Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File: 1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier: aTIbiJkBlPr4gciJC5wO2Kfj9YS4voEJT9stJj2JE9A=
Subject key identifier: DA:DA:73:29:E1:CE:38:C7:73:56:72:41:37:64:20:0F:F5:A2:8F:1E
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer: /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial: 019FA906B9F0F123D140E73BC6B425D9AE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number: 0FD2
Signing time: Tue 28 Jul 2026 14:00:17 +0000
Manifest this update: Tue 28 Jul 2026 14:00:17 +0000
Manifest next update: Wed 29 Jul 2026 14:00:17 +0000
Files and hashes: 1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: 9yTTo/xcoPkm625cZ028fO4vwQ1vJrXdeZAjqkuI7/Y=)
2: TbY4MLo9QmUSVk5hp07D_lX76Hc.roa (hash: GGTbtNI+aaL18L5FZQerRlg9rpMiVGf3/pLxdG5oxu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:b9:f0:f1:23:d1:40:e7:3b:c6:b4:25:d9:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Validity
Not Before: Jul 28 14:00:17 2026 GMT
Not After : Jul 29 14:00:17 2026 GMT
Subject: CN=dada7329e1ce38c7735672413764200ff5a28f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:c4:2b:b5:14:b8:bc:0b:96:f3:63:58:e7:
dc:e0:ed:9c:1d:27:ea:fd:b6:76:f6:7b:48:7c:0b:
8e:01:d5:ea:c7:54:52:9d:de:f0:8a:5e:3b:64:da:
07:be:26:2a:9b:5e:e4:42:60:bb:1e:12:50:69:02:
a2:b2:d1:cc:8b:f3:d8:9c:70:a0:81:e7:c8:1a:84:
0d:09:ec:33:60:b8:fd:b3:9f:43:9d:d8:f9:6c:d0:
65:63:dd:b5:e7:61:5f:12:83:e5:82:7b:55:b1:59:
56:7d:66:18:44:15:49:9c:7a:54:2c:76:9c:78:93:
7b:d5:71:b7:f1:b6:71:b1:a6:97:e4:25:f1:56:3f:
d1:64:c9:2a:22:c2:8d:53:70:63:c7:9d:71:97:c6:
f3:06:41:3b:06:d8:32:ec:9a:6b:c7:be:a6:46:ce:
86:49:41:d0:ba:c7:10:78:09:74:c3:02:f9:78:29:
a7:78:5d:fb:74:fe:98:c9:b5:75:8b:6f:13:fa:4e:
40:cf:45:0a:ca:00:86:84:f6:41:9d:91:49:4f:b8:
4b:7b:cc:5a:0f:25:b1:b0:f0:37:c6:8d:a3:7c:6e:
66:d1:c2:f7:23:8e:6d:f4:61:c7:bd:54:b7:25:80:
3a:17:9d:93:1a:96:8f:df:31:54:9c:ee:fa:78:e5:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DA:73:29:E1:CE:38:C7:73:56:72:41:37:64:20:0F:F5:A2:8F:1E
X509v3 Authority Key Identifier:
keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:17:53:a6:ce:cb:c6:74:2d:36:9a:3c:a4:cb:30:c3:a1:4c:
ce:2c:78:59:9c:e7:38:53:a4:9a:69:86:36:c9:ce:2a:91:c4:
0e:f6:e7:1b:76:51:6e:ac:96:ca:b8:14:0c:e6:39:3c:6b:52:
92:e8:31:a3:38:59:de:47:d0:a5:5c:c8:fc:09:c4:2a:3f:d5:
9e:48:40:a7:eb:01:c4:fb:a0:04:cf:61:aa:b3:95:cd:47:a9:
1a:95:2f:32:7e:53:15:1d:9f:90:38:9c:e3:e8:5e:a0:75:71:
cb:28:d3:24:25:9a:50:cf:f2:72:ca:79:46:47:b6:6b:55:86:
89:99:b0:dc:41:36:b3:5e:0b:49:c6:37:20:82:c8:de:98:26:
31:52:6b:fd:92:df:12:2c:4c:c4:44:38:1d:d9:b9:ce:fb:97:
da:2f:ce:7f:d5:13:79:71:4a:17:57:fc:82:d9:96:84:b1:ee:
1f:e6:60:8e:2b:1f:d6:70:51:2b:0e:15:40:61:32:a2:9e:dd:
7a:38:8c:d2:04:e2:4b:85:c1:f8:bb:c8:e3:06:e1:0b:7c:96:
12:79:6a:6a:59:8f:d5:88:a5:b1:3b:ce:79:11:1b:2f:54:c9:
fa:84:a2:2a:8c:b8:ca:4d:18:b4:9c:06:05:94:b6:2d:e9:b1:
98:0a:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:07:40 2026 by rpki-client