Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: NiREd56xdkz+ur5aE4bcUFQzpiz+w6qm6fWPPKHWrZM=
Subject key identifier: 40:45:E4:55:48:D2:6B:8F:3F:30:71:6D:4C:C3:E3:94:87:A0:89:60
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019F935AA98637F7EAF516C0F8CC6909A341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 09:00:20 +0000
Manifest this update: Fri 24 Jul 2026 09:00:20 +0000
Manifest next update: Sat 25 Jul 2026 09:00:20 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: PutGizTwfrUf3phgHaz3TBuI4DwCutMxWNQeoDUGlxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:a9:86:37:f7:ea:f5:16:c0:f8:cc:69:09:a3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jul 24 09:00:20 2026 GMT
Not After : Jul 25 09:00:20 2026 GMT
Subject: CN=4045e45548d26b8f3f30716d4cc3e39487a08960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:b8:5d:5d:f2:bf:c6:e9:72:82:27:43:8a:
74:7b:0d:6e:14:6c:ea:ba:b5:e0:44:01:9a:77:ef:
f6:d0:e3:2f:31:3c:e9:8c:92:5b:0c:f4:c1:8c:64:
23:bd:0a:85:ee:d5:f1:74:76:ea:ef:8d:6e:c3:22:
ad:47:a2:f4:fb:7d:89:80:f5:3f:a6:cc:e1:74:f1:
5c:d4:5e:2c:83:7b:fb:9f:b7:a8:bc:4c:9f:c2:37:
b7:fe:ec:58:46:e0:3f:29:82:44:98:72:06:83:ac:
e8:14:79:51:35:20:f3:9e:40:8c:e8:ab:43:4e:18:
67:4e:db:7b:1c:1f:dc:bb:d5:aa:5d:b3:9a:26:66:
b1:0f:e1:b3:31:28:4c:2b:f6:19:49:62:36:51:21:
77:8d:6c:e7:a5:f9:9d:5a:bd:34:93:8a:93:93:d6:
87:f9:b2:bb:ea:5e:bd:30:87:01:05:2f:80:27:fe:
b8:15:7e:60:ba:78:39:06:01:b4:c7:ad:2d:00:2a:
a6:ab:e5:79:35:7a:a8:9d:94:60:db:01:dd:79:40:
83:1b:55:bd:81:fe:e2:fa:b9:0b:ca:c0:18:da:1e:
f8:d6:6d:e5:5f:ab:30:d5:37:cd:d0:3c:3c:5e:c0:
ed:d7:56:69:da:19:2a:2c:93:6e:c3:9a:df:15:d8:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:45:E4:55:48:D2:6B:8F:3F:30:71:6D:4C:C3:E3:94:87:A0:89:60
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:95:b9:04:6d:b0:47:3a:d2:dd:a6:3d:65:44:21:b1:79:97:
80:8c:ef:08:df:36:75:82:58:99:c1:72:30:13:33:6f:08:9b:
b1:59:01:79:37:a1:13:c5:51:e1:2e:e7:fa:95:0f:8a:ab:d6:
0c:78:4b:ef:7f:5f:21:86:18:8f:dc:0b:9b:44:f5:a5:c3:56:
44:6f:3e:fe:05:89:e8:28:05:db:ab:1d:d3:41:d4:f9:f8:77:
e1:c4:fc:ae:f0:48:c7:5e:fc:41:f8:f2:d0:f7:ea:cb:d8:f8:
66:62:76:63:1e:1c:f9:95:b2:76:10:13:85:ac:d1:72:25:ea:
77:c8:de:84:19:ad:1b:8f:dd:dc:89:61:ee:86:fc:4f:2e:63:
20:93:d6:5b:da:a8:4c:0f:d6:4c:4d:b2:b6:2d:58:7e:d7:33:
8c:11:bd:c5:c6:e0:d7:53:73:bb:a0:a7:db:bf:28:2d:a7:79:
f7:71:cd:92:b4:60:17:d3:bb:19:d6:85:15:2e:c7:bb:07:cd:
16:19:db:db:20:4c:7d:8b:ee:a1:e9:ac:44:82:e0:9f:e9:08:
63:02:b3:03:9b:4a:02:0c:44:84:28:a6:78:6a:b8:92:1d:89:
ee:05:26:4a:19:9d:bf:12:4b:75:d9:6f:8e:9f:09:65:92:b1:
9a:8a:db:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWqmGN/fq9RbA+MxpCaNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZGRhZWIxNjRlMzk4MjE0YTE3MWEwNDEwZTZiMDIzMmQ2
NDJmNTAwHhcNMjYwNzI0MDkwMDIwWhcNMjYwNzI1MDkwMDIwWjAzMTEwLwYDVQQD
Eyg0MDQ1ZTQ1NTQ4ZDI2YjhmM2YzMDcxNmQ0Y2MzZTM5NDg3YTA4OTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJC4XV3yv8bpcoInQ4p0ew1uFGzq
urXgRAGad+/20OMvMTzpjJJbDPTBjGQjvQqF7tXxdHbq741uwyKtR6L0+32JgPU/
pszhdPFc1F4sg3v7n7eovEyfwje3/uxYRuA/KYJEmHIGg6zoFHlRNSDznkCM6KtD
ThhnTtt7HB/cu9WqXbOaJmaxD+GzMShMK/YZSWI2USF3jWznpfmdWr00k4qTk9aH
+bK76l69MIcBBS+AJ/64FX5gung5BgG0x60tACqmq+V5NXqonZRg2wHdeUCDG1W9
gf7i+rkLysAY2h741m3lX6sw1TfN0Dw8XsDt11Zp2hkqLJNuw5rfFdhJCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBF5FVI0muPPzBxbUzD45SHoIlgMB8GA1UdIwQY
MBaAFKLdrrFk45ghShcaBBDmsCMtZC9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzkt
MTEyZTExM2JiN2I3LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzktMTEyZTExM2JiN2I3
LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJW5BG2w
RzrS3aY9ZUQhsXmXgIzvCN82dYJYmcFyMBMzbwibsVkBeTehE8VR4S7n+pUPiqvW
DHhL739fIYYYj9wLm0T1pcNWRG8+/gWJ6CgF26sd00HU+fh34cT8rvBIx178Qfjy
0Pfqy9j4ZmJ2Yx4c+ZWydhAThazRciXqd8jehBmtG4/d3Ilh7ob8Ty5jIJPWW9qo
TA/WTE2yti1YftczjBG9xcbg11Nzu6Cn278oLad593HNkrRgF9O7GdaFFS7HuwfN
Fhnb2yBMfYvuoemsRILgn+kIYwKzA5tKAgxEhCimeGq4kh2J7gUmShmdvxJLddlv
jp8JZZKxmorbrg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:25 2026 by rpki-client