Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: vYEQgF1uG2HX1t7l/gscrKCdL0Ds/BJHUSGQJ9gUDec=
Subject key identifier: 70:2E:4D:A4:5A:17:EC:71:7E:10:C3:53:22:5C:25:A3:AC:06:54:77
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 01A0D49411225DA99A559071D0AB08BF8619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 18:01:08 +0000
Manifest this update: Thu 24 Sep 2026 18:01:08 +0000
Manifest next update: Fri 25 Sep 2026 18:01:08 +0000
Files and hashes: 1: APlmnKHZODCNSunvzWMmlebxZbo.roa (hash: QAoewBI2F8XDmieB1npAXSt/XAawfhTLWLPzLSSKEr8=)
2: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
3: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
4: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
5: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: bEdG2bEsHFFTZDzqVPXfM7/UgF+8rJgB2cz/BnQoG18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:11:22:5d:a9:9a:55:90:71:d0:ab:08:bf:86:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Sep 24 18:01:08 2026 GMT
Not After : Sep 25 18:01:08 2026 GMT
Subject: CN=702e4da45a17ec717e10c353225c25a3ac065477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:7d:82:cc:c2:74:2b:0d:be:27:5e:06:5c:
e4:e4:d8:b4:94:b0:03:9f:97:be:b0:09:5d:f8:f9:
55:af:b6:c5:c7:64:7b:02:6a:30:ae:91:69:11:f8:
65:44:ba:ee:95:3a:f2:b4:4c:c5:c4:8e:3a:87:26:
cb:cf:f6:7c:c7:04:5b:e7:5b:ac:20:0c:4f:89:f4:
91:62:f1:2a:d5:e4:14:b5:35:9e:fc:1b:53:42:90:
25:e2:19:2e:2c:fe:d5:f9:80:ea:cb:1c:84:dc:66:
39:6f:5e:df:80:a0:78:1b:07:63:82:f4:5c:ad:85:
46:0e:32:e9:34:b9:ed:3d:88:a7:1f:86:b7:3a:3e:
89:39:f7:b6:45:aa:5a:f0:74:68:f4:d9:46:90:4b:
03:98:27:0a:37:7c:ff:ff:09:5d:79:1f:d0:37:7a:
dd:d3:d1:2a:1f:e8:c0:51:f3:12:dd:54:e5:31:b8:
7b:b2:e5:b9:d1:34:4e:a2:a9:12:99:de:12:9b:8b:
46:d7:75:90:24:a5:42:9b:73:21:09:5e:ad:13:2b:
5d:a5:bc:9e:75:b3:7d:d2:61:30:0d:ca:c3:83:d1:
13:fe:6e:bb:ce:5c:44:3b:30:48:e8:5f:9b:68:fd:
4b:95:82:da:c0:17:2b:4e:52:e6:eb:fd:a2:c2:7d:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2E:4D:A4:5A:17:EC:71:7E:10:C3:53:22:5C:25:A3:AC:06:54:77
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:db:67:35:7d:95:3e:2e:a6:c7:f4:d3:19:ed:66:09:08:a9:
16:18:49:f5:27:88:31:e0:b3:9e:1f:fc:f6:17:4c:42:d6:ea:
39:56:fc:61:b1:50:3c:9b:de:68:f0:40:ec:eb:08:4e:a9:57:
29:95:06:70:10:76:19:b2:3d:45:d8:30:10:c6:9d:ab:e1:56:
3c:90:46:e2:f6:be:b2:ab:bc:a8:8d:fa:97:f9:68:83:44:1d:
57:34:dd:5e:ed:5b:51:11:90:64:da:89:e1:9b:c1:ce:91:13:
42:12:59:a9:ec:12:09:ba:4d:4d:e1:68:ca:d6:45:3c:2a:53:
8d:57:70:75:cd:84:24:dd:b4:1d:fd:48:b1:c5:65:f5:5c:8f:
21:88:4e:98:0e:ae:47:68:72:68:12:a8:96:1b:bb:4d:3a:06:
e4:c6:c3:1c:8e:6a:30:00:e9:b4:25:8a:19:cd:85:7c:b6:31:
51:9d:8c:3c:5c:eb:d0:c1:3d:50:a9:c0:52:ef:be:d8:50:8c:
10:5d:a9:40:66:03:d6:3b:a6:a9:55:af:a2:53:7b:49:02:24:
a4:01:ab:6c:c5:df:33:4d:57:60:e2:ab:ec:e4:1d:fd:d1:25:
f3:70:2d:da:8a:f1:0d:c9:e7:52:ad:ee:e3:24:68:21:ee:cc:
f1:2a:e0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:55:43 2026 by rpki-client