Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File: o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier: qZKGKsOWbnwW7stVbev09s5YSgwx/dkzAw7Hatq3FHk=
Subject key identifier: E0:41:7A:BA:43:0B:40:94:D5:0C:03:3E:5A:2E:C9:98:FE:5D:43:CB
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 019CABA21BDD73912C400D28510D6C01E090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 23:00:53 +0000
Manifest this update: Sun 01 Mar 2026 23:00:53 +0000
Manifest next update: Mon 02 Mar 2026 23:00:53 +0000
Files and hashes: 1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: T6D71Uhw0o/t67+q+ROJMzdSBYAuZjVFY/CTHJpIA2I=)
2: v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (hash: +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1b:dd:73:91:2c:40:0d:28:51:0d:6c:01:e0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Mar 1 23:00:53 2026 GMT
Not After : Mar 2 23:00:53 2026 GMT
Subject: CN=e0417aba430b4094d50c033e5a2ec998fe5d43cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:9a:ee:ec:c8:7a:5f:9a:23:04:e8:ac:2a:
0a:66:6f:15:30:10:53:a9:60:d3:72:4c:29:33:74:
85:0c:17:08:a1:a9:12:4a:5a:6a:27:b0:cb:eb:11:
6e:5d:0a:1c:52:ea:e1:74:ae:38:5b:5d:ce:6f:1c:
a1:34:d2:48:60:de:95:f2:ef:93:c3:dd:c3:1f:ec:
ae:fb:e6:86:8b:32:b3:97:34:87:fd:1b:78:44:e2:
42:5d:a7:8d:5c:28:78:77:23:c1:4f:d4:e1:29:67:
1c:cf:ae:79:a8:cd:dc:bc:25:4d:3c:73:1e:25:3e:
fc:bb:b1:af:09:b8:0e:06:ef:10:09:7d:64:ad:69:
57:c6:c7:ac:37:56:b2:e8:bd:c9:d6:8d:4b:4c:d7:
20:d6:b8:88:36:16:d2:15:88:bb:a0:2d:f5:9a:6d:
00:ce:64:4c:8f:27:6d:c2:a9:ca:ae:7b:ec:83:80:
84:27:48:d0:ea:d6:f9:1e:58:25:7f:9c:dd:b5:fd:
13:55:35:86:28:08:2c:57:3b:59:7b:fa:0e:c6:97:
9e:e3:6f:d6:f1:d8:90:2f:46:4c:f8:03:af:cf:b8:
43:a1:c3:08:40:a7:a6:21:74:c0:12:55:f1:12:ba:
64:c6:c3:95:da:b3:f9:99:73:5e:6c:3e:11:78:3b:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:41:7A:BA:43:0B:40:94:D5:0C:03:3E:5A:2E:C9:98:FE:5D:43:CB
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4f:14:28:29:51:40:98:01:51:05:5e:ea:67:e7:c5:d7:70:
f5:77:bc:38:a2:da:88:ad:f1:f0:ec:e6:1a:8c:74:64:2d:51:
84:8e:af:4a:ee:5e:d5:4f:b5:f9:d2:ad:81:e6:ef:19:99:e3:
0a:f8:7b:51:87:41:57:db:8f:73:ac:50:ce:bc:93:c6:1e:6c:
6a:5a:c9:5f:e6:8c:06:25:9f:38:e9:79:6c:eb:50:08:fc:ec:
47:92:6d:c9:8d:18:9d:49:45:6e:43:12:a2:4b:0b:69:4e:51:
4d:59:be:bf:d7:6e:d2:20:77:05:27:8b:b2:6e:bd:66:40:f8:
16:81:3a:f7:cf:65:1e:e8:24:1f:4e:a5:64:a5:3f:38:a1:3e:
89:0c:ce:15:d5:36:56:a5:f7:1e:42:04:d1:c4:aa:77:97:c6:
f9:a8:7b:3a:84:f0:13:ce:7d:9e:22:e1:79:1d:c6:b0:2f:99:
d3:b4:17:ca:84:97:bf:6c:47:41:7d:00:f6:d2:ac:11:02:92:
b5:43:c9:3b:ab:ba:79:73:00:fa:90:44:2e:e9:84:6b:00:fa:
3a:e9:8b:47:cb:de:84:2d:b2:70:5b:e0:ae:e6:e5:c1:46:e7:
7d:f9:be:ce:4e:39:70:9d:34:0a:66:93:fe:48:b0:5a:43:77:
99:c9:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:08 2026 by rpki-client