Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: Rqsugyz2uWF+tb1sagIA6PCBQhEc+ZXBsT6T3nT14i8=
Subject key identifier: FC:78:F3:9D:6D:DC:FE:C8:32:29:A5:24:69:1F:C3:BF:42:A7:4F:7C
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 01A06E396DF6DC719AA07B745D990EBEAB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 1A3D
Signing time: Fri 04 Sep 2026 21:00:52 +0000
Manifest this update: Fri 04 Sep 2026 21:00:52 +0000
Manifest next update: Sat 05 Sep 2026 21:00:52 +0000
Files and hashes: 1: APlmnKHZODCNSunvzWMmlebxZbo.roa (hash: QAoewBI2F8XDmieB1npAXSt/XAawfhTLWLPzLSSKEr8=)
2: WhV8xPFTSCjYhb1Fzg7MX4sw-hY.roa (hash: XB5kQKRt6CKhDUulVV55wNOu+R+cqMx1Qw5sNVZe/hI=)
3: d68f291cIHUCCkamC_5Dky9_oNI.roa (hash: YxA3uE/MhcE+yMlxlf50bgP3TkU2HihWgkRyMZNjVco=)
4: fBnCIsrSnuMPotGC1r1PDzmNOJI.roa (hash: Yo6BMsJN5+FV8I1jxUo1hpudMm9OZRpu0ko7me4vNxQ=)
5: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: 1rHRJV0qhkngcLugUvm5adCKBRDhYII5Ixu3DmkwNdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:6d:f6:dc:71:9a:a0:7b:74:5d:99:0e:be:ab:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Sep 4 21:00:52 2026 GMT
Not After : Sep 5 21:00:52 2026 GMT
Subject: CN=fc78f39d6ddcfec83229a524691fc3bf42a74f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:a3:77:90:40:19:27:48:a0:65:cc:f1:61:
35:6f:97:08:f5:f6:f4:f7:fc:a0:bf:07:ea:5a:01:
37:01:8d:e3:b4:f3:d2:4b:02:ad:8e:d2:b4:21:51:
1c:a1:e9:dc:1f:5c:ed:fd:fc:b2:e9:1e:3c:54:16:
79:e6:01:57:98:a5:aa:36:97:6e:5a:fb:d4:d9:0c:
d7:06:89:8e:c2:a5:71:d6:80:27:63:e8:d7:1a:9f:
9e:21:71:6e:09:02:6d:1a:bb:b7:59:c0:e9:59:5b:
85:46:ce:1c:31:26:43:5b:f6:ef:0f:57:ba:5b:fa:
09:9d:5d:95:a4:d2:99:27:9e:ea:1a:a2:d9:6a:8f:
ce:ad:0f:e1:12:70:d6:16:0b:f7:c1:5b:d9:c9:4e:
1d:9f:9d:a4:b3:b9:8d:6e:38:33:05:e1:7d:39:52:
94:0e:ec:96:72:e9:cc:ae:99:0d:53:2b:5d:34:50:
e4:75:02:5a:da:4a:af:46:56:c9:13:85:1b:db:dd:
74:15:40:76:11:70:76:94:bc:eb:dc:56:0a:9f:a3:
74:c5:32:5c:4c:45:4b:3d:39:c0:10:a8:29:ae:1e:
06:d1:33:56:bc:2b:0b:81:fb:b4:27:3b:51:d0:35:
27:8b:55:54:be:9c:05:69:5d:01:dd:ce:06:6e:e4:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:78:F3:9D:6D:DC:FE:C8:32:29:A5:24:69:1F:C3:BF:42:A7:4F:7C
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7e:bd:90:4b:2f:47:ee:52:af:80:09:ec:63:44:40:f2:61:
cc:75:ab:50:34:e3:32:11:99:8f:6c:85:31:0c:e2:87:bd:cd:
15:da:bf:54:ff:bf:65:9a:53:4f:cd:9c:c5:c3:ba:d4:1a:05:
b4:c5:8e:14:69:38:66:08:51:44:be:23:a4:95:89:c6:66:9c:
6c:17:21:f5:c2:77:31:60:74:a0:2a:9d:4c:f2:4b:96:ae:aa:
25:33:51:c0:ed:ef:81:dd:c6:f0:ed:97:7a:cc:ee:a7:5e:1b:
ee:14:f8:7e:24:16:a1:eb:8c:5b:05:d2:92:85:7c:4d:36:a7:
29:49:0e:5f:cd:ad:76:46:d5:00:a7:39:da:0c:e2:1a:fb:ea:
e2:01:42:bd:d5:1f:eb:86:f0:4d:95:7e:cf:e8:83:96:45:c5:
3b:f5:91:ed:e4:9c:27:e9:a9:00:52:bb:e2:60:27:23:f1:07:
d4:6b:64:19:62:44:c0:78:cb:b6:4f:b0:f4:be:8e:b0:8e:7e:
04:18:8b:6e:f9:63:4a:d0:a5:3c:76:db:4e:40:7f:9c:03:00:
4c:19:b8:54:03:c9:ec:6a:10:d9:3e:6b:64:1f:c1:45:6f:35:
f5:cf:56:76:c9:22:a2:1d:1e:72:a2:5e:7c:6a:84:bb:88:5b:
ef:c1:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:33:34 2026 by rpki-client