Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
File: ot2usWTjmCFKFxoEEOawIy1kL1A.mft (raw, json)
Hash identifier: /zwJC2QTEki4bBcOfC/Z9LXPusVIRtHecBtbJqcq6Ok=
Subject key identifier: A8:83:63:D8:2C:04:87:53:52:61:3F:3F:CA:BC:E6:CB:81:38:33:3C
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 019E2A398BA700AF5E18D85373CEC40C2B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
Manifest number: 190B
Signing time: Fri 15 May 2026 06:01:14 +0000
Manifest this update: Fri 15 May 2026 06:01:14 +0000
Manifest next update: Sat 16 May 2026 06:01:14 +0000
Files and hashes: 1: 1DaBNOBtXCq2I6_R5rKF8lQ-xbg.roa (hash: 6f/saJ2ZRG9eMce0mo6zy3Y07TnhVWXLTM375XC1J9c=)
2: Eg4AoJZahLQrFNuFAzy9nII1Q8Q.roa (hash: J1P6GRYrQchsc0mFj+PazBxgGYUz/z2JCKkO2RjdJek=)
3: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (hash: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ=)
4: ot2usWTjmCFKFxoEEOawIy1kL1A.crl (hash: GmmfYxYmBqRm4A2Hi/PuGSwmEYSNTUMKv7vfwHlLoAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:8b:a7:00:af:5e:18:d8:53:73:ce:c4:0c:2b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: May 15 06:01:14 2026 GMT
Not After : May 16 06:01:14 2026 GMT
Subject: CN=a88363d82c04875352613f3fcabce6cb8138333c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:39:07:e7:64:2a:8b:80:cb:a7:1d:a9:d1:
37:49:a0:8a:dd:50:90:be:3a:6e:3b:9e:ba:5b:23:
99:43:fd:7c:07:81:cb:fa:59:e0:25:98:92:a3:ff:
2d:a9:1d:7e:ff:64:f0:aa:ce:14:02:35:5e:47:f5:
30:65:c8:e4:39:47:c6:4e:0e:9b:4d:c8:27:31:22:
b2:29:18:05:97:26:11:5c:83:cd:2d:c9:4b:d6:cb:
e8:c0:3b:63:e0:2d:a9:e1:89:a7:37:48:b5:e0:a2:
1a:40:d5:b9:67:01:18:3e:02:0c:e2:d7:9b:94:7a:
6f:6b:54:7a:0c:6e:06:cb:65:01:02:63:35:b5:31:
33:05:18:8f:32:d4:fb:fd:67:60:56:df:56:8c:ab:
8c:0b:bb:30:42:de:c4:33:3a:a9:80:b0:79:52:05:
f2:18:52:ff:13:a8:38:e5:79:01:fd:23:80:12:64:
26:3f:05:f5:85:c1:9a:55:7e:d4:a3:ec:58:3b:bf:
be:37:00:90:4a:5a:ba:da:78:1d:aa:b6:97:83:b4:
86:9c:a7:2f:2c:db:1b:75:f4:0b:d7:71:df:24:6c:
d8:04:e2:00:4e:88:d6:89:eb:4a:5e:62:ff:6c:fd:
05:b0:85:61:99:a3:9b:08:0f:33:12:99:03:78:6f:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:83:63:D8:2C:04:87:53:52:61:3F:3F:CA:BC:E6:CB:81:38:33:3C
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2d:2e:36:cd:81:c7:ba:e4:04:d6:fe:01:3c:d3:0c:4d:12:
2c:a0:82:ec:41:1c:f4:f2:03:cc:21:dc:f4:76:86:7e:7e:8b:
8a:91:4f:55:de:9b:ab:3f:dd:ca:bd:a1:40:a9:95:ac:61:22:
2a:8c:f7:f9:af:d0:47:1c:b9:af:92:5c:2f:28:23:a1:5a:7f:
02:d6:61:fc:02:dd:ce:83:53:57:9d:5e:df:e4:09:ae:30:28:
81:93:16:7e:a7:b5:22:c9:2c:05:1e:97:bb:61:8d:df:38:7c:
ac:3c:2a:27:98:17:97:66:00:6b:69:48:18:98:29:1f:2a:8b:
2e:8b:84:43:de:05:1f:51:f2:40:48:45:cb:ae:97:53:f4:44:
95:08:0f:51:53:e7:cb:37:de:f8:7e:72:ff:84:50:0e:8e:7f:
7c:90:69:bd:0c:07:72:7d:6b:62:cc:68:91:94:62:ef:6a:e2:
3b:18:df:63:6c:f6:34:66:dc:60:8e:ed:54:e8:7e:d8:40:68:
d4:5b:47:8c:78:3b:b8:d6:1b:2b:20:7a:39:f9:9c:29:b1:3d:
e8:e2:ce:bb:db:f1:eb:7d:43:1b:d8:67:71:f4:f3:e0:cb:b5:
94:a9:59:6f:b3:29:ee:f3:65:f0:2a:f7:cc:54:ce:b6:1c:85:
3a:98:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:25:45 2026 by rpki-client