Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: UmYAYX61A62mv13AJ1Bpv2q+RCHOourzRNRgSlkY76c=
Subject key identifier: 77:D9:8E:68:C5:C4:56:A7:18:A8:05:33:C8:12:21:72:8D:D9:CE:A2
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019EC0DBA8D7FCA113FFCB39028CDCD59997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 12:01:21 +0000
Manifest this update: Sat 13 Jun 2026 12:01:21 +0000
Manifest next update: Sun 14 Jun 2026 12:01:21 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: iioOVEao9hrCD6emClaE8tW0Jyhs9IJEDTs132s+QyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:a8:d7:fc:a1:13:ff:cb:39:02:8c:dc:d5:99:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jun 13 12:01:21 2026 GMT
Not After : Jun 14 12:01:21 2026 GMT
Subject: CN=77d98e68c5c456a718a80533c81221728dd9cea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:3d:fa:b5:25:a0:72:66:16:2b:59:cc:8a:
66:a8:f7:4e:0e:bc:16:d6:b3:a4:e5:45:d1:45:62:
09:2d:73:94:3c:26:2d:2e:cd:6b:44:f7:95:92:a6:
ba:ba:fc:45:e5:70:bd:46:50:c6:27:0c:f7:0a:3b:
97:f9:a3:1c:87:21:04:0c:0a:97:06:f2:cb:5b:5d:
28:92:22:83:5a:47:b8:8e:33:b1:3a:cd:99:dd:38:
8c:09:d6:4d:ea:28:d5:52:a2:80:fc:17:a4:f4:9c:
01:1a:a3:fd:45:82:bd:e5:3f:45:37:6a:b9:ae:a7:
54:13:bb:bb:9d:4c:6d:88:6c:df:9c:63:b4:cf:da:
18:f1:cf:e9:82:05:21:a5:d6:9b:68:13:01:70:68:
2b:04:73:b4:0e:c1:d6:a7:36:df:10:be:db:dc:09:
83:44:1f:05:20:25:1c:c0:9b:50:39:e3:38:c6:3b:
f0:ae:4b:19:c3:2d:f5:96:15:6b:3d:b2:24:b9:51:
57:46:cb:3e:a1:4e:20:57:8b:38:74:ae:9e:2a:c7:
c6:6c:03:e2:81:c7:9b:1c:45:e0:7f:b7:d5:85:55:
61:e4:e3:1d:f7:57:85:42:82:09:4b:71:85:7c:1c:
b2:19:d1:0a:b8:7f:12:2d:2a:8a:43:cd:8c:2e:1b:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D9:8E:68:C5:C4:56:A7:18:A8:05:33:C8:12:21:72:8D:D9:CE:A2
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9d:cd:10:fc:6b:23:d4:6f:f1:a9:c3:93:41:22:e6:c0:11:
01:75:bb:79:e2:87:d9:68:6e:c4:8c:5a:47:48:a4:53:c8:38:
45:55:cd:4b:c7:e3:34:fd:1c:2b:7f:ac:86:2a:a9:b2:db:ef:
dc:c0:33:1e:c8:ae:52:d8:c2:9b:41:bc:5e:6a:5d:8d:ae:81:
30:53:5e:54:27:bd:ba:c2:7c:0c:2e:8d:0c:65:f8:c1:17:e9:
39:1d:cc:73:a5:d7:83:77:b8:f5:73:3f:cb:10:ae:54:57:40:
72:63:53:1a:3d:b5:15:ff:eb:ca:65:91:6e:74:73:72:d2:b6:
f7:d8:56:81:d6:ab:88:c9:3d:5b:49:ef:7f:68:90:2c:7c:18:
2e:71:1b:45:1e:2a:b8:de:93:c9:26:0f:07:18:48:6a:fe:13:
b5:b7:06:10:5d:a3:8e:e0:a8:67:34:33:1d:db:8b:1b:fc:2b:
25:48:07:8e:31:fa:c8:da:d1:af:74:11:93:58:c6:9f:22:08:
51:24:21:8d:a6:8d:5a:d7:29:98:87:1b:d8:6b:a3:19:e1:4c:
46:50:3d:25:04:dc:42:7b:0b:a4:8f:16:48:1b:a0:43:4f:2d:
0b:0c:52:a0:1b:1a:df:af:52:0d:61:2a:f2:e0:a9:b6:41:e6:
b1:08:15:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:18 2026 by rpki-client