Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: eefAyuS5KW6+qUpmWnqaniHSlSARg5QcqidM/ZwQ+4g=
Subject key identifier: 55:E1:DC:C2:82:7F:87:EA:9F:D2:DD:92:C7:D6:6B:A5:0E:36:CA:66
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019D996279C80491BA5E52DB4027C4FD34C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 03:01:00 +0000
Manifest this update: Fri 17 Apr 2026 03:01:00 +0000
Manifest next update: Sat 18 Apr 2026 03:01:00 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: q8IjhzTWX9VXsDfmWXoCcYw3FCIF6bV5Zy+OU7wXLUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:79:c8:04:91:ba:5e:52:db:40:27:c4:fd:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Apr 17 03:01:00 2026 GMT
Not After : Apr 18 03:01:00 2026 GMT
Subject: CN=55e1dcc2827f87ea9fd2dd92c7d66ba50e36ca66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:41:f3:79:6e:25:e9:3f:15:84:95:af:69:
86:e7:ce:de:02:6b:cd:26:95:be:4f:92:c1:3b:d8:
66:88:5f:4c:06:11:52:58:ae:2a:e9:3e:2f:b0:8e:
6e:5b:ba:63:4d:f7:4f:58:8f:3d:c4:85:e6:5b:dd:
d1:d8:8b:74:1e:62:ed:70:09:f0:db:01:39:4f:d2:
d4:23:ed:f0:78:05:8b:63:84:bd:94:7f:7d:21:23:
58:b4:4f:8c:cb:37:c4:65:25:ec:5b:21:ea:a7:8a:
49:e9:a4:eb:07:1f:c9:8e:d7:12:d8:59:01:70:eb:
c7:44:80:8c:fb:06:e7:20:80:b7:18:47:0f:95:44:
ff:06:1f:c3:13:d8:86:52:e4:71:12:8e:4c:cb:2e:
af:00:f9:52:08:93:bc:0f:a5:4a:89:65:1b:f6:49:
f4:e5:b2:25:6a:7c:f4:0e:06:1d:fa:36:27:89:a2:
85:3b:81:b2:26:e4:b9:22:83:17:a9:2b:3c:18:45:
fd:16:04:76:d5:5a:24:dc:07:2a:81:79:a5:21:ea:
29:15:b5:3f:a5:63:61:f5:4e:0b:5d:14:c0:11:11:
da:a8:18:0d:62:50:d7:96:06:32:be:54:78:3f:38:
a3:77:38:28:84:d2:48:a7:a5:8b:73:94:8e:03:4a:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E1:DC:C2:82:7F:87:EA:9F:D2:DD:92:C7:D6:6B:A5:0E:36:CA:66
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a5:8a:1a:20:eb:eb:0d:c6:6e:a9:9a:26:1b:6d:95:f1:85:
eb:2c:9f:21:19:c8:91:e4:1a:3a:9b:d1:ef:cf:ce:4b:16:5c:
ae:3b:ef:e8:d1:4f:cf:8b:7e:71:08:1d:e9:78:ff:21:36:85:
a5:ad:8c:67:ca:67:b0:56:30:cd:8e:c7:38:d4:89:bb:38:f0:
a5:db:15:27:e0:7d:aa:17:04:8e:9f:f1:3d:b2:d5:cb:76:d5:
fc:f7:96:5f:0e:ee:78:9b:71:20:86:f6:f2:6d:94:78:71:8d:
80:73:cd:54:6f:e1:fa:83:61:6b:55:1a:73:e9:de:98:3c:b1:
81:8b:c6:05:ab:04:bb:b7:58:93:b0:6a:f7:6a:51:e6:21:0a:
84:4c:87:5a:75:47:84:59:88:3a:d5:1a:05:d3:58:a5:67:17:
46:65:5a:8e:09:0a:9a:ca:79:b2:77:a6:47:e8:d5:e1:56:1b:
6f:a5:5d:75:6a:ea:ac:cc:b7:78:9b:3d:3f:2a:65:f6:03:04:
86:82:ee:1e:00:20:4e:13:d8:31:a5:d8:f9:a4:35:a3:22:35:
9e:d3:7f:ff:c6:ef:38:d0:d8:e1:93:7f:7d:fb:61:74:ff:b0:
e8:33:16:dd:86:2e:c6:c8:29:58:e8:b8:f8:bc:f5:00:22:81:
76:1b:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:02 2026 by rpki-client