Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: c6mC9Wzt3OBg+uxfhn8/q5INsM9VGGlsRXw0XzAQIG0=
Subject key identifier: 32:FC:F0:80:CC:D2:29:64:3E:73:F6:82:F5:B9:8C:03:91:12:1D:29
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019DA48B2F949BB37CA5C29B76DC28C4995D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 023D
Signing time: Sun 19 Apr 2026 07:01:18 +0000
Manifest this update: Sun 19 Apr 2026 07:01:18 +0000
Manifest next update: Mon 20 Apr 2026 07:01:18 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: +Sg1fn48DpHpQzA+LwD9E7rikEK+nZyxHu1wdiiCezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:2f:94:9b:b3:7c:a5:c2:9b:76:dc:28:c4:99:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Apr 19 07:01:18 2026 GMT
Not After : Apr 20 07:01:18 2026 GMT
Subject: CN=32fcf080ccd229643e73f682f5b98c0391121d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:aa:a8:f3:ab:51:d6:91:df:db:e1:17:eb:
4b:ce:25:2b:da:1b:b0:8f:2a:f9:95:4f:c5:d5:ee:
65:8c:8c:bd:7c:d6:1c:fc:d8:a0:03:6c:66:e8:08:
f9:6c:52:5a:b1:13:ea:90:b5:af:c8:f9:5b:40:31:
55:42:7d:26:76:58:64:ee:e3:72:d4:b4:7a:aa:c9:
23:98:d5:8c:97:0a:58:59:e7:b5:98:c4:56:c7:20:
de:65:f5:2a:37:4c:95:a7:0f:f1:4e:93:9d:a6:81:
80:40:7d:81:6d:0f:7d:c8:ac:33:90:aa:83:d8:3f:
4b:33:16:1f:ac:c9:88:69:0c:fc:86:65:6c:85:fb:
0e:46:c9:c1:7b:8b:6a:85:27:3b:bf:7c:5f:9c:ad:
6b:de:5b:63:1d:00:42:43:d3:a5:ec:94:f1:e1:34:
e8:bf:5c:71:d2:eb:47:17:f6:44:2b:43:c2:9d:f8:
8a:aa:5d:3f:46:b2:90:41:e9:74:8b:9f:9f:5d:fc:
74:99:98:27:1e:84:39:e7:e1:9a:81:46:2c:db:b7:
b8:d4:31:b0:78:60:9d:84:40:cf:e3:8b:2b:7c:cb:
57:3b:02:12:34:11:17:a2:a3:24:f4:9b:f6:0e:32:
af:8d:92:53:df:38:b7:15:fc:3e:d5:50:ab:b9:91:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FC:F0:80:CC:D2:29:64:3E:73:F6:82:F5:B9:8C:03:91:12:1D:29
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:15:0d:59:15:ac:15:fd:0d:e9:af:24:af:0f:05:22:ef:
07:0d:48:cc:ca:b5:de:4f:57:a0:d6:71:4b:b7:11:56:18:6f:
ae:4f:a7:78:74:55:db:94:e5:db:c8:ab:7f:e9:29:75:a5:16:
d4:fd:ab:da:9f:53:60:e4:e2:a8:eb:5f:8b:a1:c9:49:84:6f:
25:77:aa:8a:82:67:da:01:46:96:d2:9d:10:88:b2:b7:02:60:
e9:6b:28:15:ec:0e:24:8a:50:55:e8:c6:3c:a3:58:f0:07:8e:
d4:7c:c8:e6:91:82:04:b3:2c:00:3a:bb:ea:4d:cc:8c:e3:18:
a6:46:97:80:3c:49:c6:c8:a9:44:73:ae:7b:7d:e5:cb:3a:e4:
c9:0e:06:2a:76:e6:d6:63:85:67:ec:55:bd:8f:b6:5c:16:87:
3a:21:0f:a1:df:33:56:a6:4e:01:89:7b:29:cf:12:cc:88:28:
7b:eb:78:d6:af:09:00:49:90:28:cb:17:98:5b:1f:1d:be:66:
03:4b:b0:81:ff:f9:1f:47:43:ff:02:6c:05:cd:39:c6:8d:6d:
1b:5f:41:06:c0:be:ac:69:92:3e:b0:3d:54:4a:86:8f:4c:66:
ff:34:33:49:fb:a0:00:0d:41:a1:8c:c3:08:f3:2f:7f:9b:48:
83:7f:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:17:26 2026 by rpki-client