Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: 09rZzf0QX7iFfNkX60CR+rKfKpW2duly/6XRS1oqYl8=
Subject key identifier: 86:5F:56:B7:3C:B8:DF:A4:93:2D:84:A3:15:7F:D2:6E:CC:26:8B:BD
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 01A0CC3576D1CE2BD04EBAAE07C9567CF9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 03:00:50 +0000
Manifest this update: Wed 23 Sep 2026 03:00:50 +0000
Manifest next update: Thu 24 Sep 2026 03:00:50 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: ZakTedk05GyyT/O//8LC3xRkNUUHidnuArRx6Z3nRAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:76:d1:ce:2b:d0:4e:ba:ae:07:c9:56:7c:f9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Sep 23 03:00:50 2026 GMT
Not After : Sep 24 03:00:50 2026 GMT
Subject: CN=865f56b73cb8dfa4932d84a3157fd26ecc268bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:6c:6a:47:7f:a4:ee:0c:21:b2:30:7a:9c:
0c:5a:1f:7f:55:e5:a1:aa:ca:16:a8:71:7d:bf:a3:
46:b3:4a:f9:b6:a8:2c:68:d5:1d:5e:ae:b8:e9:cf:
df:13:06:06:2c:0e:df:a3:16:fa:13:e8:3a:f0:0c:
9b:ee:da:28:10:91:11:9a:03:9f:dc:fd:36:60:ae:
e0:ea:c7:54:02:65:0b:70:ae:3d:50:2a:3c:50:33:
67:a2:66:0d:6b:07:a3:37:ba:a6:0d:e6:57:e6:78:
22:58:f3:74:00:0e:28:06:a0:bc:25:2b:df:1f:a1:
31:56:9f:e9:6c:04:1e:d2:b1:06:5f:fd:bb:80:c5:
d5:4a:2f:df:1d:96:ec:d0:f9:9c:f9:f6:00:5f:39:
31:34:7b:c3:56:2b:c6:07:b6:5a:26:6f:9f:d2:10:
50:21:66:18:38:69:99:e7:47:77:16:ff:68:43:32:
20:bd:78:e5:a1:b5:9a:03:c1:b2:ab:dc:19:15:34:
3a:23:d0:d1:ad:08:ce:5f:25:5f:7d:75:cb:6b:65:
00:4e:a6:d8:71:3b:0d:e6:96:f0:80:78:8d:f9:b4:
ca:46:3f:db:0a:80:b4:0b:0c:2d:a2:5f:e7:70:84:
14:fc:0f:fa:49:f4:f1:bc:22:e3:99:d7:8a:74:d9:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5F:56:B7:3C:B8:DF:A4:93:2D:84:A3:15:7F:D2:6E:CC:26:8B:BD
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1f:ac:ef:a0:a3:13:bb:1d:d1:31:84:b5:e5:62:18:8a:53:
c7:a6:52:a2:72:2c:b1:79:72:85:f6:8d:5d:e8:4a:f3:98:19:
21:87:54:4d:26:f7:b6:37:92:e6:9a:85:a8:ec:11:85:9c:ba:
48:da:62:f9:f2:6b:25:51:3d:21:17:67:d6:9f:07:ae:9c:ba:
ef:3d:9c:8c:26:7d:52:99:3f:ce:b8:8b:f9:78:eb:a0:6d:bc:
a4:6b:af:4c:d8:55:44:0b:b7:4f:03:97:dc:93:14:2c:9e:23:
0c:3d:77:df:bc:1b:53:04:6d:be:fe:a3:0d:e9:69:bf:36:47:
68:25:19:4c:e9:ea:5d:1c:13:29:3d:a8:8c:94:d8:1f:33:2a:
de:1b:fd:93:e0:18:26:b0:05:8d:f9:66:03:90:c1:b9:ca:3b:
84:4c:03:9a:32:eb:1f:65:d2:d5:5d:ba:c0:6d:76:ce:0a:82:
cb:c6:5c:36:5c:c2:ba:e1:c2:64:b7:97:b2:59:96:5e:a3:05:
a4:8a:06:48:e0:5a:6f:c3:32:b2:7a:3b:d4:fe:d8:1a:31:fd:
69:cc:77:9c:53:ea:56:88:8a:c4:b9:8d:b5:31:a9:01:68:9d:
e2:69:47:c0:ca:51:b2:61:2d:7f:59:ad:1a:ec:80:6c:7b:03:
ae:e2:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:57:20 2026 by rpki-client