Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: Fg8DPqxuMinsL+K+3SKH8lYLoFPqT9r9C9LwHHyiUgw=
Subject key identifier: D2:EC:D4:E4:B4:3A:D2:BA:5F:A7:CF:99:6E:CE:18:8E:9C:C2:EB:87
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 019FACE388489320028672796E5833245C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 08:00:20 +0000
Manifest this update: Wed 29 Jul 2026 08:00:20 +0000
Manifest next update: Thu 30 Jul 2026 08:00:20 +0000
Files and hashes: 1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: k8QklPo0AdpM8f6WjNFP494UkA2ydpMNOvJEoI9RB1U=)
3: jksHLXQsL8kIaSdyy1KKgItGkLM.roa (hash: SvVYKXT2yItHZ/QXEnN9YsWJ7pv9MmMOoAi6wKxSVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:88:48:93:20:02:86:72:79:6e:58:33:24:5c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Jul 29 08:00:20 2026 GMT
Not After : Jul 30 08:00:20 2026 GMT
Subject: CN=d2ecd4e4b43ad2ba5fa7cf996ece188e9cc2eb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:60:42:bf:54:a0:8b:4d:75:60:33:fd:fd:
6c:a3:88:f8:69:e5:a1:f6:db:fe:d5:30:28:ec:e4:
2b:af:64:f7:a1:43:d1:f1:71:d1:94:ad:05:3e:a0:
1f:a7:c0:e4:47:ab:8d:b6:08:b0:e4:96:83:28:5a:
30:93:a9:b1:f9:0c:87:da:5f:1d:07:e1:b1:04:6f:
88:59:a2:ff:59:8b:33:83:cf:6c:90:3a:e3:66:e2:
47:e2:8a:c7:4a:4b:3c:7e:94:09:5a:f4:60:df:34:
7d:a0:6f:b0:d5:34:17:98:8b:4b:df:1d:ca:c3:b2:
ae:ae:c5:0f:52:c4:e5:9c:2c:4b:cb:5d:d5:bd:4f:
b3:9d:af:3c:b0:d0:15:ca:d1:00:0a:f5:b2:0c:c5:
6d:b5:47:44:57:53:3a:1f:7e:8c:df:4f:16:f3:8a:
a5:2e:30:d9:12:4d:75:9f:08:60:a5:9e:f3:e1:56:
d2:a7:f5:cc:93:81:37:f1:e6:9e:be:3d:fd:97:32:
19:08:bf:fc:5c:f0:62:fa:49:cc:a3:9c:5b:c5:f5:
00:09:2f:0f:e3:7e:b3:52:f1:12:29:91:06:f7:4a:
4f:8a:c3:ae:e4:14:e1:84:fc:0f:89:0c:57:e5:ed:
fb:b0:61:37:b7:b8:65:e8:d2:71:93:14:8a:f4:68:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EC:D4:E4:B4:3A:D2:BA:5F:A7:CF:99:6E:CE:18:8E:9C:C2:EB:87
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dd:d6:c6:73:be:5b:1e:6e:8e:f7:b6:fe:b8:ed:88:f4:84:
8b:bb:4d:73:09:4f:85:d5:49:d0:f8:ce:9e:c7:86:85:6a:b8:
87:fe:bf:0b:c3:1e:91:9d:33:51:0d:70:28:d6:cd:6f:b9:5e:
5c:92:cc:df:e3:d6:4d:ab:7c:e4:9e:2f:ba:b6:6d:49:b6:fc:
4f:b6:8e:06:71:cc:5a:ae:2f:41:62:83:2b:b3:7c:1b:18:38:
a9:8d:f4:3a:d2:87:e7:28:ff:e1:b7:a6:a0:66:ea:3e:1c:52:
be:0f:a7:0d:97:d5:f0:b3:86:13:94:e3:a5:e9:b4:89:00:00:
8b:87:50:96:ab:12:a0:ca:b3:b0:53:48:82:03:9f:41:a6:cd:
e3:17:2c:4a:e1:9e:bf:6b:5e:46:ce:d3:cc:59:4c:5c:9e:1c:
d1:84:7e:7f:fb:a1:36:83:16:27:c9:b8:b2:ed:c1:19:30:42:
9d:7a:d6:41:31:9e:13:4f:4b:9d:5e:10:97:9c:cb:b9:33:bb:
d5:02:f5:fe:32:d5:42:f0:5a:c8:6a:52:c3:6d:42:86:2d:10:
fc:d0:e6:f6:b3:44:81:f1:6f:ba:cf:32:3f:be:9e:14:e8:ed:
04:c9:49:9b:97:e6:ea:5b:06:01:a8:1b:36:24:be:99:c5:2c:
ca:75:61:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:14:05 2026 by rpki-client