Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: FjkH6aYNVX9pDkuc6ZIZbtSd5eECjDxUO+6uUZk4X2g=
Subject key identifier: AA:01:6C:67:D4:95:B2:9B:A5:C9:D1:54:20:11:FE:10:DA:5C:78:4B
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 019E1E355BDC4AFE0EFF6E5CADF5F1477F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 22:01:13 +0000
Manifest this update: Tue 12 May 2026 22:01:13 +0000
Manifest next update: Wed 13 May 2026 22:01:13 +0000
Files and hashes: 1: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
2: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
3: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: yJfIj1RjIIs1nnHDESHViaw4UiF4jLYoSsWKiUbjEgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:5b:dc:4a:fe:0e:ff:6e:5c:ad:f5:f1:47:7f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: May 12 22:01:13 2026 GMT
Not After : May 13 22:01:13 2026 GMT
Subject: CN=aa016c67d495b29ba5c9d1542011fe10da5c784b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:4f:b9:97:19:97:e6:f2:e0:ca:ed:ec:30:
f6:66:e0:45:7f:4a:9a:3c:c7:bb:fa:cb:d6:c5:7e:
cf:d0:6e:c2:46:21:4b:d4:c8:a0:0b:f9:69:02:1e:
f3:60:d2:60:0f:0f:3a:3c:57:56:84:49:af:22:da:
d4:00:30:f9:5a:09:bb:51:2d:49:66:53:9c:a7:06:
55:9c:33:52:5e:33:9b:b2:d5:66:d0:67:99:50:a8:
b5:f1:87:f2:0a:2c:94:c4:0e:fb:0b:f9:e1:b7:33:
5b:ab:04:0f:be:21:da:80:77:34:80:7c:68:8e:3e:
d8:9f:bd:e4:74:11:25:97:be:17:14:c6:b4:a6:db:
b1:b2:57:19:7e:81:06:77:11:1d:6c:07:9e:d2:17:
af:68:99:e1:bb:46:ec:60:dd:bc:dc:1f:6e:c7:86:
11:54:4c:a6:64:cf:bc:7a:63:c2:4f:56:2f:f4:b2:
41:2a:82:26:70:92:43:e6:fa:8c:03:c2:67:f8:33:
30:ba:62:d0:7c:aa:c7:f5:90:46:97:59:a4:55:30:
d2:e6:2d:99:57:90:aa:46:90:5e:e7:30:06:84:4b:
e2:58:51:e0:85:a4:14:1d:5b:b0:c7:01:a3:eb:cf:
b6:93:f0:17:b4:72:fd:21:6c:a2:0d:ec:86:6d:0c:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:01:6C:67:D4:95:B2:9B:A5:C9:D1:54:20:11:FE:10:DA:5C:78:4B
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fa:d8:0e:64:d7:ff:eb:17:6a:17:6f:02:62:dd:5e:8b:e3:
4a:73:c9:b6:5d:73:a4:f4:f5:6d:fe:f9:17:4d:5d:e4:86:0e:
38:d0:33:94:fe:1d:82:42:9e:04:a3:88:de:93:19:d5:74:91:
fc:e1:c8:23:bb:ee:a6:45:12:fd:c6:2d:3e:95:04:bc:b9:38:
5b:b3:d5:e6:fd:43:ae:95:c9:a0:77:9c:04:10:59:15:65:d1:
2d:c5:f7:db:40:2e:de:60:d6:3c:47:04:8a:79:a4:e8:3c:3a:
73:c8:ea:4e:80:a9:2e:7e:18:28:72:3a:ed:7c:f9:9e:26:21:
a5:a3:2d:97:59:84:b9:dd:19:98:a3:2d:82:af:b2:38:38:1e:
a8:b3:b7:32:de:dc:7c:18:57:5d:e7:6e:d2:25:8f:a7:20:87:
ff:b9:b7:0c:49:9d:a1:2e:49:06:52:20:84:af:cc:1b:53:97:
5a:09:5e:75:22:cc:4b:6c:1c:35:fc:12:d2:52:90:f2:f7:c6:
4a:da:e4:ee:56:fa:f7:7e:7c:6c:c9:cc:34:0e:8d:27:18:5b:
e6:a2:b1:62:d4:bb:34:ad:5d:b5:49:04:ea:f6:6d:c7:91:c5:
fe:0a:8d:cf:70:44:ca:8b:32:c6:9d:f3:1a:bd:09:56:97:03:
25:cf:48:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:33 2026 by rpki-client