Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: 4HSzrF/0b5/Yyb5IioX6ulcmgRCWfGjPkLB5i/fmkO8=
Subject key identifier: 1A:31:22:AE:32:53:93:CF:BF:59:36:59:6C:FA:22:9B:C2:4A:99:BF
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 01A0D9BB74A315F19DAF4F61EAD43D7D2E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 18:02:16 +0000
Manifest this update: Fri 25 Sep 2026 18:02:16 +0000
Manifest next update: Sat 26 Sep 2026 18:02:16 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: 4H3tP61z7z2RXhK6zB49+iZsdgwpvUVb0qqMDs6GATA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:74:a3:15:f1:9d:af:4f:61:ea:d4:3d:7d:2e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Sep 25 18:02:16 2026 GMT
Not After : Sep 26 18:02:16 2026 GMT
Subject: CN=1a3122ae325393cfbf5936596cfa229bc24a99bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5e:12:28:3d:1d:48:72:85:25:13:74:1e:21:
7c:b8:b0:4e:57:74:e9:b6:95:09:60:34:6b:37:ed:
fb:28:a2:c7:ee:1e:6f:ff:7a:fe:4e:80:d0:44:e1:
8d:74:5f:e4:30:0f:00:11:6a:93:1c:6c:1d:8e:c2:
2f:5d:1c:ba:21:6e:25:f9:b2:b7:1a:3d:ae:33:11:
ea:95:3b:41:07:02:3c:f5:d2:80:33:38:9f:f4:4d:
a3:97:3c:4b:2d:63:b4:f7:60:e3:0c:ba:64:4d:53:
b4:92:e8:de:33:0d:2e:80:e0:c3:51:4b:9d:49:88:
4c:da:24:a3:12:2b:df:47:c7:a1:fc:be:08:a8:83:
da:12:2d:94:9d:52:f5:f6:8a:d8:4b:c6:82:d7:0e:
75:8c:aa:d4:12:e1:b8:13:8d:35:71:1d:30:c6:35:
cf:66:e7:c6:c8:1c:6a:66:1f:92:b7:7a:8b:41:f2:
8c:d2:37:b4:e4:01:2c:9d:ec:ac:ae:15:e0:1d:f5:
26:8c:57:28:49:b3:fe:97:0b:ec:32:12:90:c9:08:
50:14:55:32:e5:e8:8d:9f:ea:2b:ce:e1:6a:93:77:
f0:4b:6b:c4:7f:2d:48:f1:ef:98:cd:0a:a9:70:fb:
8c:2b:11:14:15:16:ff:f9:05:98:0d:d8:e3:49:e2:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:22:AE:32:53:93:CF:BF:59:36:59:6C:FA:22:9B:C2:4A:99:BF
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:87:52:4d:73:e9:61:47:b1:c8:58:95:45:97:8c:3d:63:99:
8c:25:46:75:b9:78:7b:78:27:fc:c4:bf:8d:d7:9f:8a:1b:a2:
94:51:1f:bd:53:ba:05:0a:f1:48:68:16:ac:12:f1:1d:1f:82:
ea:4b:d0:d5:c1:24:03:ca:98:97:49:16:ce:1a:b6:a8:4d:5c:
67:f9:77:2d:f4:b9:5e:4c:71:73:d7:0c:a1:66:fb:cf:a3:62:
bc:1e:3b:8d:56:14:83:99:ac:a4:60:66:bc:1c:36:b2:3a:dd:
bd:94:82:82:fc:24:7c:d3:08:22:56:e0:d6:1e:97:de:68:d4:
9a:3a:ab:17:a6:19:7c:93:de:d5:1c:2f:a3:25:3c:ad:65:a1:
43:21:75:3f:ab:80:3b:ce:92:b1:59:33:82:32:f5:70:6b:5d:
16:96:a5:83:77:e1:87:21:68:46:a2:91:17:30:2d:16:39:21:
f1:68:1e:45:3d:e7:aa:ab:ad:a5:d2:22:11:1f:b7:8a:60:05:
79:db:92:a2:0f:fb:0a:ce:9f:05:8a:7d:b6:46:96:9e:ba:08:
23:76:fb:be:34:67:c4:fd:ce:32:67:ee:98:61:32:64:87:77:
4c:bd:3d:a1:a5:10:73:cb:12:51:60:a2:62:a3:83:c5:fa:19:
64:75:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:41:32 2026 by rpki-client