Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: SCbjEp1UJMLSki4goLjLmveY8fbck39QlSjxX0KQWQM=
Subject key identifier: 9E:4A:EF:44:56:8A:91:5A:DE:75:0E:C0:03:68:36:D3:34:08:2C:14
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 01A12C1FF45FDDA9E3D93BAB78E4A0D3F7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 040B
Signing time: Sun 11 Oct 2026 18:00:53 +0000
Manifest this update: Sun 11 Oct 2026 18:00:53 +0000
Manifest next update: Mon 12 Oct 2026 18:00:53 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: cdwPsWzRFFoL2CzTSMEe1qZCiLzVkuS+0MM2CXWxfsg=)
2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:f4:5f:dd:a9:e3:d9:3b:ab:78:e4:a0:d3:f7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: Oct 11 18:00:53 2026 GMT
Not After : Oct 12 18:00:53 2026 GMT
Subject: CN=9e4aef44568a915ade750ec0036836d334082c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d2:3c:c7:5c:a9:88:a9:be:ac:4b:1a:1b:93:
0e:c1:29:6d:ff:da:f7:bf:bb:2c:ea:30:8d:98:1a:
a2:f2:bf:c0:b4:87:fd:c6:64:73:93:63:af:78:1e:
5a:c5:2a:9a:c7:09:d5:e3:e9:c1:59:22:ca:0a:3f:
bc:1b:c3:b9:0e:97:09:b7:50:26:47:ce:80:93:a3:
a1:41:f1:6c:9c:98:1f:fc:eb:11:50:22:3f:58:8e:
15:13:06:98:48:fb:44:07:c5:bb:06:c1:52:54:c0:
f9:58:c0:f5:54:c4:8b:4e:2d:6d:8a:ec:f2:7e:30:
e7:a9:94:00:43:03:d5:90:7d:f5:98:54:67:ab:4e:
fc:a0:9a:57:f1:7a:72:00:9e:12:2b:17:15:c4:7d:
f9:b3:f3:d1:de:b6:f2:f5:dc:6c:94:5d:6b:b2:45:
74:5a:70:46:e7:e1:27:e8:a4:28:ce:fb:7e:8e:ff:
d7:00:5b:a7:69:aa:62:b8:13:6f:fd:44:30:31:34:
43:92:20:15:08:8a:c6:3c:18:39:ea:84:09:db:3d:
ee:6a:2e:35:20:f5:f9:0e:df:b1:b4:67:92:a0:38:
41:18:d9:78:a2:6b:06:3f:4d:91:88:cb:a5:5a:31:
3b:82:51:59:97:2e:0b:94:4e:f2:74:2b:f1:db:57:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4A:EF:44:56:8A:91:5A:DE:75:0E:C0:03:68:36:D3:34:08:2C:14
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:eb:99:0f:22:1e:36:7f:c0:4b:b1:5f:e3:3d:62:2b:aa:76:
5a:ad:3f:b7:52:d9:71:bc:d5:96:e0:50:c1:e6:5d:9d:d3:4c:
06:33:9e:cf:91:ff:51:62:97:ff:59:15:79:ec:51:ab:46:48:
52:cd:f8:c1:da:89:2b:de:e2:46:ce:27:9a:c2:67:dd:3a:1d:
44:8f:e4:17:06:c6:93:6b:b5:6c:eb:dd:3e:8a:3a:dd:77:70:
fc:67:04:9d:51:84:91:8a:dd:33:22:a4:77:70:8a:ec:f6:8e:
0c:f2:67:78:08:e9:26:72:c7:cd:10:63:24:f5:42:fe:02:5e:
f5:55:23:15:61:d7:e7:3e:57:b3:d3:3b:29:ec:da:2e:9c:00:
c8:06:b5:0c:fa:6d:68:7d:00:37:a2:7a:77:5f:69:97:35:1a:
ab:b6:1c:3c:1e:b6:ce:78:14:69:2b:39:ae:3d:b0:73:7f:ba:
77:6e:f0:bb:63:05:40:2c:b9:ac:64:33:f0:bc:1a:5f:b2:87:
e3:4d:42:fe:50:ad:1c:ed:37:3e:7a:67:e7:6e:e3:57:9d:81:
b4:ce:21:94:f3:d9:90:ea:d8:65:7a:72:fe:fd:3a:d9:39:09:
3d:28:30:ef:66:20:98:63:55:5f:e8:7c:48:c4:ce:ac:06:ae:
33:f5:c2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsH/Rf3anj2TureOSg0/flMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWI3MzljNmQzZGM3MWE2MjA2YzhmMzcxMjQyNmZmNTMy
YTBhZmUwHhcNMjYxMDExMTgwMDUzWhcNMjYxMDEyMTgwMDUzWjAzMTEwLwYDVQQD
Eyg5ZTRhZWY0NDU2OGE5MTVhZGU3NTBlYzAwMzY4MzZkMzM0MDgyYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dI8x1ypiKm+rEsaG5MOwSlt/9r3
v7ss6jCNmBqi8r/AtIf9xmRzk2OveB5axSqaxwnV4+nBWSLKCj+8G8O5DpcJt1Am
R86Ak6OhQfFsnJgf/OsRUCI/WI4VEwaYSPtEB8W7BsFSVMD5WMD1VMSLTi1tiuzy
fjDnqZQAQwPVkH31mFRnq078oJpX8XpyAJ4SKxcVxH35s/PR3rby9dxslF1rskV0
WnBG5+En6KQozvt+jv/XAFunaapiuBNv/UQwMTRDkiAVCIrGPBg56oQJ2z3uai41
IPX5Dt+xtGeSoDhBGNl4omsGP02RiMulWjE7glFZly4LlE7ydCvx21e8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5K70RWipFa3nUOwANoNtM0CCwUMB8GA1UdIwQY
MBaAFNjrc5xtPccaYgbI83EkJv9TKgr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8wMTgxZjgtNGZhNC00Njk3LWEyNzIt
MzMzYjZkNGVhNDViLzEvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8wMTgxZjgtNGZhNC00Njk3LWEyNzItMzMzYjZkNGVhNDVi
LzEvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+uZDyIe
Nn/AS7Ff4z1iK6p2Wq0/t1LZcbzVluBQweZdndNMBjOez5H/UWKX/1kVeexRq0ZI
Us34wdqJK97iRs4nmsJn3TodRI/kFwbGk2u1bOvdPoo63Xdw/GcEnVGEkYrdMyKk
d3CK7PaODPJneAjpJnLHzRBjJPVC/gJe9VUjFWHX5z5Xs9M7KezaLpwAyAa1DPpt
aH0AN6J6d19plzUaq7YcPB62zngUaSs5rj2wc3+6d27wu2MFQCy5rGQz8LwaX7KH
401C/lCtHO03Pnpn527jV52BtM4hlPPZkOrYZXpy/v062TkJPSgw72YgmGNVX+h8
SMTOrAauM/XCGQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:47:15 2026 by rpki-client