Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: Y4EZKGxk3nAwHnR+y56ALj1IeyQRDsNEQstgjkGYRLM=
Subject key identifier: 18:8F:87:6C:70:23:A0:04:72:A3:64:91:22:16:24:1D:15:FE:47:54
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019FAC7691D641F8298E7BF29FE74E1989B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 06:01:19 +0000
Manifest this update: Wed 29 Jul 2026 06:01:19 +0000
Manifest next update: Thu 30 Jul 2026 06:01:19 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: LHMxSdXE6oU+OzzjuocnW8fSMH5/e/7K82jPG2odGX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:91:d6:41:f8:29:8e:7b:f2:9f:e7:4e:19:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jul 29 06:01:19 2026 GMT
Not After : Jul 30 06:01:19 2026 GMT
Subject: CN=188f876c7023a00472a364912216241d15fe4754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:29:ed:28:f5:58:bc:40:ab:88:60:1b:2a:
bd:4f:cc:ba:81:fc:5a:42:b1:d1:a1:ca:82:14:e2:
51:52:7c:e3:2d:8f:b8:51:43:9f:09:55:d8:17:5e:
f5:7f:2c:87:09:b2:23:8b:46:87:e0:a3:8c:bb:20:
48:f2:b3:37:93:1a:23:80:7f:23:23:93:3e:05:9c:
5b:87:d4:ee:a3:e1:e4:c0:48:f7:18:5c:5a:b2:9b:
f1:12:11:c4:6c:58:ec:6f:00:00:10:2c:7e:b2:56:
0a:56:70:81:e9:37:2f:fd:89:3b:9a:7f:64:42:ee:
0a:2d:60:1f:95:b8:5a:f3:01:48:53:2c:73:34:ee:
d6:37:c6:db:81:5d:c2:a6:70:8b:2e:34:85:59:83:
0a:e2:ad:ff:e3:ca:80:31:80:60:60:d9:06:f7:f0:
40:d9:2e:8c:43:16:8b:70:62:d2:4f:0e:5c:44:06:
8f:aa:f8:22:3f:4e:8a:d1:a8:20:bb:cb:cc:18:77:
1b:8f:97:5a:86:9d:d9:d6:ea:f6:b0:d4:99:b8:7c:
e0:f4:85:8e:21:41:63:2e:6b:68:06:d9:55:f9:5c:
0f:ee:eb:8c:d5:e0:c0:eb:ee:43:20:2e:e6:5b:4b:
3b:b3:a4:56:c6:c6:f1:1b:ae:a3:3b:f9:d3:50:8a:
eb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8F:87:6C:70:23:A0:04:72:A3:64:91:22:16:24:1D:15:FE:47:54
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a3:a8:00:05:3a:db:1c:0b:08:96:be:30:ba:06:cb:95:40:
d9:9a:9d:af:93:ea:59:5c:92:23:97:7b:62:26:df:9f:65:95:
39:a4:44:cb:31:94:b8:62:00:54:36:91:e4:cf:b4:b0:8c:b0:
d4:78:07:9f:c0:df:9d:1e:ae:36:c1:99:be:19:88:93:3c:3d:
30:62:90:69:ee:65:13:c5:58:bb:44:71:99:07:ed:2a:d7:ad:
40:23:d4:e6:89:79:5f:13:f0:47:50:32:82:6c:cc:ab:54:a9:
6e:71:d4:f3:b4:14:d2:c5:b5:d2:36:71:14:54:20:19:23:91:
51:70:50:ff:9e:e6:bd:9e:1b:25:17:b8:ef:c6:9d:22:72:fd:
b6:2c:55:0c:8f:ca:cb:9b:1c:f4:30:ac:89:72:15:09:f3:4c:
e4:28:c0:1c:0a:8c:ad:08:9c:56:d4:df:2b:75:28:90:d9:13:
54:f1:6c:12:f1:2b:92:88:25:bd:f4:7e:a5:15:4f:93:d3:8e:
cb:e7:2e:8a:7d:45:f1:0f:9d:6c:9d:bc:ab:93:1e:be:05:49:
d5:96:80:1c:74:23:be:19:c2:7b:8f:62:89:30:01:e7:a5:5d:
da:e1:8e:3d:8f:47:19:cd:2b:e5:8c:f8:80:c8:01:7a:17:1f:
55:21:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:39 2026 by rpki-client