Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: eVGI7Lx9JV04aKPMp1w1KsQB0lygMhDVAwU4+VIINXc=
Subject key identifier: 5F:D8:A6:A6:09:4E:83:9F:45:3A:5C:6F:F8:9F:FE:5B:11:9D:61:88
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 019CABA2798F9B7D4FF46A4675324B3AE113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:01:17 +0000
Manifest this update: Sun 01 Mar 2026 23:01:17 +0000
Manifest next update: Mon 02 Mar 2026 23:01:17 +0000
Files and hashes: 1: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: ggS6nrn+KXjwCsYX9iomEGTlbuk2SibOJ4Y/91SSKCg=)
2: pm79H7mwduu7mnhDJctsn-uYWPE.roa (hash: ED5J8d3NpU/HwXaPFnumSsfSWb72ZAcfll3lZasNaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:79:8f:9b:7d:4f:f4:6a:46:75:32:4b:3a:e1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Mar 1 23:01:17 2026 GMT
Not After : Mar 2 23:01:17 2026 GMT
Subject: CN=5fd8a6a6094e839f453a5c6ff89ffe5b119d6188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:dc:f9:6b:e4:f7:2f:46:d9:b3:7c:24:f0:
98:66:2e:41:fb:df:5a:26:a5:d5:01:1b:59:9c:65:
9a:06:c7:3a:f9:58:57:41:cb:c8:3f:44:2d:06:17:
31:99:81:c8:e9:9e:7a:1d:fc:a2:4f:2e:60:d4:9a:
75:27:83:06:7b:64:e9:61:25:6e:6b:e2:4f:a8:78:
98:f7:14:39:f2:68:27:aa:c1:01:36:07:19:3e:34:
97:95:9f:06:7b:a7:02:83:b4:34:32:26:a1:06:90:
2e:12:be:ca:0a:1c:07:49:6b:b9:d8:ea:0b:2f:39:
7c:c3:ea:f6:09:ca:ef:7b:5c:d0:7a:6f:b8:d8:3e:
b6:e1:1f:54:b0:6b:e8:e6:c6:a6:5a:47:3d:06:4f:
72:40:d8:ac:46:9a:28:4e:99:e8:e8:e9:c5:74:69:
0d:cb:98:d3:6a:06:4c:46:4f:b8:95:1f:95:96:0d:
39:b4:50:a8:49:8a:aa:56:7c:3a:cb:c0:04:2f:9e:
2f:9c:ad:23:c3:fe:61:74:7a:89:89:3d:20:b2:ef:
d5:f2:09:08:3c:ec:3f:19:a9:39:a1:63:a5:4d:54:
b3:99:b4:7b:cc:e0:eb:0b:24:81:62:6f:77:86:66:
26:55:01:18:e6:16:cc:28:bd:ae:5d:a1:07:92:6c:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D8:A6:A6:09:4E:83:9F:45:3A:5C:6F:F8:9F:FE:5B:11:9D:61:88
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2b:11:3a:64:33:7c:a8:ea:7f:fc:76:69:bd:9c:90:fc:0b:
dd:df:a9:11:34:19:05:49:87:0a:4b:a2:4e:4b:e5:cf:9f:35:
2b:08:88:46:5e:97:c2:ba:1b:d2:62:9d:30:38:09:f2:5b:ed:
7a:cf:31:35:1d:1d:3a:ee:51:66:d8:7d:b5:98:e5:0e:e7:ac:
2f:89:52:2d:ee:55:a3:a0:9e:d6:0d:23:56:3a:d9:e4:ec:34:
b1:d1:7b:ba:0b:9e:ae:54:be:fb:03:53:0a:3d:21:b9:25:56:
32:e0:d2:52:60:78:fe:9c:2d:40:46:ac:c4:ff:ae:98:61:ff:
84:79:50:bb:3d:2d:c5:c7:96:61:63:58:66:b6:00:0b:2c:8c:
9e:10:47:10:a2:4b:79:26:f4:d8:d8:4a:a6:e3:01:91:87:b9:
dd:f7:1b:5f:ab:ae:4e:ff:44:f5:8d:c7:83:a6:75:47:46:85:
70:50:85:a1:82:d4:4d:16:45:aa:7c:9d:f5:de:ac:f6:d1:6b:
0d:2a:15:0d:b8:fd:d3:80:a0:56:c8:04:2d:58:5a:0c:95:fa:
31:6b:d4:39:2c:81:37:76:c0:c2:94:f1:e7:53:1f:9c:15:30:
5b:85:68:0c:fc:df:57:bb:38:e7:bc:75:fa:49:65:43:95:97:
3d:4d:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:50 2026 by rpki-client