Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: UZTZV8GFIhxY/IuMZ52eK4PxNhhXTVwLydh+7WW6AH0=
Subject key identifier: CF:32:1D:DA:DD:77:4F:70:51:F7:FB:27:B9:F2:3A:05:AC:DA:3A:A5
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 019D992AFC578E61AFB851A04FF86745E4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:24 +0000
Manifest this update: Fri 17 Apr 2026 02:00:24 +0000
Manifest next update: Sat 18 Apr 2026 02:00:24 +0000
Files and hashes: 1: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: OlN7ESkgeekt04MikYcRd7d7kdM8Og1dEg1sQpKxYCY=)
2: pm79H7mwduu7mnhDJctsn-uYWPE.roa (hash: ED5J8d3NpU/HwXaPFnumSsfSWb72ZAcfll3lZasNaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:fc:57:8e:61:af:b8:51:a0:4f:f8:67:45:e4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Apr 17 02:00:24 2026 GMT
Not After : Apr 18 02:00:24 2026 GMT
Subject: CN=cf321ddadd774f7051f7fb27b9f23a05acda3aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:73:73:32:b6:03:12:b7:70:58:4a:ab:15:
76:34:35:fa:4e:bc:b8:60:5e:e3:2e:fa:a8:bf:55:
45:8b:d7:b7:8c:78:10:25:7f:52:8c:8f:7f:00:f7:
38:27:f7:71:f4:bd:f5:cf:39:f7:62:5b:49:41:01:
e4:0d:f3:31:42:af:9c:77:98:8a:6f:45:b7:bb:b9:
bf:38:5c:51:5b:3e:97:ff:88:bc:51:45:ad:6c:38:
f2:83:d3:95:6b:fb:f2:07:9e:3d:ad:ea:e8:14:f3:
51:9d:38:db:1d:28:62:3b:af:c4:5d:d6:61:2f:db:
5d:8b:a1:e1:b8:f5:db:c3:11:32:c7:ee:0f:49:54:
7e:cd:48:53:29:b5:c0:d7:56:91:c3:0b:35:36:4b:
9e:e9:bf:55:32:69:c7:2c:36:67:8e:32:f2:ba:0c:
21:6e:f5:43:39:f8:12:57:95:a8:5b:8c:d9:21:cc:
c7:90:59:76:ff:37:27:18:b3:a3:54:f8:ee:64:86:
62:8d:85:c2:17:32:dc:4a:13:9e:4b:f5:a2:3a:5e:
97:a9:8d:25:6e:19:01:aa:42:18:d7:59:14:55:a0:
80:53:f4:cf:1b:0d:aa:c1:aa:c8:e6:cc:e3:46:6c:
74:59:f2:34:17:ae:5c:88:8b:bf:77:ec:98:d7:13:
ab:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:1D:DA:DD:77:4F:70:51:F7:FB:27:B9:F2:3A:05:AC:DA:3A:A5
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8f:bf:8a:57:20:cd:84:8f:49:28:78:ff:03:72:2e:0e:7b:
ab:c3:73:f9:5b:14:4f:69:ba:9e:6b:5c:f9:0f:c0:da:c6:54:
c4:53:29:a6:ee:99:09:2e:f9:6e:7d:39:49:21:89:7c:ef:05:
1f:b2:18:b8:09:cb:7c:18:f2:8c:74:f3:d8:12:37:34:64:88:
dc:e8:8a:4e:e0:8a:46:9e:ac:d6:56:2e:c2:9a:0c:5a:86:64:
72:8b:22:c7:fd:4d:9f:0b:c5:5b:65:5b:18:3c:e1:f1:92:42:
52:b0:73:7c:2d:ec:6f:52:2f:8e:75:60:94:d6:e2:9b:cc:71:
06:04:9e:a3:90:b7:98:39:c9:55:26:dd:0c:72:0f:51:ff:df:
e8:bd:70:d9:23:d9:06:7f:26:4a:fe:96:63:d3:33:85:b9:89:
80:70:77:09:fe:fd:41:30:84:17:5a:0a:0c:8d:32:e9:c1:5c:
21:5c:ec:d1:fa:a0:a1:7e:8b:bf:91:b0:2a:bc:6b:52:cf:6f:
6c:c5:50:76:e2:d9:4c:5b:79:e6:d7:38:11:37:9f:79:df:61:
49:1f:01:fd:70:89:27:6e:34:d6:91:ac:2f:2f:d5:95:eb:79:
28:19:23:4b:0a:6a:b1:d9:72:85:40:87:dd:1c:f4:61:df:14:
4c:5b:6a:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKvxXjmGvuFGgT/hnReS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTE2NTI3ZmQ5MWU5YjNjZjhlMDYyYmNlMDZkZjVjYmQ0
YzRiMWEwHhcNMjYwNDE3MDIwMDI0WhcNMjYwNDE4MDIwMDI0WjAzMTEwLwYDVQQD
EyhjZjMyMWRkYWRkNzc0ZjcwNTFmN2ZiMjdiOWYyM2EwNWFjZGEzYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZtzczK2AxK3cFhKqxV2NDX6Try4
YF7jLvqov1VFi9e3jHgQJX9SjI9/APc4J/dx9L31zzn3YltJQQHkDfMxQq+cd5iK
b0W3u7m/OFxRWz6X/4i8UUWtbDjyg9OVa/vyB549reroFPNRnTjbHShiO6/EXdZh
L9tdi6HhuPXbwxEyx+4PSVR+zUhTKbXA11aRwws1Nkue6b9VMmnHLDZnjjLyugwh
bvVDOfgSV5WoW4zZIczHkFl2/zcnGLOjVPjuZIZijYXCFzLcShOeS/WiOl6XqY0l
bhkBqkIY11kUVaCAU/TPGw2qwarI5szjRmx0WfI0F65ciIu/d+yY1xOrrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8yHdrdd09wUff7J7nyOgWs2jqlMB8GA1UdIwQY
MBaAFKKRZSf9kemzz44GK84G31y9TEsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjct
ZTBkYzE4ZTg4MjI5LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjctZTBkYzE4ZTg4MjI5
LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjY+/ilcg
zYSPSSh4/wNyLg57q8Nz+VsUT2m6nmtc+Q/A2sZUxFMppu6ZCS75bn05SSGJfO8F
H7IYuAnLfBjyjHTz2BI3NGSI3OiKTuCKRp6s1lYuwpoMWoZkcosix/1NnwvFW2Vb
GDzh8ZJCUrBzfC3sb1IvjnVglNbim8xxBgSeo5C3mDnJVSbdDHIPUf/f6L1w2SPZ
Bn8mSv6WY9MzhbmJgHB3Cf79QTCEF1oKDI0y6cFcIVzs0fqgoX6Lv5GwKrxrUs9v
bMVQduLZTFt55tc4ETefed9hSR8B/XCJJ2401pGsLy/Vlet5KBkjSwpqsdlyhUCH
3Rz0Yd8UTFtqvA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:25 2026 by rpki-client