Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: 4qbkuqv9kFeKnl7EVQ7j58qYFeyPIKpYNEO2qz7fiFc=
Subject key identifier: 0D:64:10:D4:2E:3D:DC:D6:1E:50:9D:1C:95:CF:69:7E:0F:6C:01:3B
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019CAD59BBD03B97EF7E6F1A78AE5CCECD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 01BD
Signing time: Mon 02 Mar 2026 07:01:04 +0000
Manifest this update: Mon 02 Mar 2026 07:01:04 +0000
Manifest next update: Tue 03 Mar 2026 07:01:04 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: oqq7t0PvfYhXS0b2I+1MRn/io7VfeVNA7SuXL3SXO/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:bb:d0:3b:97:ef:7e:6f:1a:78:ae:5c:ce:cd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Mar 2 07:01:04 2026 GMT
Not After : Mar 3 07:01:04 2026 GMT
Subject: CN=0d6410d42e3ddcd61e509d1c95cf697e0f6c013b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:6f:62:5e:fc:e9:4b:2e:5b:97:53:e5:a9:
89:51:9d:8c:61:5f:2d:2e:42:46:f4:88:f1:1d:68:
af:34:97:81:5e:b6:2c:b3:7b:dc:c6:e5:1d:34:9d:
c3:f7:a1:81:a4:d3:19:a5:15:1e:1d:9e:54:44:2d:
67:27:32:5a:dc:de:bc:69:82:66:1c:e4:33:ee:fc:
74:b7:33:5c:e1:44:f1:bc:d2:d4:8e:bf:8f:8b:1c:
7e:22:59:ce:32:03:91:b6:3f:05:88:cd:7c:1c:f1:
f1:b8:71:66:4b:6b:d2:86:4a:57:aa:c7:6a:49:80:
13:0f:b4:79:0c:89:84:71:9d:8b:17:88:45:0f:2c:
77:7d:14:5e:b4:55:35:94:41:64:94:30:cb:3b:2e:
22:27:ce:28:cd:f6:f1:82:82:1d:02:60:af:ed:ed:
16:e7:5d:a2:d9:ac:a6:99:95:5f:8c:01:ca:b0:82:
0d:03:ac:60:56:2c:ec:48:de:ef:64:e0:07:57:e7:
f7:ce:68:df:1a:d4:81:dc:3c:d0:76:3c:b9:6e:72:
c3:73:59:f2:c7:45:fe:fb:8b:1e:36:d6:5d:12:b5:
9f:90:52:1c:44:1d:a4:fc:86:07:af:85:0b:10:b7:
fe:07:6b:83:4a:39:87:4d:57:ec:8c:d6:ac:bc:a5:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:64:10:D4:2E:3D:DC:D6:1E:50:9D:1C:95:CF:69:7E:0F:6C:01:3B
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:33:40:3e:7e:37:3e:25:3a:89:40:85:f4:9c:44:e3:f8:e2:
ef:59:90:bf:2e:b3:d4:98:55:c2:ad:5a:42:09:3e:bf:02:81:
8d:ce:d5:e7:6d:c8:a1:37:41:ee:e1:e0:7a:cc:24:15:cb:97:
7c:1b:ca:39:ef:c0:dd:da:9a:58:65:2c:01:f4:bf:b9:39:d3:
39:33:03:b0:58:fa:60:b1:ed:15:32:f9:30:55:91:ec:b3:11:
b7:7e:70:1c:cc:ef:ed:c3:b5:8b:94:7c:78:32:c6:35:04:e5:
02:9c:56:92:c3:98:a7:c6:77:80:73:07:b1:1a:73:89:02:8b:
24:23:3e:9c:14:8f:38:8e:35:f7:e8:a0:dd:23:6c:46:39:de:
ae:9b:d8:99:71:ec:87:be:b9:96:45:17:eb:74:74:e4:50:e5:
5c:fd:b4:10:e2:a3:e7:0f:ef:ae:48:86:7e:08:73:2c:18:89:
f8:c9:b2:3f:c6:14:21:d0:24:6c:69:a3:2d:c8:6f:eb:61:a1:
6b:bc:3f:e3:79:66:eb:df:4f:52:1d:47:8e:1b:1f:aa:cd:31:
39:d9:46:d9:2c:27:de:35:72:17:24:8a:c5:2f:8c:7f:c9:62:
69:c0:04:b8:95:51:04:cd:92:4e:62:66:ca:cf:9f:3c:a6:dc:
10:95:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:05 2026 by rpki-client