Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File: 1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier: AS5joa8Eus2+EA9CuDWza9FTHHNuOJzrjlCT+1rX8bc=
Subject key identifier: 38:80:39:76:1C:82:E5:5D:E0:8A:81:E4:D9:6C:AC:68:DF:9E:9E:D7
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer: /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial: 01A0C8C63A45EC9857D1B4322B0FC96EAA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number: 1067
Signing time: Tue 22 Sep 2026 11:00:29 +0000
Manifest this update: Tue 22 Sep 2026 11:00:29 +0000
Manifest next update: Wed 23 Sep 2026 11:00:29 +0000
Files and hashes: 1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: Np0P7v1uDtn4Rz9mmo6tNIenp6+oLyeDh6gCr3Oz/0w=)
2: TbY4MLo9QmUSVk5hp07D_lX76Hc.roa (hash: GGTbtNI+aaL18L5FZQerRlg9rpMiVGf3/pLxdG5oxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:3a:45:ec:98:57:d1:b4:32:2b:0f:c9:6e:aa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Validity
Not Before: Sep 22 11:00:29 2026 GMT
Not After : Sep 23 11:00:29 2026 GMT
Subject: CN=388039761c82e55de08a81e4d96cac68df9e9ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:f2:f3:97:c0:bc:a8:bf:09:da:a1:25:b1:
ec:b3:d2:a5:3b:ba:2c:b2:46:55:6e:3c:0c:11:38:
0e:82:b6:b6:35:a9:68:23:31:84:34:03:2c:79:28:
f4:84:19:99:6a:c4:1b:c5:bb:9c:e9:7c:db:c3:47:
3a:cd:da:47:c8:9b:38:6d:c2:9a:1c:99:a5:a2:eb:
6f:9b:66:9c:ad:b1:77:70:24:0c:46:a1:5e:94:20:
6d:b9:1e:72:fd:b8:50:7f:29:2a:3b:d4:ff:0c:77:
d8:c2:70:70:ab:df:27:51:d5:9f:74:47:90:70:9d:
1e:d8:3b:0d:a1:85:9a:bb:28:59:6d:f8:a7:a5:9f:
f3:fc:0b:e5:50:1e:7c:81:f9:bb:d4:83:23:f2:db:
dc:36:18:a2:9c:d6:b0:ad:a2:06:75:83:a6:20:d8:
9e:65:87:05:95:a3:37:2f:60:bf:5e:d6:16:51:2e:
6c:44:f1:38:87:81:a1:8d:07:70:c2:0b:01:d1:c4:
63:9b:8e:81:9e:c7:c1:36:92:b1:e3:63:24:a2:10:
7f:28:4c:3b:bb:bf:74:ff:5f:eb:03:d1:95:2e:46:
87:12:cf:a0:d9:42:52:ff:06:26:89:4a:00:df:95:
5c:10:cc:cb:9e:43:db:ea:a9:03:8d:77:22:3a:e7:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:39:76:1C:82:E5:5D:E0:8A:81:E4:D9:6C:AC:68:DF:9E:9E:D7
X509v3 Authority Key Identifier:
keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:34:ea:3b:ec:d5:c4:b0:99:e7:2a:12:a6:16:93:d3:cf:3e:
4c:6a:cf:77:6b:1f:85:2a:51:ba:1e:b8:20:15:60:49:ad:bc:
71:84:fb:98:6d:57:58:4d:a4:f0:1d:a3:03:a7:98:aa:35:8f:
cf:9a:8b:77:af:6d:64:cd:18:73:b6:58:32:b6:a5:6b:46:82:
37:23:13:0d:05:62:dc:9d:06:38:65:e6:aa:96:f2:f6:94:96:
9c:10:c1:59:40:8e:c6:2a:7d:4a:cc:8a:de:e2:dc:d4:7c:05:
87:d1:89:b9:fe:60:3a:44:47:33:b1:67:af:f2:53:3d:1b:fa:
27:7a:95:5b:0f:fe:11:69:0a:3c:67:c5:cc:c5:92:99:14:94:
62:82:83:11:75:ac:5a:c7:d3:6f:9c:99:66:92:1c:2b:fa:f7:
80:96:a8:30:12:c7:40:40:a0:d8:90:8f:54:a1:97:47:b8:03:
cc:05:a3:51:c5:af:02:cf:0a:4a:db:b4:8c:80:a1:87:79:6f:
33:55:f8:c9:c9:45:d1:99:0b:64:68:a9:95:62:7f:22:cf:bf:
eb:97:51:66:13:21:11:cd:44:fa:b7:42:5c:b8:02:0a:f5:d4:
3c:09:fc:57:41:13:3c:9f:18:83:7d:97:d5:38:95:49:b9:96:
31:5a:67:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxjpF7JhX0bQyKw/Jbqp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OGI2Y2ZiNzIwYTdjOTJhMTgwY2E2MTRiZGIwZWRhMWYx
ZWJlOWQwHhcNMjYwOTIyMTEwMDI5WhcNMjYwOTIzMTEwMDI5WjAzMTEwLwYDVQQD
EygzODgwMzk3NjFjODJlNTVkZTA4YTgxZTRkOTZjYWM2OGRmOWU5ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv/y85fAvKi/CdqhJbHss9KlO7os
skZVbjwMETgOgra2NaloIzGENAMseSj0hBmZasQbxbuc6Xzbw0c6zdpHyJs4bcKa
HJmloutvm2acrbF3cCQMRqFelCBtuR5y/bhQfykqO9T/DHfYwnBwq98nUdWfdEeQ
cJ0e2DsNoYWauyhZbfinpZ/z/AvlUB58gfm71IMj8tvcNhiinNawraIGdYOmINie
ZYcFlaM3L2C/XtYWUS5sRPE4h4GhjQdwwgsB0cRjm46BnsfBNpKx42MkohB/KEw7
u790/1/rA9GVLkaHEs+g2UJS/wYmiUoA35VcEMzLnkPb6qkDjXciOueRRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiAOXYcguVd4IqB5NlsrGjfnp7XMB8GA1UdIwQY
MBaAFNaLbPtyCnySoYDKYUvbDtofHr6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNTk0NWQtNDkxNS00YmQ3LTkxYzEt
MzNlMzE5YTQ1NGVmLzEvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNTk0NWQtNDkxNS00YmQ3LTkxYzEtMzNlMzE5YTQ1NGVm
LzEvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDTqO+zV
xLCZ5yoSphaT088+TGrPd2sfhSpRuh64IBVgSa28cYT7mG1XWE2k8B2jA6eYqjWP
z5qLd69tZM0Yc7ZYMrala0aCNyMTDQVi3J0GOGXmqpby9pSWnBDBWUCOxip9SsyK
3uLc1HwFh9GJuf5gOkRHM7Fnr/JTPRv6J3qVWw/+EWkKPGfFzMWSmRSUYoKDEXWs
WsfTb5yZZpIcK/r3gJaoMBLHQECg2JCPVKGXR7gDzAWjUcWvAs8KStu0jIChh3lv
M1X4yclF0ZkLZGiplWJ/Is+/65dRZhMhEc1E+rdCXLgCCvXUPAn8V0ETPJ8Yg32X
1TiVSbmWMVpnVQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:09:05 2026 by rpki-client