Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File: 1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier: m8MhdQ5XPZjRyxiS1XlqD+MQ5dpI6HhdLR1YA8OANMI=
Subject key identifier: 73:D6:1A:3E:F2:EF:7A:1D:8C:FE:70:74:B3:B9:31:24:D9:85:D6:0E
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer: /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial: 019D27DFF4FD2927BBC34B182FC7666D8783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number: 0E86
Signing time: Thu 26 Mar 2026 02:01:21 +0000
Manifest this update: Thu 26 Mar 2026 02:01:21 +0000
Manifest next update: Fri 27 Mar 2026 02:01:21 +0000
Files and hashes: 1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: Xmz0eLzbUJ0QnqFkZHQanEFeZEEtZgfwkoBRYol2ixk=)
2: TbY4MLo9QmUSVk5hp07D_lX76Hc.roa (hash: GGTbtNI+aaL18L5FZQerRlg9rpMiVGf3/pLxdG5oxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f4:fd:29:27:bb:c3:4b:18:2f:c7:66:6d:87:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Validity
Not Before: Mar 26 02:01:21 2026 GMT
Not After : Mar 27 02:01:21 2026 GMT
Subject: CN=73d61a3ef2ef7a1d8cfe7074b3b93124d985d60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:bf:41:26:a2:de:27:24:81:8c:ff:d4:c2:
04:05:4d:93:e4:21:24:79:65:ce:de:91:fb:24:e8:
48:9c:64:d4:14:1c:77:53:64:81:d7:fb:15:5d:80:
68:56:b2:01:bf:05:e7:22:70:25:96:1b:20:94:6a:
7d:40:17:44:c1:fc:a8:80:f8:19:96:ef:14:95:10:
68:72:52:1e:08:23:e8:de:40:53:1d:a7:3f:f5:d5:
9a:40:e1:1e:0e:37:25:c8:71:06:55:85:32:a6:8a:
92:38:4c:70:98:89:32:20:7c:04:69:26:39:18:9f:
d7:83:61:c9:b8:73:fd:1e:31:23:47:6c:7a:f1:ae:
1b:d9:7b:c7:48:c7:d7:0f:15:6a:df:b0:49:7d:dc:
50:cf:bd:36:5e:c1:59:21:15:d8:a2:c5:ea:5a:cc:
75:93:c5:ae:6d:3c:e5:1a:9c:36:2e:b6:db:63:31:
69:8e:e6:52:62:32:55:bd:0c:84:79:67:81:54:7e:
5a:50:e3:6f:bf:6f:b6:45:86:6d:e3:c1:59:38:18:
90:52:ae:e3:de:6e:0f:bf:49:29:3c:40:2c:91:1f:
94:df:4c:84:e2:fb:fa:78:cd:e1:fb:61:cb:74:a3:
c2:db:4b:89:88:3c:66:88:be:92:5f:0f:23:05:97:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D6:1A:3E:F2:EF:7A:1D:8C:FE:70:74:B3:B9:31:24:D9:85:D6:0E
X509v3 Authority Key Identifier:
keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:ad:9f:15:3c:08:a3:86:70:46:e9:80:94:0b:e3:2e:87:
34:76:25:2f:44:d6:b7:2e:8a:cc:d2:f1:af:fe:a4:5e:25:5c:
96:8e:43:33:2b:37:b5:7e:d8:b1:05:40:25:c1:c3:dd:06:10:
9c:2a:4e:05:c1:db:4b:fb:4d:19:d6:f3:b8:22:08:52:1b:57:
4c:cf:51:9b:7a:0f:60:58:f2:c7:a7:7b:58:12:54:a5:19:87:
92:8e:27:26:69:7b:23:f7:ad:3e:03:fb:1b:1b:c7:ce:09:95:
24:00:44:ac:65:d3:ab:73:66:12:39:7b:65:29:79:3c:99:93:
76:2a:2b:ef:45:ff:15:9d:5b:00:3d:6b:58:b2:eb:dd:d8:12:
0d:c5:7f:9d:12:fa:3a:a9:b8:59:7b:9d:0d:c3:62:7c:cc:a3:
ef:40:66:1f:a4:10:e8:c7:46:5e:b2:c2:50:fc:51:12:c5:68:
78:a7:1a:89:fe:cc:f2:18:bf:4e:87:94:dd:8c:3a:96:0f:2f:
f3:96:e1:1d:03:0a:a8:40:c5:18:e8:c1:fa:e9:bd:e1:3c:4b:
63:1c:c6:06:62:78:1c:f2:35:89:d9:a5:15:db:91:a2:6e:61:
f9:31:db:d2:a0:50:92:3b:ee:9b:f0:7c:34:a7:42:b0:74:65:
72:40:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:50:11 2026 by rpki-client