Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: Ez7Zra38wxLh4Pl7yMZHf+NnS8Pz9ogmKCS68c2hhyk=
Subject key identifier: 06:F6:E5:F0:E0:6D:C1:B8:29:DD:31:86:2F:31:EA:05:5A:4C:40:64
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 01A0CAB50CC90E1809B44E24CA0D82E47B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 1A6F
Signing time: Tue 22 Sep 2026 20:00:57 +0000
Manifest this update: Tue 22 Sep 2026 20:00:57 +0000
Manifest next update: Wed 23 Sep 2026 20:00:57 +0000
Files and hashes: 1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: iyHsx1ZnZ8dlESG3vL8pbXyMQpLYY5SYycjp3LeDnjo=)
3: jksHLXQsL8kIaSdyy1KKgItGkLM.roa (hash: SvVYKXT2yItHZ/QXEnN9YsWJ7pv9MmMOoAi6wKxSVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:0c:c9:0e:18:09:b4:4e:24:ca:0d:82:e4:7b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Sep 22 20:00:57 2026 GMT
Not After : Sep 23 20:00:57 2026 GMT
Subject: CN=06f6e5f0e06dc1b829dd31862f31ea055a4c4064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:02:a0:01:d2:76:b9:fe:84:f9:d1:d3:7f:
8e:2c:57:3e:35:47:58:19:8d:ae:dc:54:0c:78:a0:
b3:a2:58:0d:c6:58:9a:5d:b8:2b:ab:60:19:a7:15:
01:a2:37:c3:f1:90:f0:e6:33:86:05:98:91:a5:51:
b7:9a:ea:d8:4f:e6:62:34:b9:15:17:18:d7:6d:63:
85:d5:9e:e4:7a:26:ae:fe:ef:f9:18:a1:70:91:20:
ca:db:d3:2f:4d:0e:f7:c8:88:b0:c7:c6:b1:a0:dc:
c2:4f:3d:ab:49:ea:f7:6b:0c:cc:76:ec:57:ab:75:
b9:76:ff:ff:0b:ff:09:8e:23:78:4b:33:20:30:4f:
39:d5:51:c2:21:d8:8e:20:55:50:27:98:46:e9:9b:
60:b5:a1:c1:d5:74:88:5a:8b:11:71:87:e8:65:73:
bc:f7:2b:28:ae:94:71:73:d9:59:66:5d:f3:bd:ff:
6a:a5:3b:7a:47:dd:e1:4e:7a:97:90:86:ea:e9:db:
c8:54:94:01:3d:a3:5d:dd:97:09:8f:a3:a5:b2:6d:
83:3f:27:08:a4:85:29:7c:80:4f:96:6c:14:1b:ae:
34:1b:6b:d8:5b:c6:10:5b:be:cd:ac:16:5d:9c:84:
2d:33:20:df:7f:78:22:44:49:30:99:e6:6c:d4:1b:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:E5:F0:E0:6D:C1:B8:29:DD:31:86:2F:31:EA:05:5A:4C:40:64
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cd:2e:b6:46:40:7b:fb:13:69:d5:fc:db:80:e3:0d:51:ea:
41:d1:c1:35:b3:d7:c0:96:cb:6f:05:3b:15:34:dd:3a:a1:a4:
04:57:e8:59:a8:69:fa:2b:d9:2a:f8:6c:c9:00:c6:42:4e:1a:
93:55:a1:d9:8a:7f:f9:57:bc:94:bc:07:28:f7:54:a9:46:14:
81:4e:73:42:22:a8:58:3e:d6:ec:50:54:99:29:3b:0f:5e:d1:
75:27:f1:8a:47:b5:b7:bb:01:e6:23:62:95:5f:20:84:9a:f3:
7c:18:2e:fb:09:92:6c:e0:b2:d4:81:df:cc:e0:e6:ae:f2:fa:
14:76:bf:f1:dc:d4:d3:d8:7a:cb:00:51:00:0f:83:89:91:02:
87:0c:c8:c3:72:37:9b:c3:fb:bc:d2:e4:70:d2:57:22:07:f0:
8a:e9:13:dd:99:d1:03:da:69:e3:2e:42:1d:99:b8:0d:76:c0:
9d:7e:80:23:92:43:2b:ab:43:9f:2e:ab:dc:d6:40:e8:ec:35:
56:79:fb:61:d9:ea:4a:13:0b:a6:71:f3:4d:b6:c9:fd:1b:57:
97:b3:5c:dd:e5:fe:cd:cb:81:3f:7e:e7:31:d7:80:d0:69:b6:
3b:28:5c:5b:1c:48:87:15:d7:8d:e4:99:31:7c:3c:25:c0:82:
39:5e:06:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:12:45 2026 by rpki-client