Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: xGbsXIKJZ0jusE0juFBMKcc6KkS4W/97WLHw4aaMyZA=
Subject key identifier: AB:DA:37:CB:E8:E9:09:88:10:6A:8F:2A:FA:32:A4:39:A6:76:57:61
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019D2B4EBE580A73374062764691ABAB7F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 18:01:13 +0000
Manifest this update: Thu 26 Mar 2026 18:01:13 +0000
Manifest next update: Fri 27 Mar 2026 18:01:13 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: An/TvekL5i5HHBj+wMO7dyIZUP/SOmWjMiETRp/1Ue4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:be:58:0a:73:37:40:62:76:46:91:ab:ab:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Mar 26 18:01:13 2026 GMT
Not After : Mar 27 18:01:13 2026 GMT
Subject: CN=abda37cbe8e90988106a8f2afa32a439a6765761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:36:24:38:f8:a7:af:64:07:5b:81:c6:51:
3f:36:28:13:4b:46:ba:5a:51:c3:2d:65:95:73:d4:
91:c7:5f:c0:84:57:2e:cb:1e:70:e6:af:34:6a:fe:
d6:49:1a:98:a6:dd:f4:e9:98:47:dd:eb:e7:8f:5c:
98:09:65:bb:34:a9:2e:53:6f:05:6e:66:75:00:5d:
10:a3:42:75:6d:c4:7d:2e:d2:8c:5e:d3:41:64:f4:
43:9c:b7:64:78:b3:ad:ed:08:bf:5d:3d:f2:8b:aa:
32:40:bf:db:27:87:a5:96:9a:69:7e:70:fd:2e:59:
43:30:e9:c8:aa:1c:c7:e0:c8:8f:13:b8:ef:99:db:
4c:15:54:13:f6:36:3f:62:e0:a5:47:bb:2d:9e:1a:
79:db:4f:49:7a:8c:0b:6c:1f:41:e3:70:e2:cc:18:
32:ec:e4:0b:5d:dc:a9:d3:68:d8:33:e3:79:2e:3f:
30:4e:59:64:b4:91:f3:85:37:a2:d8:c7:21:e6:28:
a8:b1:5b:fb:d3:fa:18:29:a1:fe:c0:36:d6:6d:3f:
13:ad:9d:02:69:4d:ab:60:ce:96:ea:fa:d5:9d:e2:
2e:47:ed:4a:0b:00:09:c8:f8:7e:a6:cd:79:cc:3e:
a4:f3:f0:8e:75:e9:39:04:15:30:b6:d0:4b:b3:12:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DA:37:CB:E8:E9:09:88:10:6A:8F:2A:FA:32:A4:39:A6:76:57:61
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:12:29:f6:2f:03:39:00:c2:67:0f:7c:23:fc:1e:e5:ee:cf:
40:16:e2:0a:0d:ec:98:0c:07:c6:26:b2:a5:94:53:f7:bf:5e:
f8:bc:90:34:0a:27:24:4f:fd:80:60:c3:b7:4d:47:a2:23:55:
1d:61:70:e8:81:8f:69:6f:50:4f:45:c1:59:dc:0a:23:b4:ea:
e4:e0:21:6f:c0:19:84:7c:b8:da:fa:78:be:8f:d2:dd:ca:7c:
9d:50:76:3e:83:39:39:7a:57:9a:24:62:cb:8a:b0:7e:d6:bf:
75:74:61:a2:11:4d:01:13:0f:50:99:b7:7f:07:09:36:ae:c2:
35:1a:35:88:c9:e0:35:c9:6d:8e:f1:51:47:be:a0:2d:7e:de:
b4:71:6d:54:b4:12:7e:d2:19:62:24:1b:63:84:e5:2c:1b:46:
93:b8:21:6f:0b:1d:62:60:89:88:2d:6f:bc:6f:77:a6:90:57:
ff:d3:3b:e3:05:95:14:16:49:61:51:94:44:65:8c:d4:68:ed:
af:1f:46:b8:70:d8:02:d8:cd:08:44:3d:b0:5d:e4:08:94:ba:
e6:75:71:33:c3:ee:a3:19:d4:da:78:6d:19:59:b5:7b:d7:18:
75:80:77:9f:92:54:e6:8d:97:f3:8f:53:eb:94:b8:cd:09:be:
ef:e2:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:38 2026 by rpki-client