Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: Zk1XMl0OQcCZoO5oOQcJTjdMRk2CJPnsqJhMgjVFk0c=
Subject key identifier: E2:B5:A8:38:AC:50:FE:48:3D:7F:CB:D3:66:C9:D8:49:80:BC:3E:5E
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 01A0D0124B1A141F004D1EAD0BCAB26B5892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 21:00:54 +0000
Manifest this update: Wed 23 Sep 2026 21:00:54 +0000
Manifest next update: Thu 24 Sep 2026 21:00:54 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: kmqJQQ5+bB2Q/7oSZdSp4MunyPYPcxXX1udIlBXlBRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:4b:1a:14:1f:00:4d:1e:ad:0b:ca:b2:6b:58:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Sep 23 21:00:54 2026 GMT
Not After : Sep 24 21:00:54 2026 GMT
Subject: CN=e2b5a838ac50fe483d7fcbd366c9d84980bc3e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:b8:37:c8:89:5d:1c:de:00:36:b0:4b:27:
c1:40:87:7a:e5:cf:9e:42:76:cd:3b:bf:5c:1a:8f:
c0:97:fe:e4:83:82:1c:59:ee:a3:7a:d1:97:2f:ec:
68:f6:be:ba:38:f5:db:f9:1f:49:60:a4:2f:f6:a5:
b9:50:7e:d9:84:d7:7f:93:74:0f:6c:7c:64:c7:1c:
d3:a1:c3:5d:e3:d1:2b:a7:f0:94:3a:32:ea:60:f9:
f1:b4:8e:ca:82:45:88:84:a8:4a:ed:90:4c:31:16:
25:a3:35:4b:0d:33:18:4c:27:56:7c:8a:d6:e2:aa:
e3:8a:d6:8b:c6:98:6a:23:27:a4:79:0a:29:11:9c:
63:f9:78:85:b8:69:22:c3:ac:9b:85:7d:28:b8:54:
d4:1e:ce:27:69:a4:b8:36:29:3c:0a:3e:a3:6a:63:
55:0b:54:70:5f:f0:72:a0:b3:4d:9a:68:91:3b:63:
0c:e0:dd:f9:49:59:d4:a2:9c:57:f9:a8:ce:bd:f0:
ae:cb:bf:66:7e:ac:eb:21:e1:b4:dd:89:4e:a5:47:
9e:32:c0:1b:66:a5:8d:bc:be:9b:55:f5:91:01:d7:
46:1a:58:c0:35:c5:39:48:c1:83:21:8c:15:28:62:
e0:c7:33:d9:7d:29:41:85:ad:f9:1f:b3:af:cd:0e:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B5:A8:38:AC:50:FE:48:3D:7F:CB:D3:66:C9:D8:49:80:BC:3E:5E
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f1:1a:40:76:be:3d:38:29:3c:a7:f7:4d:a4:77:1b:d7:15:
82:46:e6:6b:24:24:2d:f3:a0:69:77:4c:1f:17:3c:33:cd:b9:
64:8d:a7:03:13:13:ac:29:1a:f6:41:9c:82:bf:2f:fe:89:98:
df:1a:69:a5:99:13:d0:13:fb:bf:5a:ac:83:e3:8b:7d:31:17:
a6:b5:4d:b9:1b:43:5a:b2:bc:a8:3c:2c:72:6f:03:50:60:d4:
ad:19:15:81:23:7f:fa:87:1f:4d:22:8c:60:07:82:d7:99:6e:
96:4a:5a:4e:35:3b:a5:d5:aa:b8:ab:75:6d:d2:7f:2b:bb:f3:
90:af:d2:28:67:dc:82:c5:4e:1c:69:3b:a6:f5:3a:e2:33:18:
9f:54:c7:7a:ff:60:43:a0:23:84:5d:42:b8:ad:d5:98:06:03:
de:46:fa:57:5c:74:f0:1f:34:85:44:54:e3:da:54:22:0f:58:
40:4d:fa:35:62:82:83:6e:ca:af:bc:18:bc:09:45:c6:fb:a7:
b8:8f:c1:76:31:00:b6:29:f6:fc:2a:3e:91:af:25:ab:96:61:
94:1b:d5:ae:59:a3:e9:03:af:b2:77:2b:80:29:e9:a7:ba:8d:
a7:ed:df:52:ce:6b:c4:0b:c8:e1:68:72:b0:52:2d:43:36:02:
26:da:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:47:14 2026 by rpki-client