Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json)
Hash identifier: BF1XhlCAjQ/EjB/82GUsT6mxO6NHgxudAPDxXhBe69E=
Subject key identifier: 61:41:8A:AE:A3:8F:50:C4:A6:D4:70:9E:64:1A:1B:41:80:11:21:F6
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial: 01A15C678A40579ABCC7AB2D1653769B18BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
Manifest number: 0424
Signing time: Wed 21 Oct 2026 03:00:51 +0000
Manifest this update: Wed 21 Oct 2026 03:00:51 +0000
Manifest next update: Thu 22 Oct 2026 03:00:51 +0000
Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: r7AAcdwHDH6rdSGBHeyUaKKB48oLDnCpMYQtq6mjR0M=)
2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:67:8a:40:57:9a:bc:c7:ab:2d:16:53:76:9b:18:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Validity
Not Before: Oct 21 03:00:51 2026 GMT
Not After : Oct 22 03:00:51 2026 GMT
Subject: CN=61418aaea38f50c4a6d4709e641a1b41801121f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:a4:c8:04:ae:a1:54:fb:9b:7d:0b:af:36:
b1:eb:4c:b3:70:45:05:f8:b6:ec:7b:7c:c7:e0:7d:
a1:02:dc:6c:25:45:3c:ff:26:9d:f0:ad:a5:a2:3b:
b8:94:1f:d6:94:f0:a1:5f:3d:52:47:73:c7:dc:9a:
77:9e:68:8a:0f:82:45:3d:62:8a:3d:f6:23:38:e9:
4d:8f:03:87:a3:a7:e9:f4:d4:97:b5:bb:ee:ab:f1:
5b:ef:77:83:51:9a:d0:ca:36:6b:ee:fd:19:12:95:
75:17:9e:b0:63:4c:bf:22:e5:ea:47:fe:60:4f:06:
b9:a0:d2:08:4b:6b:ac:3a:62:c7:18:7e:48:db:b3:
16:83:ae:b9:49:2b:78:10:ad:a3:83:d4:f6:ac:37:
fc:e0:66:63:ff:49:af:f1:f1:48:fe:71:81:2c:52:
b0:ea:97:6a:09:36:6d:33:7d:78:3a:72:ed:74:7c:
d7:cc:31:a1:4f:20:33:f0:cf:70:a7:2e:39:0c:a3:
e0:81:07:61:e2:98:46:73:9d:2e:e9:c1:dd:4d:15:
3a:7e:02:a7:56:91:74:c6:18:97:09:76:1e:3e:27:
4f:05:08:4a:d9:c8:1a:a9:d5:ff:16:6a:01:cd:75:
e9:0e:e1:84:22:56:01:37:93:32:8b:d3:7e:8c:36:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:41:8A:AE:A3:8F:50:C4:A6:D4:70:9E:64:1A:1B:41:80:11:21:F6
X509v3 Authority Key Identifier:
keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6e:91:86:b5:e0:03:6f:b1:d2:6c:8d:9d:ed:38:2e:e8:24:
8d:00:62:a1:8d:84:28:b4:29:be:c8:34:10:17:8c:0a:86:7a:
f5:70:4b:ab:bb:5c:a7:fb:55:b3:4a:1c:1d:2c:33:b7:a9:71:
f0:fb:cd:48:f7:1a:a7:44:7e:dc:0e:81:b8:87:d8:3a:19:13:
92:3a:6e:9d:12:0c:6d:ce:41:6a:d7:f7:e7:c8:43:80:a6:b4:
77:8c:ac:78:af:9f:69:28:6e:56:02:89:ab:4e:04:90:e2:19:
79:ae:e4:8d:e1:a9:ae:6c:1b:3d:79:48:9c:39:1d:51:f6:f9:
88:6a:5a:c9:08:61:01:2b:51:1a:4f:24:cb:b3:f3:bc:a3:3e:
ba:57:61:09:fe:aa:33:f5:fd:52:2a:74:c7:25:a2:9d:9f:17:
66:f0:5e:e7:f3:29:97:d0:27:80:cd:a8:57:7d:0f:ab:93:12:
dc:59:67:bc:d7:5d:d3:37:06:28:58:e7:6b:73:42:8e:49:5e:
59:d6:a3:f0:dc:21:c4:69:83:b3:08:20:8a:2d:fb:b2:82:20:
a7:06:57:78:fb:00:0f:e3:49:3c:5e:81:99:1d:8a:fb:1e:55:
06:48:db:6b:0a:f6:85:a5:58:04:42:50:cb:89:95:5b:6f:02:
4b:bd:4a:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFcZ4pAV5q8x6stFlN2mxi9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZWI3MzljNmQzZGM3MWE2MjA2YzhmMzcxMjQyNmZmNTMy
YTBhZmUwHhcNMjYxMDIxMDMwMDUxWhcNMjYxMDIyMDMwMDUxWjAzMTEwLwYDVQQD
Eyg2MTQxOGFhZWEzOGY1MGM0YTZkNDcwOWU2NDFhMWI0MTgwMTEyMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT+kyASuoVT7m30Lrzax60yzcEUF
+Lbse3zH4H2hAtxsJUU8/yad8K2loju4lB/WlPChXz1SR3PH3Jp3nmiKD4JFPWKK
PfYjOOlNjwOHo6fp9NSXtbvuq/Fb73eDUZrQyjZr7v0ZEpV1F56wY0y/IuXqR/5g
Twa5oNIIS2usOmLHGH5I27MWg665SSt4EK2jg9T2rDf84GZj/0mv8fFI/nGBLFKw
6pdqCTZtM314OnLtdHzXzDGhTyAz8M9wpy45DKPggQdh4phGc50u6cHdTRU6fgKn
VpF0xhiXCXYePidPBQhK2cgaqdX/FmoBzXXpDuGEIlYBN5Myi9N+jDbM2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFBiq6jj1DEptRwnmQaG0GAESH2MB8GA1UdIwQY
MBaAFNjrc5xtPccaYgbI83EkJv9TKgr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8wMTgxZjgtNGZhNC00Njk3LWEyNzIt
MzMzYjZkNGVhNDViLzEvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8wMTgxZjgtNGZhNC00Njk3LWEyNzItMzMzYjZkNGVhNDVi
LzEvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjm6RhrXg
A2+x0myNne04LugkjQBioY2EKLQpvsg0EBeMCoZ69XBLq7tcp/tVs0ocHSwzt6lx
8PvNSPcap0R+3A6BuIfYOhkTkjpunRIMbc5Batf358hDgKa0d4yseK+faShuVgKJ
q04EkOIZea7kjeGprmwbPXlInDkdUfb5iGpayQhhAStRGk8ky7PzvKM+uldhCf6q
M/X9Uip0xyWinZ8XZvBe5/Mpl9AngM2oV30Pq5MS3FlnvNdd0zcGKFjna3NCjkle
Wdaj8NwhxGmDswggii37soIgpwZXePsAD+NJPF6BmR2K+x5VBkjbawr2haVYBEJQ
y4mVW28CS71KNQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 08:50:12 2026 by rpki-client