Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: ZMT0lNIkBCmIV3JIP1CXxJrZ00eEa9KOaEMqD3ZZkQQ=
Subject key identifier: 85:AF:E3:78:75:54:27:D5:91:92:08:1A:06:E8:FE:F1:93:C7:7D:75
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019D98F52CC31120C9F5ADCBAD2557023F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 0237
Signing time: Fri 17 Apr 2026 01:01:37 +0000
Manifest this update: Fri 17 Apr 2026 01:01:37 +0000
Manifest next update: Sat 18 Apr 2026 01:01:37 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: /zikrLval0b42KKH4fjsCDzUQBVF/djmlimxj7wDrIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2c:c3:11:20:c9:f5:ad:cb:ad:25:57:02:3f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Apr 17 01:01:37 2026 GMT
Not After : Apr 18 01:01:37 2026 GMT
Subject: CN=85afe378755427d59192081a06e8fef193c77d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:53:13:59:92:72:54:d5:91:b0:d4:57:54:
2e:03:b0:ec:df:63:51:75:a2:74:c0:ee:57:0c:0a:
2b:3e:35:84:21:05:2f:91:85:5d:c6:51:50:c6:a3:
b0:52:15:c2:2e:88:04:9b:db:33:06:ee:50:11:60:
f3:2a:b9:3a:39:5c:1e:0b:c1:42:5e:38:f8:07:33:
4f:a2:d1:af:4f:3d:43:d7:a0:9e:ea:c3:bf:e0:40:
1c:a4:18:08:61:ea:47:15:41:f3:51:60:6d:f8:88:
5c:fa:be:c9:90:e6:22:df:52:40:95:5f:0a:1d:50:
c1:ef:be:3c:2d:cd:07:ce:0b:7d:64:f0:d0:8c:0e:
99:8d:85:20:0e:c4:63:38:28:c1:5a:cf:7a:80:4e:
12:e7:1b:24:06:f4:bd:cd:e6:67:f4:38:94:81:72:
e4:88:d6:fb:f8:e1:c6:e4:f2:4d:5b:73:32:e8:d7:
4d:44:d6:ab:eb:71:3b:ca:8a:04:0b:c0:e2:eb:82:
d1:8c:2c:90:38:04:5f:85:3c:2f:e9:eb:56:6a:ce:
c7:14:a2:d8:55:29:3f:02:38:a2:10:52:fb:8b:dc:
c0:14:ea:9f:23:81:a7:a4:3b:1c:b1:07:af:1c:93:
21:cb:9a:9c:9d:f1:0c:6c:cb:4e:84:c1:14:8f:56:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AF:E3:78:75:54:27:D5:91:92:08:1A:06:E8:FE:F1:93:C7:7D:75
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3a:1b:b2:42:e6:39:78:f0:df:40:ba:43:24:3f:bb:df:62:
ff:77:9a:d8:ce:86:34:61:19:b2:13:e3:6c:ed:78:eb:34:7b:
6a:76:07:03:38:20:54:85:5c:39:3c:bf:0d:d4:2d:57:34:34:
f4:12:e9:c3:3d:7e:84:69:a7:18:27:77:da:f7:42:74:ae:3e:
03:4a:91:0b:13:f0:52:6e:b9:05:6c:6b:4c:2f:29:3f:6b:54:
f6:de:5d:1d:6b:5a:b8:81:3a:73:22:40:c7:e7:8b:51:0b:ca:
00:db:bf:61:a0:8c:df:20:31:ca:56:d5:b2:04:eb:ff:c5:8b:
00:fe:0d:d2:41:7b:9b:e6:e6:a1:15:c4:75:a7:62:55:4f:51:
0a:26:b6:9a:97:0b:28:10:a8:b3:7b:e4:03:00:5d:f6:bb:ef:
b8:7c:f4:2d:a9:f9:00:9f:8b:e6:14:d6:24:33:2e:31:6f:8d:
b5:39:2a:60:e3:3e:e8:15:d4:37:af:92:ee:0a:70:99:84:ff:
fd:8c:ad:3a:9b:f2:c3:30:16:0b:ab:11:ed:b2:6e:56:b7:fb:
dc:74:6b:46:65:d3:f7:82:fc:bd:a6:34:8a:8f:17:8f:dd:47:
69:89:ee:28:ba:9d:cb:88:a4:4c:e2:f8:e9:91:34:f4:a8:1e:
8b:a8:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:36 2026 by rpki-client