Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File: 1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier: xSZ2Stbh3vVAv9lafgPx5+m7YjHSj0cA3uWnsJE39IY=
Subject key identifier: FB:06:B8:83:83:6D:48:8E:3F:70:9E:7A:D9:CE:8C:49:C9:56:6A:71
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer: /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial: 019E1D222C47AA1B64E6BDC23331CA0B2830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number: 0F05
Signing time: Tue 12 May 2026 17:00:39 +0000
Manifest this update: Tue 12 May 2026 17:00:39 +0000
Manifest next update: Wed 13 May 2026 17:00:39 +0000
Files and hashes: 1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: j6wgzZrlA52e5M75zmMBRAhRnd5IU7jvhNUAe8MCKOo=)
2: TbY4MLo9QmUSVk5hp07D_lX76Hc.roa (hash: GGTbtNI+aaL18L5FZQerRlg9rpMiVGf3/pLxdG5oxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:2c:47:aa:1b:64:e6:bd:c2:33:31:ca:0b:28:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Validity
Not Before: May 12 17:00:39 2026 GMT
Not After : May 13 17:00:39 2026 GMT
Subject: CN=fb06b883836d488e3f709e7ad9ce8c49c9566a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:3f:57:d9:f5:96:4c:33:1d:42:57:20:da:
4c:5d:b7:15:c7:c8:9a:93:79:17:90:9a:d4:6d:7f:
ec:46:64:01:b2:6b:7a:e5:22:fd:97:06:97:99:9c:
49:9a:2a:1a:94:61:f7:ec:e3:65:82:3e:26:cd:2c:
1f:ac:cc:42:9b:46:9d:45:3e:ae:9d:88:a0:ad:5d:
98:61:fd:6e:8b:7d:c4:69:ef:99:bf:50:7f:48:f9:
21:80:13:f1:d5:57:7f:11:51:61:02:d0:f8:ed:02:
fa:d5:09:71:c6:76:91:0b:b1:9b:be:37:6e:3a:50:
11:20:d2:36:21:61:69:d7:ae:b1:fe:d0:ed:77:b9:
9b:5c:6a:a0:05:e5:b3:8f:25:c9:0b:9c:12:0b:7b:
16:a3:a1:56:8e:50:af:43:03:8d:07:1f:07:a1:27:
8c:9f:48:fb:d2:d7:e9:cf:31:fb:33:61:22:c8:a0:
85:25:04:7a:41:37:f7:44:a6:3a:b5:a0:30:75:55:
b0:8d:a9:14:cc:ed:1e:b4:47:92:6c:75:2c:d8:21:
0a:f8:aa:83:c8:0d:a1:a0:11:b3:9f:f4:63:e9:a0:
a7:3b:d5:19:c0:fb:f9:7f:28:9f:88:dd:1e:c2:72:
1d:1f:ed:84:42:b9:72:01:49:42:38:2b:e3:df:6f:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:06:B8:83:83:6D:48:8E:3F:70:9E:7A:D9:CE:8C:49:C9:56:6A:71
X509v3 Authority Key Identifier:
keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:51:f0:3d:cd:3b:8a:00:23:d1:5a:67:07:1d:e7:53:42:86:
5d:90:73:5a:4c:05:2f:93:59:df:f3:13:2e:47:14:67:cb:f5:
21:f4:0a:ad:7d:43:4d:fb:d0:e3:63:af:0c:99:ec:45:66:aa:
9d:7f:27:b9:7b:ce:cd:ae:e9:1a:d9:ce:ae:49:51:62:75:92:
59:70:13:b9:e2:77:1d:9f:9d:d5:d5:83:81:9d:d0:92:aa:7f:
23:1b:ac:9c:16:bb:3e:8d:30:ef:b7:3d:e8:96:d4:cd:e8:cd:
85:ec:c0:03:4e:d6:00:db:5b:9d:9b:9c:80:67:83:8c:ac:27:
86:ae:37:d1:7b:a6:23:eb:4a:45:ea:bd:6f:29:38:58:d9:dd:
f0:5b:27:9b:df:3f:fe:5c:24:6e:36:0b:90:37:db:fd:2a:8a:
4a:04:ff:af:70:74:02:ba:6b:51:f6:dc:a8:11:aa:80:69:7f:
c3:ea:5d:97:25:22:f0:67:cb:47:c6:a5:51:15:bd:f5:35:b8:
1f:d5:62:66:92:73:52:7e:49:20:45:de:9f:9e:6c:c9:66:fe:
61:ba:34:e5:71:8b:80:39:22:4d:57:8a:01:e3:06:a0:8e:df:
37:37:be:e3:96:e5:03:06:a7:a9:71:04:27:3a:ab:13:3d:a5:
79:6a:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:25 2026 by rpki-client