Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: LC3qGVHdKdIIXIdIwN8McnSet4CBWIm+iVYGFfDJdQM=
Subject key identifier: E7:C3:61:D1:7C:F1:EE:8E:DC:6C:58:13:AF:65:BE:B6:6A:A2:BC:59
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019E1EA39C7BA5FDA20530C1B0FEB027621F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 00:01:39 +0000
Manifest this update: Wed 13 May 2026 00:01:39 +0000
Manifest next update: Thu 14 May 2026 00:01:39 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: g/+NAQdAFgEKI8/QX62rSD5iTvbGcUDZGBJfNncmjuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:9c:7b:a5:fd:a2:05:30:c1:b0:fe:b0:27:62:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: May 13 00:01:39 2026 GMT
Not After : May 14 00:01:39 2026 GMT
Subject: CN=e7c361d17cf1ee8edc6c5813af65beb66aa2bc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:7c:70:7f:8f:c4:21:38:2c:9e:e2:ba:f0:
9a:58:aa:ad:e9:50:fa:14:ce:0e:60:55:d1:28:93:
db:ac:bc:3e:e2:9d:76:2f:9a:9e:53:57:2b:5c:ec:
55:07:67:1c:ea:04:dc:72:7a:0a:96:61:68:57:00:
fc:6f:5f:e3:c2:02:25:f7:20:1d:61:1e:a3:9a:f8:
5c:88:6a:94:d0:ab:65:84:81:59:dd:4b:6a:68:23:
8d:aa:e0:35:99:18:a6:e8:ee:ee:9e:7e:f4:26:e9:
94:0d:b8:1b:f5:e5:cd:80:9a:53:bf:b6:50:7f:7b:
c9:b3:7d:7b:6e:38:c9:8a:3f:a6:53:19:e5:12:53:
f7:83:78:58:50:6e:d7:49:99:fc:02:20:53:af:f7:
89:ab:51:db:59:0d:f2:54:7a:36:ee:8b:ce:27:10:
2a:1f:67:47:c5:a6:b8:ef:6a:5f:a3:e1:fc:bc:07:
74:53:b0:25:73:31:af:6d:aa:c7:92:c8:07:d2:11:
23:0d:d6:75:1f:11:f2:59:8b:98:ba:14:19:22:af:
a8:86:78:fc:12:08:01:e9:e2:93:f4:f5:88:90:1e:
ec:9b:5b:8c:67:d1:fa:64:36:c9:d4:38:ba:87:ea:
81:05:aa:db:cd:da:8c:24:27:65:64:75:af:c7:92:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:61:D1:7C:F1:EE:8E:DC:6C:58:13:AF:65:BE:B6:6A:A2:BC:59
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e7:12:f6:a7:25:5c:b0:c1:e5:11:45:62:94:db:97:ab:03:
b4:db:8c:35:55:32:1c:66:69:fd:5c:b6:70:ee:8a:a9:04:17:
b1:b5:19:75:80:87:a1:78:0b:e8:b3:60:78:8a:15:34:7e:7c:
db:42:82:78:b6:fb:7f:59:5a:02:8b:64:29:72:18:d7:1c:35:
d8:f4:c8:9b:41:20:27:56:89:31:b0:7a:f8:e7:92:60:58:3a:
8d:50:df:2b:0d:64:21:5d:51:6f:c6:44:40:c3:b5:dc:4d:39:
09:b9:bc:8c:9e:38:98:97:88:4c:2e:60:8b:75:f9:d7:1e:4c:
bb:f6:55:32:12:a0:b6:94:72:ef:f9:e8:ea:cc:58:b6:9d:50:
6c:78:4a:50:d4:31:3d:73:f6:04:06:e6:fa:62:b8:26:84:e8:
09:cc:10:51:92:13:88:8b:a0:ae:b4:16:d3:04:19:60:1c:a8:
01:91:ea:9b:29:34:9a:0c:21:ef:25:ad:d7:8d:5e:fb:ef:42:
88:b0:95:8e:fe:e0:35:49:2e:73:42:1e:09:aa:54:da:a1:3f:
c7:5e:d7:50:38:f4:8c:77:30:8b:03:5d:a1:d5:b8:7e:71:c1:
06:ff:a4:f4:29:aa:87:6f:53:9d:96:47:51:6e:65:a9:a9:09:
55:37:28:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:46:08 2026 by rpki-client