Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: m49OzRdqR1l+X6jEuogS+moz9fIt/vKwHEKoZlwpBcM=
Subject key identifier: 89:E0:F2:F0:3C:70:07:9D:9F:3E:98:BA:B7:EB:AF:6C:D6:E1:D2:AF
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 01A0D2A5DE3F51E743F5039DDF50661A26B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 09:01:20 +0000
Manifest this update: Thu 24 Sep 2026 09:01:20 +0000
Manifest next update: Fri 25 Sep 2026 09:01:20 +0000
Files and hashes: 1: APlmnKHZODCNSunvzWMmlebxZbo.roa (hash: QAoewBI2F8XDmieB1npAXSt/XAawfhTLWLPzLSSKEr8=)
2: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
3: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
4: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
5: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: z2rFxqWXRbLt1BtOTA51AIdVsyag3e8/A2pmEVO2IXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:de:3f:51:e7:43:f5:03:9d:df:50:66:1a:26:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Sep 24 09:01:20 2026 GMT
Not After : Sep 25 09:01:20 2026 GMT
Subject: CN=89e0f2f03c70079d9f3e98bab7ebaf6cd6e1d2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:04:19:cf:51:32:04:7c:51:4b:4d:4b:6f:
56:08:65:72:d4:3b:3a:ad:1d:05:f8:1f:79:89:77:
68:98:03:24:7e:2d:d3:9a:a9:a5:2e:a4:b1:78:e7:
b1:e6:04:a2:d7:90:a2:0e:39:6b:61:96:bd:e6:3a:
67:14:f2:02:9e:fa:de:08:55:21:59:3e:84:61:b9:
f6:2f:0a:6a:29:08:59:68:31:57:f1:9f:17:ee:ac:
7e:f6:cd:ad:13:9c:5e:48:ce:df:33:29:1a:e9:a2:
13:ff:e5:37:f7:a1:8a:f3:23:b8:2a:7a:bd:22:14:
45:ab:82:49:60:fd:cf:9b:6e:c6:07:bd:a7:bc:15:
33:01:79:f3:8c:d2:b4:4f:e5:bc:9c:69:09:14:a0:
c6:ae:a9:26:4b:c9:9d:c6:42:fa:95:f1:4f:8f:52:
72:95:e6:c5:d2:b5:87:18:11:49:1a:97:6d:96:e3:
00:eb:b9:b3:8c:9b:2f:8b:0d:fd:db:ae:65:c4:36:
9c:37:a2:fb:84:bb:e2:71:20:15:4a:e7:5a:e4:56:
e6:13:88:88:48:f5:b6:7f:49:d6:8b:a9:81:98:2d:
fe:17:28:d5:91:ce:53:c9:b6:e4:1c:8b:27:e9:6d:
7f:dd:f8:dd:f8:ad:58:ff:a1:5a:27:fe:57:40:b9:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:F2:F0:3C:70:07:9D:9F:3E:98:BA:B7:EB:AF:6C:D6:E1:D2:AF
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dd:1e:38:92:e5:f1:8d:1d:65:dc:b9:00:96:a7:df:c5:c6:
ac:81:5f:29:2f:d4:12:de:69:88:a7:ce:11:8a:f5:ff:16:3f:
8c:12:c9:e9:12:fa:ae:2f:fc:15:39:56:22:73:3d:2a:82:90:
a0:c2:05:0e:24:a6:2d:59:59:06:50:f5:87:48:c4:c2:be:4d:
28:d1:cd:a3:37:0b:c0:7c:30:6f:cb:dc:b1:9a:db:d0:95:b8:
59:57:a7:d0:ad:a9:23:f1:28:7e:bf:e8:59:b4:c6:39:f6:9e:
0b:ff:37:0e:28:88:7b:81:3a:fb:04:97:c9:a1:e2:ce:23:02:
a9:15:ce:88:e9:8d:6e:aa:86:6c:98:44:b9:80:c1:c7:f4:52:
af:af:eb:31:e0:dd:85:bc:e3:2c:14:7f:00:e4:44:22:40:74:
eb:4e:0d:bc:09:0c:20:a9:06:9d:49:93:dc:a5:f2:96:75:ee:
b6:37:91:00:04:ac:75:e6:e2:9d:cd:6e:41:97:29:db:6b:4d:
a7:03:52:6f:b1:0c:3e:29:3c:91:e6:6a:18:e7:21:c5:93:4b:
4b:87:ef:27:f5:48:e4:5c:fa:2d:71:48:75:93:aa:21:56:51:
47:95:3e:14:07:17:42:3a:fb:40:90:d6:30:3c:7b:22:68:d4:
a0:75:b8:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpd4/UedD9QOd31BmGia0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1
ODEzOTAwHhcNMjYwOTI0MDkwMTIwWhcNMjYwOTI1MDkwMTIwWjAzMTEwLwYDVQQD
Eyg4OWUwZjJmMDNjNzAwNzlkOWYzZTk4YmFiN2ViYWY2Y2Q2ZTFkMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvUEGc9RMgR8UUtNS29WCGVy1Ds6
rR0F+B95iXdomAMkfi3TmqmlLqSxeOex5gSi15CiDjlrYZa95jpnFPICnvreCFUh
WT6EYbn2LwpqKQhZaDFX8Z8X7qx+9s2tE5xeSM7fMyka6aIT/+U396GK8yO4Knq9
IhRFq4JJYP3Pm27GB72nvBUzAXnzjNK0T+W8nGkJFKDGrqkmS8mdxkL6lfFPj1Jy
lebF0rWHGBFJGpdtluMA67mzjJsviw39265lxDacN6L7hLvicSAVSuda5FbmE4iI
SPW2f0nWi6mBmC3+FyjVkc5TybbkHIsn6W1/3fjd+K1Y/6FaJ/5XQLmeGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIng8vA8cAednz6Yurfrr2zW4dKvMB8GA1UdIwQY
MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt
YTIyZmZlZTRhNTE1LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1
LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADN0eOJLl
8Y0dZdy5AJan38XGrIFfKS/UEt5piKfOEYr1/xY/jBLJ6RL6ri/8FTlWInM9KoKQ
oMIFDiSmLVlZBlD1h0jEwr5NKNHNozcLwHwwb8vcsZrb0JW4WVen0K2pI/Eofr/o
WbTGOfaeC/83DiiIe4E6+wSXyaHiziMCqRXOiOmNbqqGbJhEuYDBx/RSr6/rMeDd
hbzjLBR/AOREIkB0604NvAkMIKkGnUmT3KXylnXutjeRAASsdebinc1uQZcp22tN
pwNSb7EMPik8keZqGOchxZNLS4fvJ/VI5Fz6LXFIdZOqIVZRR5U+FAcXQjr7QJDW
MDx7ImjUoHW4bw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:59:08 2026 by rpki-client