Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: wMUaa6Ux2XEZj/9D54tqtUUZDoF1A2kx57rECJ/rHn4=
Subject key identifier: 73:8F:6B:6C:DB:12:CE:2A:7F:97:50:9B:F7:F8:F5:D8:45:F9:EF:A8
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 019CB8F06C8EC2CA7B7DEAE23EB822066A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 1851
Signing time: Wed 04 Mar 2026 13:01:30 +0000
Manifest this update: Wed 04 Mar 2026 13:01:30 +0000
Manifest next update: Thu 05 Mar 2026 13:01:30 +0000
Files and hashes: 1: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
2: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
3: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: 4OwJrzTH7fAPNczncUk8dAKtM7FFbUpxvV7HK5ogMDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:f0:6c:8e:c2:ca:7b:7d:ea:e2:3e:b8:22:06:6a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Mar 4 13:01:30 2026 GMT
Not After : Mar 5 13:01:30 2026 GMT
Subject: CN=738f6b6cdb12ce2a7f97509bf7f8f5d845f9efa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:fb:44:10:94:b4:62:61:00:7d:36:7c:2b:
7d:93:c5:c6:82:ad:95:0e:3d:fe:51:12:ac:9f:44:
74:64:54:7f:d7:a3:53:a3:62:48:e7:17:7b:50:6f:
c9:82:d3:77:0e:00:85:72:6f:44:e1:aa:49:69:c8:
9d:01:1e:28:ac:70:2b:25:64:7f:fa:d8:d8:12:1a:
3e:44:a8:c4:83:bf:69:1e:0e:fc:07:0a:02:44:4b:
58:9e:b9:07:9c:4b:01:a5:a2:30:28:6d:ac:52:65:
55:fe:c4:37:34:bd:84:64:9d:c3:e0:bd:0b:ad:b7:
fc:99:35:bf:6f:64:7f:d4:04:82:9e:47:a4:bf:a1:
49:98:57:5f:71:ca:87:b1:c3:9f:df:d3:ba:3b:32:
23:c2:eb:50:c0:2b:86:1b:db:de:b9:07:ef:e9:e4:
d5:93:b9:a9:03:74:f3:3a:c2:14:de:84:1a:6a:3c:
8d:2c:29:c2:ba:cb:37:93:17:5b:0a:07:48:10:31:
ca:93:ea:d7:38:a7:89:a5:28:70:49:46:90:a4:a3:
37:35:99:25:c0:d2:c3:00:14:c9:9b:0e:e0:84:08:
53:9d:db:fd:bb:63:b3:a0:3a:8f:ca:07:00:29:ba:
cc:0b:70:a9:b5:2a:23:b5:2a:9c:a1:e6:a8:e7:ca:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:6B:6C:DB:12:CE:2A:7F:97:50:9B:F7:F8:F5:D8:45:F9:EF:A8
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2a:8e:31:06:75:0d:39:fa:8b:f5:54:5f:22:a6:54:ba:83:
b5:03:56:07:4f:fd:9c:fc:b3:ca:d1:4b:08:c4:b9:d1:d2:e9:
90:24:61:84:c3:8c:51:ad:50:2c:35:e0:c5:ae:3a:49:dc:31:
55:95:9d:bf:a2:99:0e:c9:b6:9b:0a:11:e7:8e:63:bf:61:b1:
b2:73:d0:7a:e6:98:91:70:31:68:2d:d8:52:31:45:c8:a2:c9:
9e:4c:db:16:78:fc:89:b7:0f:4c:d8:44:35:b3:c4:d5:ee:ba:
41:78:f6:cd:98:f1:af:7e:ac:78:56:54:59:2f:0b:e5:54:a7:
10:8a:bb:5d:27:fd:35:6b:e7:a3:3d:36:95:66:2a:47:7c:9f:
55:15:38:08:4c:94:a6:4f:6e:c9:75:1b:3d:c2:44:0f:ad:96:
da:fe:3a:15:bb:65:b8:71:4a:b1:69:4d:54:35:fd:84:5b:1b:
80:fa:e7:82:68:dc:0f:95:0c:89:85:95:01:ed:ba:1a:3f:3b:
5f:bd:fe:42:9a:79:b4:f0:e2:3a:e8:f1:e9:17:60:4e:f8:bf:
e7:f0:e7:fd:b5:a9:59:94:c1:45:9a:54:55:92:cb:7b:87:d2:
ee:25:c9:9e:64:fd:34:3d:13:56:59:bd:1a:cf:c7:93:1c:d1:
bb:c0:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:19:50 2026 by rpki-client