Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: 1O/ZYq2kDm1AD17xAMmkrXt89M7EZwZNED7wIZV3llY=
Subject key identifier: FD:43:98:62:C9:35:3E:BE:D6:74:B8:46:9C:E0:18:A2:20:0A:A5:BD
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019F13E64E5539577883C7E013E3D9A5EB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1984
Signing time: Mon 29 Jun 2026 15:01:28 +0000
Manifest this update: Mon 29 Jun 2026 15:01:28 +0000
Manifest next update: Tue 30 Jun 2026 15:01:28 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: 4oh2ABDUw3VZhGbMaOmlEqDjMAw4B5AntXl4DI2R2yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:e6:4e:55:39:57:78:83:c7:e0:13:e3:d9:a5:eb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jun 29 15:01:28 2026 GMT
Not After : Jun 30 15:01:28 2026 GMT
Subject: CN=fd439862c9353ebed674b8469ce018a2200aa5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:8e:42:c7:c1:3a:af:79:da:47:73:62:60:
f3:2e:ec:65:55:05:93:6d:5a:4b:9c:7f:45:80:a2:
b2:6c:b8:b8:7e:ff:75:90:97:de:02:5d:f8:92:c5:
c0:b8:b3:c8:a0:30:0c:90:32:d5:6d:e1:8e:da:f8:
70:c0:4d:64:bb:a0:35:a4:ee:eb:20:88:b5:1e:63:
53:56:9d:35:ce:b8:c4:34:cf:86:79:a4:9e:67:cd:
8e:40:f2:b8:29:bf:76:7b:36:36:19:af:40:5f:04:
d4:62:7d:a7:b5:f9:d0:2c:1b:02:2d:08:f9:d1:f3:
bb:1a:5e:9b:de:0a:20:49:bc:d3:a4:f3:91:e2:79:
11:1f:b7:1a:6c:80:ed:ec:86:92:13:60:02:8b:ae:
db:ba:47:61:ee:21:98:30:57:cc:28:ec:67:ca:3f:
9a:08:22:79:5f:b4:7e:30:7c:f6:a9:22:a0:75:99:
ac:bb:72:7c:78:1d:06:2a:34:61:5d:69:e2:90:29:
19:49:53:bd:b9:3d:d7:5d:08:02:b1:18:0c:52:98:
97:fb:31:ce:e2:af:7c:d4:80:9b:b3:30:d3:69:92:
57:2a:08:3f:a7:f2:f7:1d:f8:18:8c:ac:f4:7b:0e:
14:95:70:d7:09:b4:52:4d:b9:07:95:0d:30:52:c6:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:43:98:62:C9:35:3E:BE:D6:74:B8:46:9C:E0:18:A2:20:0A:A5:BD
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5d:be:66:4e:43:0f:5a:27:7c:9f:98:98:02:ae:bc:45:d9:
51:b6:bc:b7:ed:2c:d9:bb:df:e6:67:b1:52:a1:c0:89:d3:f2:
35:3f:80:d8:0e:bd:41:80:ae:a1:ef:63:ac:11:44:cc:5b:39:
0b:b8:bc:2d:ab:ad:24:2e:77:7e:9f:9e:34:36:e4:4e:0d:0b:
c0:aa:a6:65:2a:2c:ad:0b:6c:4d:0a:ff:80:98:42:f2:06:53:
f8:82:bf:01:db:40:18:82:34:6d:26:fd:19:96:33:f0:17:8a:
85:ed:e5:bb:b8:27:5d:71:8d:11:6f:ee:a2:bd:dc:80:12:7e:
bd:51:86:0b:31:fd:76:5c:74:08:d4:51:34:a7:63:17:be:97:
a1:60:59:de:8a:8b:37:e9:e5:ab:06:4d:5f:11:7e:d8:d7:c7:
b8:90:bb:66:84:25:18:01:1c:ed:c6:0e:f8:0d:ae:8c:1e:3d:
6d:4d:ce:22:43:2a:12:4c:07:af:2e:de:a6:ca:56:62:83:11:
7a:27:27:85:e8:44:37:a7:85:dd:a0:8a:d6:f6:a1:14:93:ea:
29:ce:ef:8d:12:9c:6c:b0:a3:00:c2:2b:f5:3c:dc:03:18:85:
02:50:7b:89:ff:37:ab:37:cb:f8:a9:14:62:21:ad:1c:ff:77:
ca:98:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 21:21:29 2026 by rpki-client