Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: dO5BJzlak7v8/sQMijsF81RyFJfgEBMxeU9tbV9z16k=
Subject key identifier: 7A:C6:6F:EC:B7:EC:5A:77:6D:04:91:4E:0A:DC:F8:08:85:42:2C:1D
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 01A0C40D92455C6D408F3F69346000B95E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 03DB
Signing time: Mon 21 Sep 2026 13:00:18 +0000
Manifest this update: Mon 21 Sep 2026 13:00:18 +0000
Manifest next update: Tue 22 Sep 2026 13:00:18 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: bt3zZI9XHyspjtWULQNQSSnF2prhjuyJWplPSGvpcn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:92:45:5c:6d:40:8f:3f:69:34:60:00:b9:5e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Sep 21 13:00:18 2026 GMT
Not After : Sep 22 13:00:18 2026 GMT
Subject: CN=7ac66fecb7ec5a776d04914e0adcf80885422c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:f4:a6:23:9a:9e:6c:73:37:b4:51:57:04:
d3:d2:df:7d:72:7c:03:f8:50:08:5f:b5:95:2a:f4:
ab:43:a5:e3:7e:8b:a0:fc:91:bc:09:13:a7:e8:6a:
64:9f:eb:78:94:47:de:5f:18:b8:2b:6a:ca:e8:35:
ad:61:10:aa:65:3f:db:d6:29:d7:03:be:43:47:b2:
01:ea:26:86:2d:5e:a3:c3:7e:2f:11:af:76:dc:0a:
67:ac:39:44:f7:b3:0d:b4:f7:91:38:69:79:74:68:
ed:b5:89:97:dc:a8:80:0c:37:46:17:01:66:55:69:
90:8d:d6:15:29:a6:70:1c:fd:19:73:7c:ef:aa:fe:
54:b9:5f:42:da:4c:9a:f7:b0:1a:e8:ee:39:32:ef:
91:8c:77:6a:fa:be:d9:8b:00:d9:80:bc:c9:f9:a6:
53:fa:89:53:64:92:34:53:1a:c3:08:26:4b:1d:7b:
b0:a4:90:36:a3:bb:e2:24:92:5a:08:c1:29:9d:46:
4a:d4:d2:8e:c5:d4:75:a2:2c:db:f6:11:c4:ba:ba:
66:0a:1f:62:2e:fd:44:7e:67:a7:d6:7b:d8:f2:a0:
c9:11:c6:61:4e:ae:73:ba:67:f1:0c:50:ac:ef:a6:
b4:31:30:83:e6:01:17:d7:73:31:c2:71:e7:59:6d:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:6F:EC:B7:EC:5A:77:6D:04:91:4E:0A:DC:F8:08:85:42:2C:1D
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:49:6d:2d:45:10:d7:83:c1:ea:94:a0:f0:55:2b:c3:5c:65:
cf:2d:9a:93:f9:62:1e:14:96:53:48:43:19:a9:90:20:d1:ae:
1f:34:1e:af:1b:60:9e:45:e3:8f:ec:5e:e7:a9:51:3d:85:45:
d0:65:ae:dd:a3:2f:eb:6d:27:22:6e:da:e3:1d:e9:7b:89:fe:
c5:6f:97:13:4d:70:17:d2:09:4e:c6:5b:9b:04:b7:6f:1e:66:
25:79:d7:fc:17:a2:ea:c5:ce:d6:4c:b5:5d:de:ae:ba:05:ef:
e2:31:dc:ea:80:67:12:54:8e:cd:69:0a:2d:1d:08:78:77:1e:
3d:22:62:8c:f6:12:fe:73:7f:6f:d6:bf:ad:f8:b3:86:d9:67:
51:d9:17:48:12:12:01:18:4b:3b:4b:8d:cb:2d:3c:8a:9d:ae:
4c:2f:fe:e6:b2:27:58:49:db:3a:f7:63:cc:69:a6:22:ea:0d:
a6:9a:e1:1d:a1:79:7c:1e:95:27:f1:04:21:7a:a8:38:e6:10:
95:60:1d:25:a9:26:25:f5:69:fe:5e:f5:47:0a:46:2a:c9:fb:
76:79:ec:e3:d5:18:fa:2c:8a:ad:02:f9:e0:92:62:d5:50:a4:
ca:b8:33:98:e8:0d:b7:39:ba:c9:2e:d9:08:0e:16:a7:c7:95:
d2:c6:36:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:40:16 2026 by rpki-client