Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: Q6mqE0eAFGClQGnztN/9JuMTI4rBdMeF7JMjBxH9AJE=
Subject key identifier: 18:3E:46:BD:8A:FA:9E:C8:98:35:2B:09:82:1E:36:1D:63:32:85:BC
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019FFD928F2E3BCE98B880420407D5DFF92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 00:01:08 +0000
Manifest this update: Fri 14 Aug 2026 00:01:08 +0000
Manifest next update: Sat 15 Aug 2026 00:01:08 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: FyMjYkc32mKNTmauhYtRviVqmnyoM7On/VcvPrcx1/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:92:8f:2e:3b:ce:98:b8:80:42:04:07:d5:df:f9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Aug 14 00:01:08 2026 GMT
Not After : Aug 15 00:01:08 2026 GMT
Subject: CN=183e46bd8afa9ec898352b09821e361d633285bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ca:aa:68:42:ce:72:e7:12:c7:cb:79:f8:09:
31:50:fc:49:ce:12:e9:74:86:9d:54:2d:54:09:05:
54:4a:cb:82:fc:76:ed:80:99:d9:16:88:d2:61:1f:
85:eb:18:e1:53:85:94:44:da:e6:05:c3:85:7c:34:
d0:ff:40:7b:f9:cc:6e:cd:09:d6:b3:fb:aa:4e:f5:
7d:a4:75:40:11:6e:bb:8e:24:b4:c2:09:7d:26:09:
a0:47:9c:c1:b0:c1:f1:67:3a:d1:9c:f2:bf:ef:51:
98:b6:a7:ad:8c:3f:4a:62:66:4c:7b:d8:36:98:fb:
dd:8a:81:14:92:c7:9a:36:af:7c:48:b9:e4:de:a6:
2f:22:32:11:38:9c:ac:65:d2:1e:c3:9d:20:34:11:
aa:1f:b2:de:3b:bb:05:28:31:ec:80:de:b1:d4:b0:
0c:48:36:e7:74:1a:ae:8e:4e:8d:01:87:d6:24:91:
14:22:01:33:76:4d:9b:1c:9f:16:88:df:05:2b:f5:
3a:7f:2f:99:bd:7e:65:72:d2:02:bb:96:af:2b:9a:
b0:0b:2a:d6:18:7b:b4:a2:a3:da:c4:fe:99:f8:d1:
8e:5e:4a:aa:ac:d1:50:b3:d5:13:34:3e:6b:9d:cf:
c3:5b:59:f4:4f:2c:32:b6:99:11:7f:2c:29:23:bf:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3E:46:BD:8A:FA:9E:C8:98:35:2B:09:82:1E:36:1D:63:32:85:BC
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:52:20:96:a6:8d:2e:59:50:1d:70:63:49:f1:cd:07:ca:e9:
9d:89:3b:1e:7e:0a:33:6c:68:02:dc:0d:ff:80:68:8a:53:ad:
ae:4a:e2:0b:9c:5e:cd:bb:86:91:91:79:1c:f5:c8:c9:0e:72:
d2:78:4c:9a:8a:98:83:0f:8c:0b:c8:fb:46:16:6b:03:74:ba:
8b:4e:6a:bd:2f:96:1b:d2:85:8d:87:01:ad:12:ce:e0:98:6b:
f8:0b:a6:4c:3b:cb:91:5d:94:51:2e:8b:66:2b:33:82:d8:27:
e9:f6:24:95:1c:42:ab:8c:96:4f:d7:92:56:dd:1a:1f:78:3a:
f3:ae:da:7c:b0:47:b0:4a:8c:20:ef:28:3b:be:cb:95:9c:06:
af:20:b5:36:ec:71:43:c9:c6:d1:97:16:9e:3c:da:fa:50:97:
03:25:e1:63:8c:68:54:db:5f:8a:f6:55:b3:d9:5e:ed:ca:04:
72:e5:f5:ff:83:29:7a:2c:cb:98:eb:a4:10:99:a5:19:6f:75:
f9:0e:2d:b7:62:b7:7f:b6:ce:71:e9:b7:29:cd:2b:f3:d6:e4:
12:1b:1c:d8:24:9b:0c:5a:8c:1c:bf:58:20:6c:35:a1:83:0f:
ed:c2:88:07:c7:be:30:22:89:7b:a4:9b:e6:34:13:bb:0e:05:
6e:00:4b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:17:38 2026 by rpki-client