Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: g3rExD3M9BhL3XpymkaBzqHNJFrFH/HsQzn6sxykQo4=
Subject key identifier: 74:2C:B6:63:28:CB:89:C8:66:AF:D0:F0:ED:54:B6:B8:15:08:20:CF
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 01A1E05EF4AADB4598EC1C3A56C475322B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 18:01:21 +0000
Manifest this update: Sun 15 Nov 2026 18:01:21 +0000
Manifest next update: Mon 16 Nov 2026 18:01:21 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: CbJYoOlfjRtKtA6VBDzfgptCHW+/GRxcQGQzgiKcxp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5e:f4:aa:db:45:98:ec:1c:3a:56:c4:75:32:2b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Nov 15 18:01:21 2026 GMT
Not After : Nov 16 18:01:21 2026 GMT
Subject: CN=742cb66328cb89c866afd0f0ed54b6b8150820cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:1f:c4:b4:96:af:3e:b0:f2:48:7a:61:24:
9d:79:4c:9b:46:1e:29:e3:d7:c7:ed:a7:6b:72:8e:
dd:77:f0:bb:2b:50:9d:28:56:a7:54:ba:a7:8b:5e:
23:bf:03:c1:fb:46:44:fd:60:9e:c0:63:fa:06:59:
de:5f:b8:5a:0a:29:d4:71:ce:e1:09:cb:1c:50:31:
78:44:54:c4:c4:f2:88:ee:98:a3:e1:32:14:2e:e2:
94:33:9e:d1:e3:37:10:36:7d:b5:ac:ea:24:62:07:
f6:81:dc:dc:18:65:11:14:8b:59:ce:22:70:cd:7b:
48:ec:67:06:e7:54:56:e2:f1:3f:e8:43:d1:77:14:
73:43:6b:9a:a6:73:e0:ca:3c:1d:25:2d:de:90:66:
70:60:bc:62:14:84:28:32:39:bb:cd:29:1a:d7:9d:
08:e3:ea:ed:dd:d8:27:cf:46:1d:e5:40:54:61:a9:
9e:64:1f:3d:05:8c:31:77:ae:69:40:be:e2:7d:51:
09:da:f4:2b:87:ed:e5:7f:7e:3f:42:78:36:46:41:
22:85:b8:12:8a:32:a2:bc:e3:15:3b:21:dd:76:03:
49:68:ef:a1:23:6f:7b:2e:79:61:e7:aa:9b:bc:eb:
ab:dd:c6:2f:d4:49:e5:ee:e5:b4:80:59:47:5f:3c:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2C:B6:63:28:CB:89:C8:66:AF:D0:F0:ED:54:B6:B8:15:08:20:CF
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:2b:5a:34:38:b0:03:7c:15:7d:03:f1:9f:d6:48:30:04:
82:53:87:0f:57:73:da:85:a9:e3:f3:8c:67:c1:63:86:5d:f6:
98:7a:27:60:42:07:9b:10:7e:7f:7d:93:02:6f:52:c2:3f:46:
82:ce:3b:cd:59:45:ef:c2:fb:b4:e2:74:34:5b:c9:29:ec:8c:
de:71:bb:bd:c6:6b:3e:66:4f:e4:13:d4:f8:22:df:be:ca:8e:
ba:a4:ba:32:77:f0:ad:69:61:a5:c1:88:6b:29:bf:21:f4:36:
10:97:b5:c8:54:72:5e:d5:7a:10:c0:22:48:0b:65:b1:99:e2:
46:a0:81:19:a2:6d:7b:0a:8a:6d:8a:d9:2d:4e:22:65:3f:ca:
cb:ee:7b:fa:06:bb:d3:0d:56:bd:80:4a:16:ed:aa:ce:8c:d5:
14:e7:f1:68:d1:14:9f:d2:6d:cd:67:d2:d9:9d:c9:1f:ae:28:
cd:f2:60:31:db:b0:9c:82:31:96:fc:59:11:6c:1a:eb:69:98:
c6:11:7f:24:aa:98:36:d7:0f:65:3f:34:e8:64:16:fc:04:27:
e0:17:5a:6b:ba:84:5d:38:fe:9c:45:4e:ac:bf:7e:fa:9e:8c:
51:2a:d9:cc:1d:a6:9f:b3:5d:39:4b:cf:1a:e8:a2:1d:e3:c9:
42:1c:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:00:55 2026 by rpki-client