Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: P+sTXp+8/yKUarWdECtiI7tWrw0EBabEG+dWdD5MErM=
Subject key identifier: B2:B7:1D:43:F7:76:0E:20:E7:3C:C8:FF:3A:8E:61:7E:C2:CC:C9:11
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019EC06DAA905744BF574A77ECD546AC28B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 02D0
Signing time: Sat 13 Jun 2026 10:01:12 +0000
Manifest this update: Sat 13 Jun 2026 10:01:12 +0000
Manifest next update: Sun 14 Jun 2026 10:01:12 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: Zc0Rp+sE9Js59VSP+nlCz2uzPXzW6v5v99Gp4bbJnX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:aa:90:57:44:bf:57:4a:77:ec:d5:46:ac:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Jun 13 10:01:12 2026 GMT
Not After : Jun 14 10:01:12 2026 GMT
Subject: CN=b2b71d43f7760e20e73cc8ff3a8e617ec2ccc911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:55:a0:08:4e:de:0c:20:0d:9d:bc:3d:5d:
be:a7:64:66:cd:28:0b:66:79:f0:81:cc:50:07:70:
e9:27:e5:9f:0a:37:24:c1:f9:bb:0d:12:76:e2:6c:
7f:f6:61:1b:05:9c:b1:10:8f:8c:a9:05:22:08:8e:
20:7c:56:ec:95:e2:8d:33:b9:f4:a7:93:5e:14:57:
dc:ff:4e:d2:cc:3b:9e:2a:3d:4a:5c:c8:29:57:84:
ab:93:6b:3f:6a:6a:7c:3f:14:4c:4f:44:09:7b:c1:
ff:ac:98:f5:19:93:51:29:9a:64:51:95:ed:ab:e0:
4e:61:4c:70:f0:e8:bb:c4:f3:be:51:b0:ad:ce:c8:
98:cb:b7:ee:85:a9:d9:d4:6e:18:8b:73:88:56:9d:
3a:02:2a:e8:b0:99:f5:b5:96:a9:c1:59:7d:ad:da:
20:ae:82:54:9d:18:e7:b7:db:e1:3d:f5:6a:06:91:
cd:d2:bd:63:26:e9:bf:c3:17:32:6b:4f:2a:05:37:
3e:df:c4:12:75:71:3f:bc:48:d7:5b:a0:30:28:0a:
e4:5f:16:68:ca:dd:07:ec:06:93:4e:ba:6b:86:84:
c6:e6:a2:45:79:de:f5:75:08:4a:4e:6f:42:8c:81:
93:90:cb:67:20:6d:df:9f:46:3a:5b:f7:97:27:e5:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B7:1D:43:F7:76:0E:20:E7:3C:C8:FF:3A:8E:61:7E:C2:CC:C9:11
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:81:c7:51:1e:09:e0:a7:14:ee:eb:32:c7:86:10:61:21:38:
8c:0d:e2:46:2d:f3:a3:0f:91:05:11:ca:b8:85:d4:7f:28:48:
44:13:fa:06:00:e8:e4:17:49:b7:ef:4d:99:ba:b2:db:52:91:
7d:a3:e4:f3:4a:c9:c0:28:42:d2:e6:d8:01:22:60:f3:d8:db:
1e:cc:73:92:a6:24:ed:dc:4d:da:c6:bb:9d:19:c7:ac:87:06:
05:ea:f6:18:ac:d0:1b:f6:30:87:83:38:6e:81:4d:ab:fa:0b:
7a:62:65:f6:e5:4a:93:ac:ac:d0:30:f4:08:d8:2d:da:e3:5e:
c2:62:13:17:4c:1f:e8:1c:5f:b4:1e:63:5f:0e:00:fe:8e:af:
cb:94:ac:e4:92:fe:12:8e:3e:6a:67:59:12:45:16:43:18:0c:
19:c3:ca:4e:83:c7:62:2b:09:1c:80:dc:82:7f:2e:70:ea:d4:
91:c3:cf:51:bb:2b:23:e9:1d:97:cb:b8:0c:22:b5:61:cd:9a:
19:68:04:7c:77:21:7a:86:12:47:28:c2:79:74:d2:d2:92:17:
95:84:50:92:67:e4:d8:68:bd:8e:ce:4e:9a:01:2f:a3:22:50:
96:d3:01:4f:0e:4d:fe:2a:dc:ac:5b:29:2a:b1:52:c0:41:6f:
04:1c:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:07 2026 by rpki-client