4e:9e:d4:aa:36:97:ad:01:a5:5c:94:7a:a0:
a7:4e:54:83:c6:7b:0d:79:5b:96:f2:d2:72:75:58:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1B:E4:11:07:0E:AA:5A:8D:CC:7C:5C:9E:82:2E:52:EB:D0:1F:F3
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ef:93:1d:e2:54:be:e5:02:51:27:4e:25:ac:88:95:dd:2d:
d5:e8:76:e7:06:88:de:01:e9:43:0e:d2:bf:47:38:ee:7b:06:
0d:47:0a:45:9e:b7:ec:f6:c6:33:3d:f4:7e:cb:95:a6:9e:c2:
93:4d:08:4f:c6:31:4e:68:a3:61:31:80:b6:bd:e2:d4:bf:6a:
94:1a:d2:29:0f:8a:a8:2f:7f:a2:a7:44:df:c2:ec:93:82:1f:
91:bc:a2:2f:8a:77:61:e2:3c:23:af:c2:a9:bb:00:0b:03:95:
2c:77:11:91:b1:00:73:30:c6:6b:49:fa:22:35:d6:cd:a5:7e:
e5:68:c3:aa:6b:23:e7:db:56:73:cc:cc:c8:dc:e1:04:4c:a1:
f2:e8:10:8a:77:1b:65:3a:d7:c4:a1:57:49:00:66:e8:fe:81:
45:ac:1a:58:36:b6:e3:9d:c8:30:ee:d9:69:09:46:c9:01:96:
c2:20:10:76:71:bd:25:41:ec:43:39:10:4e:5e:55:77:a9:f6:
11:80:33:4e:36:e9:0f:77:1e:a3:d5:5a:56:ec:22:ff:69:4e:
54:32:b7:1a:0d:cc:07:e9:ba:26:64:9d:0d:40:47:e8:2d:c0:
9a:e9:1c:e5:1b:90:f8:ff:df:61:be:b9:b8:8e:00:05:b3:0b:
c8:de:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:16:58 2026 by rpki-client