Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: Lo5+uU56Oma9yWeAnMfNnqF6NIV62Zlu54EMUvPK7B0=
Subject key identifier: 11:0F:67:B0:26:BC:D1:E6:F3:C5:D1:0E:0B:47:38:2F:0C:3F:97:08
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 019FA9074DFD05E47EAF7CD600C602F65160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 1615
Signing time: Tue 28 Jul 2026 14:00:55 +0000
Manifest this update: Tue 28 Jul 2026 14:00:55 +0000
Manifest next update: Wed 29 Jul 2026 14:00:55 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: iBGoaCuJfZZW7sXo7uDk7vm+L30lcjdLpQ1U8V7XwGQ=)
2: 7cYGhHG7YtiE08uGuW1-X_rHKII.roa (hash: hmnCIat4n3k5p2akfmzZ49cT/kokW1B90E1WUFaEO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:4d:fd:05:e4:7e:af:7c:d6:00:c6:02:f6:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Jul 28 14:00:55 2026 GMT
Not After : Jul 29 14:00:55 2026 GMT
Subject: CN=110f67b026bcd1e6f3c5d10e0b47382f0c3f9708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:8d:54:47:dc:41:42:86:0f:d8:30:cb:c6:
2a:70:95:12:43:bd:c0:7f:c9:fe:e8:c6:1a:2f:d7:
0c:36:72:0e:15:81:0b:ca:59:45:d2:e8:79:78:4a:
54:e4:34:0e:7a:bb:b0:c3:23:f5:4e:25:93:65:4b:
0d:64:6c:85:08:cc:db:81:f4:1f:c9:4c:61:ac:a6:
d5:9f:4d:76:e2:ac:89:99:bb:35:9c:a8:3b:73:87:
65:5d:7d:6d:0c:b3:00:f5:6f:bc:8f:52:69:eb:57:
ca:c9:82:f5:f0:06:92:7f:fe:20:0b:a8:69:e9:98:
26:e4:3e:47:a3:a3:6e:e1:a3:be:fb:fb:63:42:9f:
4d:06:f5:6a:b0:ce:27:ca:98:a7:59:c2:bf:fc:c7:
28:61:bc:3d:f2:a3:13:46:1f:4f:cc:5f:fb:bc:e5:
7a:23:24:94:a8:50:6d:9a:f8:1d:af:8c:21:c3:5f:
92:6e:2a:3a:b0:43:0f:4f:74:76:03:10:f2:15:09:
31:5c:d6:81:d3:27:8e:05:24:fb:3f:e0:d5:60:18:
d7:63:9b:f4:1c:8d:fc:56:40:e7:e4:9e:d6:fc:21:
11:1c:eb:18:1a:1d:e8:7e:43:85:e4:0a:ea:a3:33:
44:16:ca:bd:e2:11:98:0d:74:3b:a7:ca:89:9e:fd:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0F:67:B0:26:BC:D1:E6:F3:C5:D1:0E:0B:47:38:2F:0C:3F:97:08
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e7:32:39:70:07:80:cb:5b:73:cd:a3:fb:dc:b4:77:27:12:
a0:f2:3c:65:0b:db:82:c3:7c:2d:d4:d1:48:44:93:a6:48:eb:
fc:4b:fe:96:d6:65:2b:9e:34:4c:ec:78:53:25:c9:a4:d3:f8:
c7:37:28:dc:2e:f0:7d:94:d5:48:d1:19:b8:2d:bf:aa:5e:4d:
c5:04:01:3c:4e:89:db:de:d7:b5:5f:5f:18:a0:b6:e4:7b:7b:
24:3b:ef:2c:e6:64:91:de:34:98:ff:f9:c0:12:2d:c2:de:a6:
10:57:df:17:01:99:51:88:d4:50:f8:91:78:67:8a:a8:9f:cc:
c7:52:b2:c7:13:ca:f3:ea:27:fa:af:c0:fc:03:95:3c:4c:c1:
bb:48:29:81:bb:e8:3c:26:1e:e2:0e:06:79:db:cd:44:ca:b9:
0d:97:91:55:42:3c:46:22:42:d8:ac:b3:39:94:8a:17:76:6c:
c2:0a:70:d2:54:73:03:2c:b8:f7:2a:53:f0:9a:e0:b0:6b:5b:
57:a3:8e:64:5e:1a:dd:b1:ca:8c:82:8e:0c:9f:ba:bf:c2:12:
51:ce:29:72:51:87:2e:bc:75:89:d1:d9:f4:ac:a4:fb:b4:4d:
9a:e7:6b:eb:a2:8f:ee:5f:61:05:2b:07:a7:7f:79:4d:c0:4d:
59:e8:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:40 2026 by rpki-client