Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File: 1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier: UIMLBkwaTLezQ5LZU1eGYtbxnK57HeJYDA6L1RHBC5c=
Subject key identifier: 12:7B:96:2C:CD:A2:05:99:30:87:88:B8:0A:24:3F:40:49:AA:ED:E2
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer: /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial: 01A1BFF781AFC8FE15F88C7F3448895EC6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number: 10E7
Signing time: Mon 09 Nov 2026 11:00:31 +0000
Manifest this update: Mon 09 Nov 2026 11:00:31 +0000
Manifest next update: Tue 10 Nov 2026 11:00:31 +0000
Files and hashes: 1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: d3dokhvEuHtOOhozQ5FOttCN893kxenBwbTaipdnvuk=)
2: TbY4MLo9QmUSVk5hp07D_lX76Hc.roa (hash: GGTbtNI+aaL18L5FZQerRlg9rpMiVGf3/pLxdG5oxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:f7:81:af:c8:fe:15:f8:8c:7f:34:48:89:5e:c6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Validity
Not Before: Nov 9 11:00:31 2026 GMT
Not After : Nov 10 11:00:31 2026 GMT
Subject: CN=127b962ccda20599308788b80a243f4049aaede2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:ae:62:7e:28:02:58:6a:8d:a0:1d:65:cc:
41:17:d3:05:b6:30:c3:a5:80:b6:cb:95:f1:7d:c5:
df:37:ba:16:e1:f4:31:92:00:48:49:2e:b8:2b:25:
37:6b:0e:2a:f6:bb:45:7e:4c:a7:30:bf:e7:2a:5f:
42:72:9b:6c:c7:67:65:55:24:ce:20:1a:d4:fd:1c:
1c:7b:4c:a7:40:33:fe:fb:66:db:55:73:d0:a0:20:
e8:b9:6b:bc:ed:24:fb:5f:f9:a3:70:ab:53:b1:ee:
f7:2c:30:52:3b:fa:e4:17:b6:53:b0:99:c3:de:6b:
8f:8c:1f:f4:ba:b7:de:39:a9:af:29:fb:41:b8:2a:
c6:51:ad:62:9c:8e:7e:5b:01:d8:90:7f:6d:3e:fc:
9f:1a:b8:f0:60:29:86:96:62:0b:be:90:67:3b:97:
a3:43:68:69:c2:f0:92:b8:45:80:97:b0:69:8a:53:
f6:1c:9c:f5:63:a9:3c:46:ca:f7:80:66:35:f2:7a:
ff:55:9e:92:5d:4b:4b:19:ff:ce:f4:d1:9a:4f:bd:
0b:5f:47:55:3a:6a:5e:4f:dc:fb:90:1b:1b:17:24:
3e:b4:16:dc:94:3c:58:a7:e0:a8:f8:e0:bb:60:fe:
e8:cc:e2:25:68:7e:9a:38:2b:f3:ae:21:2d:91:98:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7B:96:2C:CD:A2:05:99:30:87:88:B8:0A:24:3F:40:49:AA:ED:E2
X509v3 Authority Key Identifier:
keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2c:6f:b4:cb:e7:9a:5a:16:c7:87:2b:28:85:9f:73:51:08:
35:c5:27:bd:fa:42:f8:61:4a:27:9c:22:42:c7:bc:90:41:16:
bf:1e:53:0d:cd:9e:d7:73:8f:5f:a9:08:1d:ce:c1:48:50:cf:
59:29:e9:20:2b:01:d9:94:19:e4:c7:9b:8f:ca:17:66:63:1a:
f8:2c:ba:c9:98:27:8f:a5:b2:0c:4e:b9:6b:d7:0e:29:f5:74:
59:92:99:af:75:42:50:76:9d:4c:ed:26:ae:27:52:bd:fc:01:
c0:2f:d9:e0:66:1d:3d:c1:ae:74:27:93:8f:10:71:c1:26:4f:
ea:de:24:67:b3:51:33:0f:d8:e5:bf:b6:c6:d3:b8:a5:60:a8:
fa:e3:52:00:12:9b:c0:cf:dc:a1:5d:82:19:e7:9c:a6:2d:99:
d0:1a:6e:ec:ab:e8:31:85:95:14:fe:00:d4:52:1e:e9:63:b6:
3a:fb:ed:57:e3:fe:d4:22:3a:94:24:bb:ff:1d:3c:9d:ae:cd:
a2:ad:fe:7e:6a:20:c9:99:24:55:fb:3e:7b:85:6d:74:68:59:
b6:f8:eb:71:be:37:4c:10:77:3c:5b:9e:2e:65:bc:57:c8:f1:
c0:59:16:d1:69:18:87:36:33:b3:6d:2d:c9:8d:d7:50:13:02:
ae:1f:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 18:41:17 2026 by rpki-client