Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File: 1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier: etMn6D70bKyv/9yNGNN1t67LKxk9/dZSaPavyGBC9UQ=
Subject key identifier: 54:9D:76:95:7E:23:CD:C3:68:E3:33:14:85:4A:0D:49:49:C1:E9:9A
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer: /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial: 01A1CB8DC5C199C208E958F6C0048D692E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number: 10ED
Signing time: Wed 11 Nov 2026 17:00:28 +0000
Manifest this update: Wed 11 Nov 2026 17:00:28 +0000
Manifest next update: Thu 12 Nov 2026 17:00:28 +0000
Files and hashes: 1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: bPWOQ8gGa6oAm2AgCkPyaUx0REHecPrELz4ig4woKBM=)
2: TbY4MLo9QmUSVk5hp07D_lX76Hc.roa (hash: GGTbtNI+aaL18L5FZQerRlg9rpMiVGf3/pLxdG5oxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:8d:c5:c1:99:c2:08:e9:58:f6:c0:04:8d:69:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Validity
Not Before: Nov 11 17:00:28 2026 GMT
Not After : Nov 12 17:00:28 2026 GMT
Subject: CN=549d76957e23cdc368e33314854a0d4949c1e99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:79:0e:2d:53:5e:81:e2:56:74:1c:95:78:
4d:a6:bf:76:77:f4:67:09:d3:48:4b:c2:90:5d:72:
29:b5:be:a3:53:b2:a3:99:b1:cc:b1:ec:e1:06:cb:
7e:09:19:a1:6b:79:ad:99:c5:d3:3d:72:cc:69:c4:
09:1f:b2:c5:68:fc:72:8d:26:57:af:01:25:9d:2e:
79:ef:9d:06:09:38:e6:2d:6c:dc:d2:b4:14:20:ad:
d9:5a:81:8c:ef:0b:da:ea:4a:4d:5e:f4:44:a5:8e:
29:36:98:1a:74:94:a4:33:4e:70:ab:95:1a:fd:f1:
f6:83:58:18:bb:e6:9a:07:10:71:a6:2c:88:b3:2b:
5b:9e:3d:93:77:18:b3:af:cd:32:74:03:47:54:d6:
35:cd:22:2e:81:61:7b:7f:93:a6:fc:4a:f9:4d:65:
27:95:83:1f:8c:66:f3:19:cb:3b:0f:9f:52:67:f5:
23:5b:d2:34:95:34:76:96:32:72:f9:66:31:ec:0e:
37:e3:eb:9b:18:d2:f4:14:3f:37:86:cf:49:c9:cf:
2e:fd:06:91:99:2f:fa:fe:b3:30:7a:09:38:77:78:
f4:33:7c:86:b9:2b:82:26:cb:37:42:23:5d:40:dc:
84:f8:e9:91:bc:81:2a:67:e0:ca:8b:67:db:e1:23:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9D:76:95:7E:23:CD:C3:68:E3:33:14:85:4A:0D:49:49:C1:E9:9A
X509v3 Authority Key Identifier:
keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:09:4f:ad:a4:36:25:3b:da:36:9c:01:90:8d:f5:bf:63:76:
16:cc:a1:b2:db:fb:26:65:06:f5:8a:50:9d:60:b6:88:3b:49:
0f:c8:3e:00:43:f8:9b:d9:db:a3:0d:13:01:28:c8:ed:b5:ce:
64:ef:42:cd:a5:4f:a5:fe:ec:d6:48:ba:f4:77:63:c5:78:da:
f6:da:37:85:91:6a:35:9c:ea:c4:7c:c1:e1:61:8c:5c:2c:68:
75:d0:7d:b6:3e:5e:8a:eb:15:9c:b3:7f:44:76:de:f9:73:1c:
50:f2:ec:86:bd:bc:c5:a3:c2:52:b6:a3:91:54:f3:7f:d8:14:
2b:cf:64:e3:af:5e:b7:60:f8:df:29:38:07:b8:94:04:ed:d1:
33:93:88:47:85:fd:bc:8c:45:9a:48:ae:9f:5b:65:12:cd:4f:
5b:27:e2:47:fc:63:b2:50:a4:e0:28:c5:13:58:9c:00:61:c7:
fb:76:ce:a8:69:5e:92:84:65:45:ef:ba:6a:ac:50:54:15:37:
5f:a0:8b:d4:4c:8b:b9:42:b5:b1:cd:28:94:b1:b8:d3:b4:25:
ba:23:b3:7f:57:94:20:8f:66:cc:f5:90:34:3d:8e:d5:f7:2f:
6b:76:7d:48:a1:44:aa:c6:6c:fc:4a:1c:1a:72:a7:9a:65:d8:
be:5b:97:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHLjcXBmcII6Vj2wASNaS4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OGI2Y2ZiNzIwYTdjOTJhMTgwY2E2MTRiZGIwZWRhMWYx
ZWJlOWQwHhcNMjYxMTExMTcwMDI4WhcNMjYxMTEyMTcwMDI4WjAzMTEwLwYDVQQD
Eyg1NDlkNzY5NTdlMjNjZGMzNjhlMzMzMTQ4NTRhMGQ0OTQ5YzFlOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LV5Di1TXoHiVnQclXhNpr92d/Rn
CdNIS8KQXXIptb6jU7KjmbHMsezhBst+CRmha3mtmcXTPXLMacQJH7LFaPxyjSZX
rwElnS55750GCTjmLWzc0rQUIK3ZWoGM7wva6kpNXvREpY4pNpgadJSkM05wq5Ua
/fH2g1gYu+aaBxBxpiyIsytbnj2Tdxizr80ydANHVNY1zSIugWF7f5Om/Er5TWUn
lYMfjGbzGcs7D59SZ/UjW9I0lTR2ljJy+WYx7A434+ubGNL0FD83hs9Jyc8u/QaR
mS/6/rMwegk4d3j0M3yGuSuCJss3QiNdQNyE+OmRvIEqZ+DKi2fb4SNzfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSddpV+I83DaOMzFIVKDUlJwemaMB8GA1UdIwQY
MBaAFNaLbPtyCnySoYDKYUvbDtofHr6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNTk0NWQtNDkxNS00YmQ3LTkxYzEt
MzNlMzE5YTQ1NGVmLzEvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNTk0NWQtNDkxNS00YmQ3LTkxYzEtMzNlMzE5YTQ1NGVm
LzEvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOglPraQ2
JTvaNpwBkI31v2N2Fsyhstv7JmUG9YpQnWC2iDtJD8g+AEP4m9nbow0TASjI7bXO
ZO9CzaVPpf7s1ki69HdjxXja9to3hZFqNZzqxHzB4WGMXCxoddB9tj5eiusVnLN/
RHbe+XMcUPLshr28xaPCUrajkVTzf9gUK89k469et2D43yk4B7iUBO3RM5OIR4X9
vIxFmkiun1tlEs1PWyfiR/xjslCk4CjFE1icAGHH+3bOqGlekoRlRe+6aqxQVBU3
X6CL1EyLuUK1sc0olLG407QluiOzf1eUII9mzPWQND2O1fcva3Z9SKFEqsZs/Eoc
GnKnmmXYvluXVw==
-----END CERTIFICATE-----
Generated at Wed Nov 11 23:01:32 2026 by rpki-client