Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: d+235iM9t6iKn9rvBoYgxj2CvPLW0w0Uz09kMX4MHNM=
Subject key identifier: FD:23:03:86:06:AA:3E:A9:87:1F:05:86:12:83:46:A9:D5:65:3B:80
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019D38D2F580739D5E4C7DC05AA613170928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:42 +0000
Manifest this update: Sun 29 Mar 2026 09:00:42 +0000
Manifest next update: Mon 30 Mar 2026 09:00:42 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: Ub4QTJ/CyQULiy+RBwIJ1+ONUB/CWvv/gk7haESaVlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f5:80:73:9d:5e:4c:7d:c0:5a:a6:13:17:09:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Mar 29 09:00:42 2026 GMT
Not After : Mar 30 09:00:42 2026 GMT
Subject: CN=fd23038606aa3ea9871f0586128346a9d5653b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:b9:e8:59:d7:0b:e1:fc:e7:0a:f1:db:ba:
d9:26:ee:81:a6:b6:77:eb:fe:5d:c7:65:94:c5:80:
a6:18:7e:c4:70:fa:e4:50:ad:d2:85:d8:37:be:19:
43:95:d0:f3:36:a9:da:30:62:0d:27:0c:a9:79:d7:
6f:60:f7:52:7d:f8:66:3b:f5:1a:0a:12:4c:b9:73:
63:20:a4:7d:2c:fb:31:d6:25:57:7a:a1:26:59:91:
31:a9:a0:7e:e1:33:5c:27:b6:ac:9b:1b:fb:01:98:
8c:ce:84:e1:e0:42:f3:be:c8:20:d0:22:3d:e4:1b:
3b:3b:1b:b2:df:c8:d3:5c:1a:37:46:3e:c3:90:79:
48:eb:f0:a4:c9:2c:5d:0f:c9:8d:ad:3b:39:a3:94:
32:a7:95:90:f8:2d:6e:83:a9:8d:7f:33:28:1d:8b:
6c:a3:d0:0e:c4:a7:26:c7:2d:46:95:06:9c:2a:a7:
c7:f3:b9:3e:77:50:a0:dc:c4:43:e0:77:fd:e7:18:
35:8f:ce:b9:f4:f9:3b:e3:86:1e:ad:d8:a3:0d:21:
7f:f2:36:87:92:1b:24:7f:8c:40:a4:b9:5f:a8:b0:
d6:ab:62:a5:76:86:eb:f4:52:05:24:61:9e:30:ff:
46:1f:90:db:c7:d6:8c:d7:ca:dc:3f:a6:a2:4d:7c:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:23:03:86:06:AA:3E:A9:87:1F:05:86:12:83:46:A9:D5:65:3B:80
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f0:3d:0c:7e:97:91:aa:89:a1:61:7f:d7:91:fc:b9:fc:22:
b6:4c:6c:f5:c5:33:e9:31:49:2d:00:7d:f0:00:b3:a6:17:a0:
6d:22:b9:73:6a:ce:fc:1f:d3:03:8c:4c:5f:24:44:cc:11:b4:
76:4b:eb:50:29:6e:d2:e2:97:6d:fe:92:78:ea:64:4e:9e:30:
20:39:14:97:83:14:79:91:f7:8f:6a:a3:47:ed:cb:d8:8b:72:
f5:3e:5d:67:12:2c:ce:7c:d1:99:7c:c7:20:37:59:25:78:81:
48:6a:78:4c:d2:f5:70:13:26:6c:e6:a1:45:b6:8c:57:77:bc:
0a:62:0e:91:cf:b4:19:ff:e4:8e:60:93:61:9e:eb:79:81:7c:
4f:15:02:57:e6:e8:ff:09:df:63:f8:74:60:14:7a:37:da:fd:
c7:98:20:f1:5d:44:d8:70:33:e6:62:61:43:1c:42:c0:81:45:
14:81:53:62:ee:f7:7b:e9:23:35:69:64:e9:59:6c:73:4e:48:
00:2a:e2:3f:3b:31:aa:9a:c3:45:af:a2:37:b9:1e:b1:f6:b1:
77:bb:67:7c:7e:27:54:a4:93:a7:4b:40:7f:a9:c1:ef:cf:62:
73:e4:3b:4a:9b:14:2f:bb:6f:70:fc:8d:36:65:bf:72:58:09:
07:74:99:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040vWAc51eTH3AWqYTFwkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZGRhZWIxNjRlMzk4MjE0YTE3MWEwNDEwZTZiMDIzMmQ2
NDJmNTAwHhcNMjYwMzI5MDkwMDQyWhcNMjYwMzMwMDkwMDQyWjAzMTEwLwYDVQQD
EyhmZDIzMDM4NjA2YWEzZWE5ODcxZjA1ODYxMjgzNDZhOWQ1NjUzYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2i56FnXC+H85wrx27rZJu6BprZ3
6/5dx2WUxYCmGH7EcPrkUK3Shdg3vhlDldDzNqnaMGINJwypeddvYPdSffhmO/Ua
ChJMuXNjIKR9LPsx1iVXeqEmWZExqaB+4TNcJ7asmxv7AZiMzoTh4ELzvsgg0CI9
5Bs7Oxuy38jTXBo3Rj7DkHlI6/CkySxdD8mNrTs5o5Qyp5WQ+C1ug6mNfzMoHYts
o9AOxKcmxy1GlQacKqfH87k+d1Cg3MRD4Hf95xg1j8659Pk744YerdijDSF/8jaH
khskf4xApLlfqLDWq2Kldobr9FIFJGGeMP9GH5Dbx9aM18rcP6aiTXwUwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0jA4YGqj6phx8FhhKDRqnVZTuAMB8GA1UdIwQY
MBaAFKLdrrFk45ghShcaBBDmsCMtZC9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzkt
MTEyZTExM2JiN2I3LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzktMTEyZTExM2JiN2I3
LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvA9DH6X
kaqJoWF/15H8ufwitkxs9cUz6TFJLQB98ACzphegbSK5c2rO/B/TA4xMXyREzBG0
dkvrUClu0uKXbf6SeOpkTp4wIDkUl4MUeZH3j2qjR+3L2Ity9T5dZxIsznzRmXzH
IDdZJXiBSGp4TNL1cBMmbOahRbaMV3e8CmIOkc+0Gf/kjmCTYZ7reYF8TxUCV+bo
/wnfY/h0YBR6N9r9x5gg8V1E2HAz5mJhQxxCwIFFFIFTYu73e+kjNWlk6Vlsc05I
ACriPzsxqprDRa+iN7kesfaxd7tnfH4nVKSTp0tAf6nB789ic+Q7SpsUL7tvcPyN
NmW/clgJB3SZmQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:23 2026 by rpki-client