Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: hlXWBkm1NRHt6F2ZlFyTan4b9COjMp2IZADUlqvi+2k=
Subject key identifier: B8:B3:10:84:30:F8:3D:B5:02:D2:8C:EE:CA:02:B8:08:9F:16:34:58
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019FAA1A1910810E3F4588A5D2FC5015FA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 0349
Signing time: Tue 28 Jul 2026 19:01:04 +0000
Manifest this update: Tue 28 Jul 2026 19:01:04 +0000
Manifest next update: Wed 29 Jul 2026 19:01:04 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: LiIzMbQtM4/WOcsryVuRjdGwYw1g5WelSf2kabvpFv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:19:10:81:0e:3f:45:88:a5:d2:fc:50:15:fa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Jul 28 19:01:04 2026 GMT
Not After : Jul 29 19:01:04 2026 GMT
Subject: CN=b8b3108430f83db502d28ceeca02b8089f163458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:83:81:2a:d5:2f:3a:d5:08:c5:79:e2:98:
82:5f:de:e2:8f:07:68:23:6d:53:d5:a8:59:18:47:
8c:6f:4c:12:da:c1:ea:8c:58:52:b3:24:57:b3:75:
6c:b0:da:07:d5:26:b4:26:f5:bc:a6:88:b4:bf:fa:
00:f1:74:48:fc:e8:a4:45:54:55:ea:92:9c:e1:bd:
c8:02:dd:3a:f5:d6:f5:60:8f:5a:3c:fc:33:51:de:
c0:5a:9a:07:fe:57:c7:c4:d7:92:98:27:68:5e:9e:
17:c0:d3:d3:ea:1e:91:b9:3f:a7:f3:04:61:32:bc:
33:43:86:62:6e:f1:4e:12:31:3f:65:16:3d:ce:c1:
a3:e6:ea:fc:ab:98:74:68:a3:8b:cf:25:0f:11:50:
80:f2:6e:d1:60:4f:e3:13:8a:29:4a:cc:26:7d:c1:
bd:bf:54:cd:ab:86:a2:cd:df:c3:99:78:79:f0:a1:
76:4a:0c:a9:2d:5e:8a:ad:7c:10:9a:06:64:4b:a0:
34:0c:b4:5f:17:a5:de:c4:10:f0:1b:01:ee:0d:ff:
64:f0:db:25:33:e7:8d:83:74:7a:bf:3f:19:c9:c0:
79:bf:f8:bf:0f:42:c9:47:c4:83:38:fc:be:3a:af:
f2:a3:37:ab:48:77:af:8d:6b:89:35:b8:b5:e4:09:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B3:10:84:30:F8:3D:B5:02:D2:8C:EE:CA:02:B8:08:9F:16:34:58
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:43:77:15:41:60:5c:4d:e6:1a:6d:62:da:77:19:e4:6b:98:
2b:6c:2c:1f:09:90:95:c2:aa:de:36:6e:69:7e:df:08:0a:e0:
f3:1d:8c:e5:0f:86:53:33:fa:2a:9c:b7:95:d3:89:8c:5f:ed:
64:fb:bc:5e:97:aa:78:af:0c:0f:a0:ac:fa:c9:63:b7:8b:d2:
b0:35:20:27:b9:e3:cb:e3:28:54:e0:4d:f0:97:76:bf:a4:97:
f3:70:f4:03:09:dc:b2:71:89:02:16:61:91:d7:a7:d1:f1:86:
b2:f8:54:5c:d8:39:33:4a:b4:e9:1f:19:11:2c:97:fd:eb:62:
b6:1f:56:fe:db:4d:38:38:ac:94:6e:96:45:db:6d:fa:bc:3d:
69:5d:8b:4e:a2:7a:c3:46:0a:73:5e:64:55:5e:d6:a5:7c:98:
99:cb:30:e1:c6:79:ef:26:1b:29:dc:93:c9:3e:57:83:d0:74:
22:69:e8:86:76:30:22:24:74:6a:49:68:85:16:71:b8:ab:7c:
37:69:24:2b:66:47:52:01:6f:75:15:04:91:06:d8:e5:7e:39:
d8:f3:46:2a:0f:b9:5c:8d:3d:7c:78:3f:e2:2b:8e:59:04:d7:
af:5a:e9:5e:2d:2e:37:18:42:a2:ce:99:27:68:7b:79:cf:51:
69:04:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:55 2026 by rpki-client