Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: uzlMM1n6QYRm5OLnYDPWl+nrn28Km7eUdsJJJZd+lQ8=
Subject key identifier: E4:C0:A8:EF:4B:6B:75:59:BE:85:95:71:6E:20:B3:79:49:30:44:B2
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019CABDA04D0C9038F96D4B9CE3C8D3868CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:57 +0000
Manifest this update: Mon 02 Mar 2026 00:01:57 +0000
Manifest next update: Tue 03 Mar 2026 00:01:57 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: QswckE/mDkq+iZAOv/0oJzZnLdJETx8TVb5jJxAF3rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:04:d0:c9:03:8f:96:d4:b9:ce:3c:8d:38:68:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Mar 2 00:01:57 2026 GMT
Not After : Mar 3 00:01:57 2026 GMT
Subject: CN=e4c0a8ef4b6b7559be8595716e20b379493044b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:e8:5b:38:b0:f5:b9:ee:d4:e2:a8:a6:f9:
a2:aa:4a:de:02:1d:f5:3c:8d:3e:b6:13:e0:bb:40:
d4:25:ee:bb:8f:59:dc:26:e1:63:ab:d2:8e:67:46:
88:c4:5d:ba:02:62:3e:b5:77:ea:e1:3f:6c:e0:40:
9d:41:ee:67:2a:2c:16:fe:f8:bb:34:e4:7c:4b:fd:
70:08:3c:0d:b9:7b:46:53:95:02:1e:56:d5:7d:26:
8e:f5:15:72:3e:1d:c5:07:74:28:6a:f5:b7:33:95:
d6:ad:1f:26:21:36:af:7d:aa:96:06:e4:da:01:1f:
c3:8f:4b:7a:0d:1d:f0:77:0f:06:ab:98:a9:6b:8e:
10:58:a3:a7:08:25:72:cb:cc:e7:89:77:49:ad:8d:
63:1a:c6:26:00:ae:bb:62:25:e6:27:49:49:8b:40:
a1:ee:a0:1b:89:67:5d:39:2b:3e:37:26:79:62:c5:
24:22:64:0b:1c:b8:c8:39:91:64:4c:92:ff:bd:76:
34:b2:7f:96:a6:76:23:98:bc:f4:98:8e:5e:fb:85:
bb:dd:5c:37:e8:b2:8b:cc:83:32:fd:1e:a9:76:9a:
65:b1:1d:df:3b:b0:01:da:47:55:3f:c4:63:5c:7f:
4f:ff:89:d7:db:38:aa:4a:a3:39:7d:19:0a:66:7b:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C0:A8:EF:4B:6B:75:59:BE:85:95:71:6E:20:B3:79:49:30:44:B2
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:68:ec:4e:d1:8a:30:12:09:6e:6a:66:30:8a:a5:11:e0:71:
65:95:91:c8:ee:75:fe:5d:52:6f:ad:26:d5:4c:ec:f7:b3:55:
97:af:0f:78:94:ae:12:e6:16:9b:1c:5b:ed:52:03:79:3e:12:
97:c7:da:90:23:6b:f5:2e:1a:19:d6:68:ba:be:c3:e8:c1:79:
11:c0:2e:08:36:de:aa:fe:3b:c5:3c:68:67:6f:88:82:42:10:
99:27:e2:e0:e5:ff:3d:76:e3:82:38:37:f5:ab:d6:2b:33:e3:
66:52:62:97:5e:a6:e1:dc:e3:36:db:dd:38:90:6b:0f:24:02:
8b:f2:72:96:4e:09:0d:22:58:a9:25:79:ff:b4:2c:58:7d:86:
47:b6:2c:45:17:b3:4b:4d:d9:38:cb:1f:6e:0a:c3:16:2b:69:
07:4a:c9:39:df:28:9a:97:c9:c0:5b:40:20:a5:c3:c4:4f:bf:
2a:74:b2:36:ae:39:70:09:24:fd:e6:e2:da:de:51:bf:e8:2e:
73:d0:c8:6c:cf:fc:90:0d:10:83:cf:10:c0:f4:28:77:79:2b:
cc:3a:d0:a9:22:4a:e6:92:88:a9:58:13:0c:b6:a1:95:3a:a6:
5e:93:a3:b4:54:51:11:ad:88:aa:bc:13:22:dd:f7:0c:c1:0b:
9e:68:3a:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2gTQyQOPltS5zjyNOGjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZGRhZWIxNjRlMzk4MjE0YTE3MWEwNDEwZTZiMDIzMmQ2
NDJmNTAwHhcNMjYwMzAyMDAwMTU3WhcNMjYwMzAzMDAwMTU3WjAzMTEwLwYDVQQD
EyhlNGMwYThlZjRiNmI3NTU5YmU4NTk1NzE2ZTIwYjM3OTQ5MzA0NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA3oWziw9bnu1OKopvmiqkreAh31
PI0+thPgu0DUJe67j1ncJuFjq9KOZ0aIxF26AmI+tXfq4T9s4ECdQe5nKiwW/vi7
NOR8S/1wCDwNuXtGU5UCHlbVfSaO9RVyPh3FB3QoavW3M5XWrR8mITavfaqWBuTa
AR/Dj0t6DR3wdw8Gq5ipa44QWKOnCCVyy8zniXdJrY1jGsYmAK67YiXmJ0lJi0Ch
7qAbiWddOSs+NyZ5YsUkImQLHLjIOZFkTJL/vXY0sn+WpnYjmLz0mI5e+4W73Vw3
6LKLzIMy/R6pdpplsR3fO7AB2kdVP8RjXH9P/4nX2ziqSqM5fRkKZnuTJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTAqO9La3VZvoWVcW4gs3lJMESyMB8GA1UdIwQY
MBaAFKLdrrFk45ghShcaBBDmsCMtZC9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzkt
MTEyZTExM2JiN2I3LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzktMTEyZTExM2JiN2I3
LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGjsTtGK
MBIJbmpmMIqlEeBxZZWRyO51/l1Sb60m1Uzs97NVl68PeJSuEuYWmxxb7VIDeT4S
l8fakCNr9S4aGdZour7D6MF5EcAuCDbeqv47xTxoZ2+IgkIQmSfi4OX/PXbjgjg3
9avWKzPjZlJil16m4dzjNtvdOJBrDyQCi/Jylk4JDSJYqSV5/7QsWH2GR7YsRRez
S03ZOMsfbgrDFitpB0rJOd8ompfJwFtAIKXDxE+/KnSyNq45cAkk/ebi2t5Rv+gu
c9DIbM/8kA0Qg88QwPQod3krzDrQqSJK5pKIqVgTDLahlTqmXpOjtFRREa2IqrwT
It33DMELnmg6hg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:20 2026 by rpki-client