Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: 1YXom5PzmX+zr9CfQ+Duck+F9AQ8fAALEdVg9rjwstk=
Subject key identifier: F2:E3:F4:EE:83:DD:85:12:60:31:81:59:4C:3D:E4:8F:E1:89:B5:69
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 019E8E3716C7ADBA6BA28AA7FF91F3DD5FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 1944
Signing time: Wed 03 Jun 2026 16:00:35 +0000
Manifest this update: Wed 03 Jun 2026 16:00:35 +0000
Manifest next update: Thu 04 Jun 2026 16:00:35 +0000
Files and hashes: 1: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
2: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
3: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: F2yFbszUyQ4eF2l2htSUfuYfWYVThc4VWNdU81m/Fds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:37:16:c7:ad:ba:6b:a2:8a:a7:ff:91:f3:dd:5f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Jun 3 16:00:35 2026 GMT
Not After : Jun 4 16:00:35 2026 GMT
Subject: CN=f2e3f4ee83dd8512603181594c3de48fe189b569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8c:3e:38:92:71:a9:15:90:fd:54:68:d4:2c:
df:98:78:98:00:3d:0b:5a:8a:87:a0:58:ff:c6:48:
51:df:6f:35:c8:09:87:5d:14:31:3c:5d:0a:0d:e6:
63:fc:2e:08:99:87:fb:81:5d:74:8a:4a:77:32:35:
b2:52:ac:b8:63:c0:2b:ec:92:36:f6:9a:e1:e0:5d:
24:4b:09:a1:81:18:74:84:ea:08:c3:f1:e7:19:c3:
20:8a:c6:7b:36:94:da:4a:1b:c2:5b:7e:b6:b0:71:
bc:0c:88:1f:38:eb:de:77:0f:b8:60:cf:be:32:0a:
b7:68:83:cf:40:b5:9a:23:9d:28:48:aa:1e:a8:4d:
ed:ed:a5:8d:37:e4:38:15:0e:35:f3:2e:8d:0f:41:
75:98:f0:89:2d:d7:4f:a6:03:c5:45:56:cc:2e:b4:
33:83:ea:4b:1f:d0:4f:0f:12:0f:16:d8:77:6e:68:
ae:d3:c3:79:60:99:9f:bd:ef:8c:b3:f8:27:44:6f:
c7:ff:3c:cc:f7:54:90:e7:79:f4:e5:df:1b:a3:05:
26:62:37:5d:a8:66:45:da:da:47:4c:e2:0b:66:1f:
f4:51:4c:63:86:a2:c0:2c:33:c2:7a:c6:f2:20:a5:
00:7a:54:4f:88:9a:63:69:dc:44:06:4c:1c:76:6b:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E3:F4:EE:83:DD:85:12:60:31:81:59:4C:3D:E4:8F:E1:89:B5:69
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e2:bd:88:14:a1:6a:97:b7:a6:bb:8a:b2:76:e3:8c:56:88:
ab:62:58:7d:5c:b5:2a:1b:1b:84:ec:d8:bb:29:b1:08:0c:a2:
34:30:23:90:a3:8e:70:ca:fa:17:d6:1a:20:d1:d3:31:74:d3:
f3:42:00:56:b5:dd:e5:bc:76:b3:e0:b8:19:83:85:62:c4:48:
86:28:f8:d4:e3:a1:b9:68:44:c9:c6:88:08:e6:20:43:68:1d:
8c:8d:62:fd:ba:ec:26:aa:67:d6:75:bb:c1:6e:e2:c3:1c:3a:
31:b8:03:c0:0c:c8:1f:56:82:3a:39:99:71:64:f3:1f:56:7d:
ba:4d:26:27:35:e4:41:4d:89:e9:88:78:c2:e0:80:98:16:05:
26:09:c1:9a:01:31:02:32:92:2f:44:83:fd:22:62:32:4f:28:
3d:79:47:61:35:7d:c1:e8:c1:e6:25:31:6c:fa:71:97:93:fb:
0c:54:56:4c:0c:e9:b2:99:b2:57:cf:52:76:64:03:68:09:48:
98:87:3d:2d:1c:a1:c9:74:60:3a:88:0a:58:31:bc:f9:1e:f7:
45:ec:05:1a:cb:da:64:e8:d3:9b:38:0a:98:f1:70:be:03:74:
ba:70:91:82:9b:bc:32:02:38:ce:3e:f8:85:8d:ef:36:25:35:
d5:2c:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:22 2026 by rpki-client