Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: rXMac1U+Boo7Yv/7CchtAsDMX30iytxADGQ6Znzt+8E=
Subject key identifier: E0:07:25:E0:47:70:89:B2:D9:63:D0:5B:CC:4E:82:A9:2B:84:48:2A
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 019DA29C3EA58A72D715E760E6FA913FA0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 18CA
Signing time: Sat 18 Apr 2026 22:00:41 +0000
Manifest this update: Sat 18 Apr 2026 22:00:41 +0000
Manifest next update: Sun 19 Apr 2026 22:00:41 +0000
Files and hashes: 1: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
2: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
3: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: LCu7F5gGKl2zeph2PD3qOVWAu7wJVtcNyhRomYuoJoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:3e:a5:8a:72:d7:15:e7:60:e6:fa:91:3f:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Apr 18 22:00:41 2026 GMT
Not After : Apr 19 22:00:41 2026 GMT
Subject: CN=e00725e0477089b2d963d05bcc4e82a92b84482a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:45:69:2e:d2:37:3b:35:76:eb:9a:d4:f1:91:
0e:05:e5:99:a7:99:99:cd:9e:fe:e0:45:45:f7:cd:
7e:a4:7e:7d:4b:8d:61:8f:bc:bc:e8:9c:33:08:8a:
66:e3:b6:95:67:3e:bc:fd:25:b1:b6:a1:72:a8:54:
5f:a4:77:b3:54:46:e1:b4:58:54:bf:0a:cc:42:46:
58:c0:4d:d3:7a:df:b1:85:3a:cd:48:12:7e:b4:a1:
0a:05:be:c0:68:94:fc:12:c2:fc:e9:1d:20:2a:6f:
b5:36:42:63:24:8d:a7:f6:68:a7:af:31:bf:9a:2e:
a4:ef:f6:96:c1:71:d1:47:24:d0:95:86:88:78:71:
6a:43:d4:d0:9f:82:65:9a:43:aa:25:e9:ae:fb:3e:
8a:7a:c6:65:3b:49:52:f7:1f:51:5b:7d:38:e0:cd:
4c:c2:c0:49:36:59:af:90:0c:16:9a:22:18:e8:07:
64:2c:a4:5f:d2:96:70:6e:f0:df:47:d1:03:24:27:
23:9e:c9:fc:3f:86:73:0a:b4:85:9b:4a:fc:09:ca:
fd:12:bf:28:ff:47:b8:da:2a:92:a9:b8:92:9b:2e:
02:db:13:22:05:49:52:9a:b2:26:18:ad:7e:a5:67:
ef:a3:be:78:b1:9d:3f:c1:cc:16:c3:05:e1:81:47:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:07:25:E0:47:70:89:B2:D9:63:D0:5B:CC:4E:82:A9:2B:84:48:2A
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e3:16:5f:95:4a:89:fb:fd:50:37:c9:10:28:ef:5c:80:61:
23:9c:f5:32:99:89:9f:f3:af:4f:6f:9d:3c:9f:c3:a9:9f:34:
df:2d:a2:3b:dd:a2:da:7d:06:54:ce:1d:31:6a:16:00:e1:b4:
00:33:25:28:c9:bf:61:d0:9a:8e:a2:57:7d:89:68:be:84:b0:
80:40:38:33:0c:96:d2:a8:50:1c:2b:93:23:30:3e:e3:a2:16:
fb:23:44:02:2d:c8:97:9c:4e:bf:ff:47:56:58:16:94:a9:c9:
fd:d0:52:73:1e:f1:a6:62:b8:dd:34:21:0a:e5:6b:28:75:94:
bd:6e:d4:e7:e3:35:e0:ba:73:df:ec:42:6d:67:55:9a:1d:56:
47:9b:1e:85:c3:55:90:3c:21:09:14:84:16:ff:ac:f7:e9:3d:
24:af:19:17:55:b0:0d:ba:c6:3c:cd:61:a9:98:a6:1c:17:61:
88:d6:ef:51:ce:8d:53:ba:ae:52:14:2f:05:23:39:8d:28:4b:
b7:80:b2:90:47:51:40:5e:9d:b0:22:5f:95:81:9b:ce:53:8d:
91:4e:3e:2e:54:8e:57:cd:ea:6e:96:07:e6:ce:fb:44:7e:4e:
46:d6:d6:b0:a6:e8:93:0e:5c:a1:e0:6b:9f:5f:7a:cf:49:71:
c2:e4:7d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:54:12 2026 by rpki-client