Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
File: dlOpinSeVpdEoe3iyUDy5DPEQIo.mft (raw, json)
Hash identifier: 8EREcx907CRNKE008VoX7rHFbeLTnSyVwGbFV6phZbY=
Subject key identifier: 18:52:BC:74:72:22:6D:D1:73:62:43:B0:BD:E7:95:28:F3:DC:72:EB
Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
Certificate issuer: /CN=7653a98a749e569744a1ede2c940f2e433c4408a
Certificate serial: 019FAD51B347A1EB15E84924D9B963BF490A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
Manifest number: 0D66
Signing time: Wed 29 Jul 2026 10:00:40 +0000
Manifest this update: Wed 29 Jul 2026 10:00:40 +0000
Manifest next update: Thu 30 Jul 2026 10:00:40 +0000
Files and hashes: 1: RsF6wJG_DVoKQM6B-sCzW6WCDW0.roa (hash: qws597tbqP0XDfiuU1TMHHh3nxH1S6tAU3H9xRP9fH8=)
2: dlOpinSeVpdEoe3iyUDy5DPEQIo.crl (hash: ox2tV6grgdJ9PRZ7BIDz13ftm9E/59QMQGP+TUHgJ4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:b3:47:a1:eb:15:e8:49:24:d9:b9:63:bf:49:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a
Validity
Not Before: Jul 29 10:00:40 2026 GMT
Not After : Jul 30 10:00:40 2026 GMT
Subject: CN=1852bc7472226dd1736243b0bde79528f3dc72eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:5b:a0:84:d2:c0:6a:25:03:dc:a3:8f:bf:
63:bf:7c:75:a9:a4:fd:94:68:59:7e:2b:b3:d1:88:
13:b9:4e:8e:f8:b4:04:92:fd:3a:6b:c5:30:f9:76:
e0:8d:3b:2a:61:9a:04:a4:4e:e5:ab:52:63:02:8e:
e3:ea:88:32:05:a0:e1:71:e4:40:6f:1a:b4:34:d4:
cc:54:60:e0:bf:a4:bd:2e:c6:7b:54:99:92:9c:7f:
e2:0e:92:ec:37:30:aa:53:c5:04:75:38:ca:43:4c:
25:5c:af:53:ad:4f:8c:33:6b:a4:db:56:90:a0:86:
fb:26:c0:23:45:3f:a8:a3:d5:88:b8:b1:f6:95:63:
ea:c2:d8:83:8b:7a:5a:14:10:c8:72:e3:a0:8d:fa:
21:56:43:92:18:70:6a:e5:f4:ec:ee:ac:73:d0:9d:
f6:93:16:d1:75:d9:c5:39:01:20:80:86:b5:0a:27:
32:ff:14:67:ff:c8:5b:20:97:7b:a8:9b:cc:79:ed:
3f:f6:94:2f:2b:71:d2:b1:64:1c:5c:af:d4:68:8a:
a5:6d:4f:ee:de:3a:c7:5a:8c:54:53:39:8d:90:0f:
14:da:00:b8:b8:a5:1e:a0:e8:78:63:94:df:a3:ea:
55:ea:54:de:2e:f0:fb:17:65:f5:50:60:a8:6d:66:
a9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:52:BC:74:72:22:6D:D1:73:62:43:B0:BD:E7:95:28:F3:DC:72:EB
X509v3 Authority Key Identifier:
keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:db:68:52:87:2f:90:4c:75:e4:eb:fb:9c:28:cc:26:4e:50:
25:dd:22:0d:50:23:90:64:85:da:9a:bb:c5:01:d9:d7:75:32:
78:70:1d:0d:74:97:1f:46:88:08:25:81:7c:0b:a1:9b:fd:21:
ce:47:b8:2c:63:b6:ea:80:ee:39:c8:95:69:dd:b5:84:d7:d8:
25:b8:32:8b:e7:9c:45:62:3d:d0:ca:05:5a:54:41:86:5a:67:
04:cc:a1:a4:40:30:dd:64:62:4b:59:23:68:b8:af:60:9a:bd:
bd:d0:fa:21:3f:5c:d3:41:c7:15:86:f6:3e:32:a1:26:81:1a:
74:df:f1:cf:ad:3a:44:ba:da:a4:76:a1:88:32:33:54:df:54:
5f:32:7a:f4:93:5b:20:1b:87:16:5d:c0:ac:ed:0a:76:49:13:
51:03:3d:19:c9:cb:76:c6:98:a2:51:fc:b6:57:b4:39:c2:d4:
8e:11:3f:f1:4b:71:9c:88:6c:52:ce:a0:15:23:59:d6:a5:9a:
d2:9f:5d:36:3f:1e:57:ea:e7:2e:d0:87:27:22:5a:38:ea:7e:
d8:1e:f4:30:ba:8e:dc:39:85:bd:53:b5:fd:c1:bc:68:74:70:
fd:a9:75:e7:23:ec:c4:b0:ba:1c:ba:15:fb:78:21:6e:73:28:
57:ea:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:26 2026 by rpki-client