Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: bL8FNdCUoklhZHBMBnCogViOJEKzArkgd/sGeFPBV8c=
Subject key identifier: 3C:59:FC:6E:CE:3A:74:58:22:55:19:B6:E5:A1:E6:09:CF:71:75:5E
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 01A15BC2A400604C5391118E7AD5071459C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 1AB8
Signing time: Wed 21 Oct 2026 00:00:44 +0000
Manifest this update: Wed 21 Oct 2026 00:00:44 +0000
Manifest next update: Thu 22 Oct 2026 00:00:44 +0000
Files and hashes: 1: APlmnKHZODCNSunvzWMmlebxZbo.roa (hash: QAoewBI2F8XDmieB1npAXSt/XAawfhTLWLPzLSSKEr8=)
2: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
3: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
4: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
5: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: w9uzATvShwMs3ADC1szGybOQwBvpYEOycNP4Uid7Zfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:c2:a4:00:60:4c:53:91:11:8e:7a:d5:07:14:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Oct 21 00:00:44 2026 GMT
Not After : Oct 22 00:00:44 2026 GMT
Subject: CN=3c59fc6ece3a7458225519b6e5a1e609cf71755e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:39:9e:0b:5e:fd:17:aa:1a:fc:75:51:68:
c6:a1:f0:28:cb:40:23:c7:72:2e:e8:d2:89:17:0a:
41:82:22:c0:c5:18:ab:7c:66:ae:46:cf:58:17:0f:
6e:bd:6b:2e:64:27:79:2e:e2:89:45:e1:e0:3a:0a:
44:fe:8e:74:50:4b:4f:e2:b1:c4:03:f6:43:c9:56:
c5:71:4d:fa:cf:e7:52:d2:a4:41:07:76:81:0c:af:
16:2d:b8:44:af:8d:a1:9a:92:ed:0b:4a:de:3d:a9:
34:9c:f4:e5:01:98:f2:b1:2a:6e:a4:20:99:43:6a:
85:33:fc:b8:d0:7f:61:7c:37:ef:d4:37:e4:fa:3c:
34:73:22:b4:2d:43:1f:96:df:71:e5:45:84:97:77:
c7:e0:d6:67:ca:ec:63:2e:ff:ea:1a:83:e0:d6:8d:
18:39:22:e2:81:34:1f:89:59:94:e3:4a:d2:a7:02:
8a:01:3a:88:ce:d1:51:bc:3d:b3:f0:e4:97:a5:25:
38:22:47:95:48:1c:b9:b3:1e:2f:ac:e9:28:89:86:
6e:c1:5d:50:0f:7e:68:e9:72:4d:4c:89:e7:dc:28:
c0:6f:cd:fa:b5:e4:b4:2d:66:3c:d0:e6:ad:51:29:
1c:b7:5e:25:95:be:79:79:15:ab:b6:33:7a:e2:30:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:59:FC:6E:CE:3A:74:58:22:55:19:B6:E5:A1:E6:09:CF:71:75:5E
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1e:e5:0b:71:b0:5f:b5:9f:de:b9:a2:ca:60:24:b9:cd:48:
84:5e:6b:4f:88:7b:b3:be:56:e4:50:1b:1c:8b:1e:bf:7b:43:
87:34:f6:bb:ca:7e:3b:49:48:12:89:f8:c5:70:e3:e5:26:9f:
ca:6d:ce:c4:a5:31:38:50:82:8d:84:51:ca:f6:a9:2b:07:35:
cb:25:00:07:54:fd:f5:18:c8:c0:4f:43:a3:29:78:f7:aa:23:
df:6b:e6:5f:d6:a9:a7:f9:1e:fc:1c:ec:04:dc:1b:6d:f0:8a:
15:02:c0:c7:f1:97:c2:5c:ac:00:56:ad:2e:10:a0:f4:66:9c:
b2:51:22:11:48:c2:d4:2e:18:e7:94:7c:05:01:56:2e:73:1e:
e9:1f:c8:fc:7f:4a:e4:47:b8:dd:c8:b6:12:55:8e:dc:45:9b:
36:9e:f3:af:02:ed:a6:b1:72:81:9b:23:01:e5:58:c5:59:93:
da:38:df:24:eb:8e:59:4a:cc:ad:4b:e9:a2:17:4b:4c:f2:68:
d5:33:70:5c:d6:65:95:c8:08:ac:c9:9a:89:f5:44:d4:7b:d0:
bd:98:5d:d2:ab:1b:29:b2:ce:b6:f5:53:f5:dd:a8:07:dc:7c:
81:9d:64:cd:84:8a:00:b6:45:eb:3a:ac:43:dd:64:35:65:94:
0c:1d:be:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:22:06 2026 by rpki-client