Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: 7kCpqhpf+7bDBFfX9xr823gXCGxm42rmFDQSrLXMZuA=
Subject key identifier: CF:61:D5:23:91:3E:96:D9:7F:77:C9:53:D3:0A:BA:78:9C:99:60:1E
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 019D9C2CC02239125D7094FB0E2DBA3E370A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 1857
Signing time: Fri 17 Apr 2026 16:01:11 +0000
Manifest this update: Fri 17 Apr 2026 16:01:11 +0000
Manifest next update: Sat 18 Apr 2026 16:01:11 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: wvBo3W6kfKqIpXnZynhFruK97n9D5BqAkh4PrM8o1wA=)
2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:c0:22:39:12:5d:70:94:fb:0e:2d:ba:3e:37:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Apr 17 16:01:11 2026 GMT
Not After : Apr 18 16:01:11 2026 GMT
Subject: CN=cf61d523913e96d97f77c953d30aba789c99601e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8a:78:e5:1c:f8:22:6d:2b:1a:8f:9a:82:59:
67:bc:22:d7:b3:11:9e:49:73:45:65:04:d0:f6:2c:
19:23:a9:a0:aa:08:da:a5:33:76:ce:7c:c2:e5:27:
9c:5d:7c:6f:2c:5c:fa:5e:30:26:1c:15:dd:d4:e2:
db:31:89:ca:31:07:74:5a:f5:90:f6:06:93:69:61:
12:78:45:9a:24:60:40:17:79:76:b5:aa:84:2c:88:
d4:26:7a:23:ae:82:24:78:76:20:7e:99:30:4b:3a:
2d:a4:0e:35:9b:f3:b0:88:6d:15:ec:f8:6e:9e:a9:
76:c3:c6:15:62:92:0a:1d:8e:b9:dc:43:5f:80:4d:
d6:ba:04:c9:c6:07:cf:1e:b0:98:d8:88:2a:c4:24:
9f:f3:fe:07:a5:bb:cc:7e:1e:d4:87:7b:58:95:d3:
04:09:25:60:3a:ef:85:54:9f:7c:c8:ed:0c:3c:22:
82:83:c8:ab:ef:de:50:ea:c2:d4:64:57:fb:1a:b8:
7c:64:5b:c9:31:18:63:a0:5f:d5:d3:ed:53:4e:1a:
f7:f2:38:6d:c9:b8:b8:91:68:d5:2f:72:57:06:8e:
5e:5e:ae:19:0d:36:a6:40:27:39:7b:eb:d0:c5:57:
95:d1:dd:75:3f:a9:03:76:c2:37:d6:a4:f6:52:5d:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:61:D5:23:91:3E:96:D9:7F:77:C9:53:D3:0A:BA:78:9C:99:60:1E
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:0a:27:8b:9d:0b:de:fe:a9:1e:3c:48:19:a8:bb:35:fc:5a:
aa:bb:70:4d:ec:e8:da:a0:70:95:82:df:87:8d:f5:a2:f2:38:
e4:5c:81:95:c0:34:01:90:77:25:8a:84:1e:66:ba:97:d8:af:
0d:08:af:ba:f0:8d:df:ab:dd:76:2f:93:d6:fa:de:3d:62:b3:
61:5c:94:f4:62:b3:57:c9:63:46:a6:4b:70:04:c4:de:1e:37:
0c:17:88:b5:bc:a0:61:30:aa:89:07:1c:8c:77:6b:c5:4f:e6:
d5:da:75:a7:a7:25:91:e7:34:02:1f:98:42:13:dd:e2:18:6f:
44:8d:c3:ec:19:d8:b4:eb:6f:96:bd:f9:7e:62:17:68:d2:02:
92:b5:ab:87:49:e3:ae:50:19:25:86:8f:92:43:28:d0:8b:0e:
7a:19:bd:20:a0:9b:67:27:ba:d8:8e:ee:fb:84:c5:25:21:7a:
6a:b6:79:ee:de:da:97:f8:45:11:45:0f:74:c4:24:e1:78:ac:
6b:1e:e0:52:3c:18:b9:3d:36:b6:26:18:52:4c:e5:11:6b:b7:
bf:50:c5:b2:49:93:1d:ef:e6:28:5d:cf:2f:a1:5d:6c:a7:52:
15:b0:65:36:a3:cc:ae:be:ed:ac:83:73:75:aa:89:d7:a1:2e:
22:3c:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:23 2026 by rpki-client