Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: i+bDA7mJanUgRZ8vAftTd5z3hpiubme5jPFdrgYin2k=
Subject key identifier: B8:86:74:58:28:72:3F:1C:06:D4:8E:93:04:86:5C:89:0D:86:7B:24
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 019F902347C2D4C09B488727C0E1F73B2A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 18:00:58 +0000
Manifest this update: Thu 23 Jul 2026 18:00:58 +0000
Manifest next update: Fri 24 Jul 2026 18:00:58 +0000
Files and hashes: 1: APlmnKHZODCNSunvzWMmlebxZbo.roa (hash: QAoewBI2F8XDmieB1npAXSt/XAawfhTLWLPzLSSKEr8=)
2: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
3: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
4: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
5: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: BVVjgshKaqA6IO/1fldIvitE5fn+grs6Htvj7eb8PNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:47:c2:d4:c0:9b:48:87:27:c0:e1:f7:3b:2a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Jul 23 18:00:58 2026 GMT
Not After : Jul 24 18:00:58 2026 GMT
Subject: CN=b886745828723f1c06d48e9304865c890d867b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:af:0a:3b:a1:a6:b1:07:2e:df:a8:eb:dd:
7e:ce:ef:85:d0:ac:55:4f:be:70:71:a0:7d:48:c6:
cf:d7:95:7a:01:a2:8a:7a:1f:14:23:33:42:0e:8f:
07:6a:54:d4:37:77:66:f2:9b:55:2c:8c:61:ad:fa:
5d:e1:bc:66:5f:e3:83:6b:ac:68:96:58:c1:a8:db:
8a:55:61:62:25:cc:ec:a9:92:f3:a3:95:96:0d:7f:
07:fb:bf:d9:30:f1:98:92:40:24:22:8d:e0:19:58:
0d:8e:4a:52:0c:72:91:39:59:e2:5b:32:9e:c1:88:
66:b6:2c:ae:1e:88:e6:23:a3:54:8e:ad:aa:eb:24:
52:45:93:78:cf:ad:ff:b3:88:44:c4:07:21:b3:ed:
e3:62:4a:da:9c:ba:94:51:8e:26:48:0e:be:fa:99:
07:a9:98:20:77:02:54:cc:86:88:36:44:e3:c5:fc:
bb:f8:e8:cc:18:e7:8e:78:40:79:6d:1c:b5:0d:53:
f4:60:a7:9d:1e:64:aa:a3:c4:71:0a:22:8d:28:54:
b1:40:ec:87:9f:4a:fe:7b:c5:24:f9:e0:e7:39:a2:
61:75:07:72:60:54:52:9c:61:e1:c9:2c:33:36:fe:
f9:75:f1:25:9a:4f:99:c3:7a:29:4b:44:2b:16:81:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:74:58:28:72:3F:1C:06:D4:8E:93:04:86:5C:89:0D:86:7B:24
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:17:c7:0c:b3:6d:6b:d1:d6:b2:7c:5f:d4:c3:42:27:26:cd:
7c:d1:b8:cb:a3:68:23:8a:28:bd:61:0d:ea:90:03:bb:14:70:
1f:38:36:b6:4d:37:65:fb:a4:ff:eb:10:ed:98:00:c4:1c:89:
89:de:96:43:44:d6:05:6b:d9:17:ad:6a:4d:a6:d7:a4:a3:c9:
0f:9d:a5:8a:15:b7:e4:fc:53:1e:77:77:45:69:79:bd:35:70:
a4:e5:24:39:81:62:75:64:a8:42:d2:31:ac:f5:15:ac:2f:d5:
93:00:54:ab:04:ce:bf:d6:9c:b6:2f:c8:6f:d3:14:7b:fc:f5:
65:72:7f:0a:c6:4d:b8:a6:f6:1a:1e:d0:1e:7f:98:80:39:24:
98:87:00:d2:4d:5a:9f:22:ce:b6:9f:4c:ac:d9:f3:1e:b4:1b:
44:3f:fc:ed:46:c7:cf:a8:72:13:41:dc:fa:38:00:02:8e:a6:
e8:ff:16:ec:54:b9:64:4e:e5:8c:83:a6:64:d6:31:50:78:17:
d0:6b:c4:4b:e1:ec:8e:ee:bf:b0:f2:21:55:62:a4:2f:28:d7:
fc:c4:fb:47:c9:ab:73:30:cd:a2:6b:43:ba:b8:45:71:87:51:
d0:7b:33:9c:d2:74:2e:53:f4:ca:a2:78:5c:ab:1c:f8:ec:db:
f6:fc:bf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:04 2026 by rpki-client