Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File: 1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier: 8+o9ViB06bk/CAfk9LJx5V+en2HcC9vVojIbHDh2WYM=
Subject key identifier: 70:3B:B4:92:25:22:DE:1F:E5:AB:08:1A:47:17:C8:E7:27:92:16:BC
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer: /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial: 01A0C2FB9322BE1E5EFA586D16315D16AC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number: 1064
Signing time: Mon 21 Sep 2026 08:01:02 +0000
Manifest this update: Mon 21 Sep 2026 08:01:02 +0000
Manifest next update: Tue 22 Sep 2026 08:01:02 +0000
Files and hashes: 1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: rEMX77wpsn8iO5Ah/WaH43fc+AJ8HkyMDcp2jf3L0Og=)
2: TbY4MLo9QmUSVk5hp07D_lX76Hc.roa (hash: GGTbtNI+aaL18L5FZQerRlg9rpMiVGf3/pLxdG5oxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:93:22:be:1e:5e:fa:58:6d:16:31:5d:16:ac:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Validity
Not Before: Sep 21 08:01:02 2026 GMT
Not After : Sep 22 08:01:02 2026 GMT
Subject: CN=703bb4922522de1fe5ab081a4717c8e7279216bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:9a:ed:3b:3e:34:72:db:8b:cf:89:dc:c6:
ed:a3:7d:87:40:18:04:d4:de:f8:f0:73:aa:7b:30:
16:38:67:1c:2c:9d:93:c6:d0:dc:c7:92:4b:cc:24:
de:8d:e1:36:c6:7b:b0:af:92:a2:7f:56:c3:fb:d0:
00:63:ff:6d:6f:05:09:b8:c5:61:5d:bd:bb:be:21:
67:a7:e3:73:64:64:d7:77:cb:d2:9e:c4:2f:33:05:
52:d2:1b:c1:1c:43:62:f8:7f:b9:6f:0a:f7:82:1b:
10:28:f8:73:62:f1:40:04:8e:92:ff:25:78:46:fb:
5e:27:ce:a0:92:ec:b2:54:ee:4d:c9:74:97:ff:c8:
9c:d2:07:7c:ad:25:9a:ef:3d:48:17:34:b8:e2:44:
4a:e7:ff:f2:ff:11:4e:fd:c6:8b:a1:bf:24:cd:40:
d8:5f:80:8f:8d:c8:4f:f6:62:ad:19:14:21:93:24:
8d:8c:14:2b:4d:7f:21:f5:ae:84:e1:74:ab:b2:ea:
88:60:bd:7c:e5:c0:43:36:bb:54:5a:6c:2d:d1:5b:
e0:37:a3:05:63:d7:36:e9:c3:53:fb:42:ef:8d:3d:
b1:c6:dc:1b:9d:f3:ee:d2:b0:3f:5e:6f:51:f9:f2:
78:74:b8:f2:61:02:e5:30:2a:a3:07:dc:2f:67:15:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:B4:92:25:22:DE:1F:E5:AB:08:1A:47:17:C8:E7:27:92:16:BC
X509v3 Authority Key Identifier:
keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ea:12:74:91:38:0e:7c:ab:da:25:35:a6:a7:f6:c7:0b:20:
6e:7b:b0:69:1e:48:c0:7c:7e:a9:14:63:f8:9e:ee:b5:a4:8e:
ff:ee:a4:01:55:b8:92:2e:f8:34:5b:39:b1:6b:05:7a:4f:14:
5f:89:f1:0c:63:af:23:ca:7e:13:88:18:58:56:f0:5b:d8:6e:
cf:f5:0e:b2:55:58:e4:55:49:6d:06:4b:33:00:e5:0f:4e:fa:
1b:94:60:a8:4e:f8:4f:12:5b:6f:2b:d0:a5:54:81:15:33:cb:
4d:c5:22:22:4b:97:20:bc:8e:0d:58:b2:25:e0:95:51:cb:c6:
cc:e1:bd:b2:09:62:51:10:70:69:44:5c:15:08:f7:42:6c:d3:
46:6c:9e:7a:59:66:ef:78:0b:52:cf:3c:bc:b4:57:71:f0:8a:
24:42:ed:c1:7f:19:a1:85:5e:30:db:b8:53:2b:a0:f9:7c:31:
ba:74:46:47:4d:b9:12:52:1b:65:5f:2d:1c:98:bc:e6:3c:29:
74:75:d5:cb:e4:bb:9c:27:d8:5c:cc:5f:6d:42:e8:cd:a0:7e:
08:d3:a5:47:ab:c1:c5:49:13:68:22:2e:c5:5d:d9:f3:51:57:
73:d5:b1:93:70:ef:c8:65:7f:79:bc:ea:7c:dd:69:02:fb:d2:
38:63:69:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+5Mivh5e+lhtFjFdFqxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OGI2Y2ZiNzIwYTdjOTJhMTgwY2E2MTRiZGIwZWRhMWYx
ZWJlOWQwHhcNMjYwOTIxMDgwMTAyWhcNMjYwOTIyMDgwMTAyWjAzMTEwLwYDVQQD
Eyg3MDNiYjQ5MjI1MjJkZTFmZTVhYjA4MWE0NzE3YzhlNzI3OTIxNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn2a7Ts+NHLbi8+J3Mbto32HQBgE
1N748HOqezAWOGccLJ2TxtDcx5JLzCTejeE2xnuwr5Kif1bD+9AAY/9tbwUJuMVh
Xb27viFnp+NzZGTXd8vSnsQvMwVS0hvBHENi+H+5bwr3ghsQKPhzYvFABI6S/yV4
RvteJ86gkuyyVO5NyXSX/8ic0gd8rSWa7z1IFzS44kRK5//y/xFO/caLob8kzUDY
X4CPjchP9mKtGRQhkySNjBQrTX8h9a6E4XSrsuqIYL185cBDNrtUWmwt0VvgN6MF
Y9c26cNT+0LvjT2xxtwbnfPu0rA/Xm9R+fJ4dLjyYQLlMCqjB9wvZxWLcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA7tJIlIt4f5asIGkcXyOcnkha8MB8GA1UdIwQY
MBaAFNaLbPtyCnySoYDKYUvbDtofHr6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNTk0NWQtNDkxNS00YmQ3LTkxYzEt
MzNlMzE5YTQ1NGVmLzEvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNTk0NWQtNDkxNS00YmQ3LTkxYzEtMzNlMzE5YTQ1NGVm
LzEvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+oSdJE4
Dnyr2iU1pqf2xwsgbnuwaR5IwHx+qRRj+J7utaSO/+6kAVW4ki74NFs5sWsFek8U
X4nxDGOvI8p+E4gYWFbwW9huz/UOslVY5FVJbQZLMwDlD076G5RgqE74TxJbbyvQ
pVSBFTPLTcUiIkuXILyODViyJeCVUcvGzOG9sgliURBwaURcFQj3QmzTRmyeellm
73gLUs88vLRXcfCKJELtwX8ZoYVeMNu4Uyug+XwxunRGR025ElIbZV8tHJi85jwp
dHXVy+S7nCfYXMxfbULozaB+CNOlR6vBxUkTaCIuxV3Z81FXc9Wxk3DvyGV/ebzq
fN1pAvvSOGNpxA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:51:52 2026 by rpki-client