Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: iEvA7KQBFh6fxBC5VxYlFoHfdpzFh0AMviYAF7U99aU=
Subject key identifier: 18:10:48:4E:7F:F8:98:32:8A:0E:43:AB:08:17:0D:C6:84:0D:12:E3
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 01A108138A10E30702C58EC9427FC031319C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 1A87
Signing time: Sun 04 Oct 2026 18:01:00 +0000
Manifest this update: Sun 04 Oct 2026 18:01:00 +0000
Manifest next update: Mon 05 Oct 2026 18:01:00 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: umh5eMFFIxEgqssShOM2kqUA/wLi/q2MR/BuXDFhSHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:13:8a:10:e3:07:02:c5:8e:c9:42:7f:c0:31:31:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Oct 4 18:01:00 2026 GMT
Not After : Oct 5 18:01:00 2026 GMT
Subject: CN=1810484e7ff898328a0e43ab08170dc6840d12e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:c4:b4:56:e3:2e:80:6f:ae:14:e3:9d:95:
aa:9b:0a:86:92:56:d0:35:58:ab:76:f1:52:73:ff:
c4:11:d3:8f:3b:b6:55:d6:b5:cf:62:25:d0:ce:37:
83:70:56:a5:f8:d5:3a:ed:03:80:f2:1c:88:b1:95:
c1:4c:a1:ee:27:9a:c5:55:5e:66:68:57:27:43:29:
70:92:af:c5:cb:c6:58:8c:d7:1e:38:da:5b:c6:f2:
e7:55:c3:1b:52:77:95:fe:39:c1:57:aa:01:0a:8e:
7e:00:84:55:b3:a2:ff:75:d6:e8:8f:08:b3:11:ab:
eb:cd:bb:c4:dd:de:f8:5c:9b:89:16:5e:35:af:c1:
10:6a:f1:7e:d2:3c:68:96:0e:b9:c1:d6:0d:2b:5c:
1b:5a:fb:77:81:34:9b:78:a7:be:be:b1:b5:2c:a1:
b5:2e:64:7c:7d:ef:93:7a:0b:e3:ef:0b:e0:1d:96:
09:8a:99:b9:2d:d8:63:26:59:3f:d7:87:1a:78:03:
2c:d1:d8:2c:e3:7a:ec:d9:6e:a5:7a:46:68:92:a2:
aa:e4:a5:61:7b:36:b9:c2:23:cf:44:3c:66:fb:c9:
6e:75:ed:0c:e0:e8:71:ab:ff:48:c9:f2:b2:ee:cb:
76:a2:9b:ed:ff:76:bb:46:8b:25:fa:70:4c:e8:2d:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:10:48:4E:7F:F8:98:32:8A:0E:43:AB:08:17:0D:C6:84:0D:12:E3
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ce:ee:f9:86:ac:2b:de:6c:ef:70:42:43:b3:33:f2:d0:a3:
a5:66:89:94:c9:00:1f:09:5b:d0:df:5d:fd:d6:be:10:fe:01:
30:01:88:65:b9:d0:22:92:16:fb:2c:83:aa:b8:16:c8:b7:94:
c5:fb:81:5f:81:14:b0:59:84:f3:2a:73:70:ad:16:4b:7c:37:
d8:0c:3c:ec:1d:bb:ba:b1:dd:06:b8:7b:b3:8f:94:2b:61:91:
72:dd:6d:ca:62:c5:b4:01:3a:02:83:3a:10:e1:94:8e:cc:3f:
00:bb:ce:b9:89:6d:39:55:cc:fc:66:6a:6f:73:75:ce:1a:fd:
84:78:66:b0:f9:15:0d:97:4f:f4:93:ba:a0:11:15:60:b4:ee:
9d:37:d8:e5:be:dd:4e:f9:34:df:33:23:fd:37:d5:31:e5:ce:
5e:fc:04:2c:87:af:47:73:8f:1b:7c:bb:25:79:af:ac:8d:9c:
d1:76:af:25:b3:83:8a:4b:55:7d:db:04:ff:37:7f:a7:55:2a:
b2:c1:3d:e1:63:56:74:d9:1e:6d:44:57:ca:05:21:2a:5a:93:
5d:2b:45:29:5a:46:28:65:4f:e8:23:b2:54:02:d3:41:3a:13:
dc:9c:df:4b:27:0a:0d:f2:44:ab:67:0e:b9:ef:9f:94:12:7e:
66:13:e7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:20:30 2026 by rpki-client