Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier: OT8C0Af0/H6txc/lwSrZxYRlrZTKu8fOL+UWBH6T1Zs=
Subject key identifier: 00:1B:E7:83:76:E0:71:96:32:EE:EF:8E:04:0F:0F:C4:CC:3C:68:DA
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial: 019CAC1016082DA3626634752FA9459DBA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number: 07AB
Signing time: Mon 02 Mar 2026 01:01:01 +0000
Manifest this update: Mon 02 Mar 2026 01:01:01 +0000
Manifest next update: Tue 03 Mar 2026 01:01:01 +0000
Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: RYu6xyCazetia+ITKsR/RmhgR9/J1VBdE/yBj/7pE7s=)
2: OmwLJQSTnBEef8YiJyy3vHeNNZ0.roa (hash: nXRJF8GSGVftBJX0NpNorUWjicV35MGzGuSyOIxO7fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:16:08:2d:a3:62:66:34:75:2f:a9:45:9d:ba:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Validity
Not Before: Mar 2 01:01:01 2026 GMT
Not After : Mar 3 01:01:01 2026 GMT
Subject: CN=001be78376e0719632eeef8e040f0fc4cc3c68da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:ad:7d:d9:dd:8a:fc:da:35:f7:f7:8b:d8:
ef:c5:8c:f4:13:ca:a2:83:ac:4d:cf:69:60:93:45:
27:83:d9:8f:70:30:5c:2f:55:22:ea:84:96:44:30:
8d:07:b1:f9:cb:f2:dc:23:e3:38:d3:19:2d:cf:6b:
df:af:2d:74:71:4c:dd:65:56:65:9c:2a:12:d5:94:
6d:10:16:ed:c9:19:3e:dd:7a:d3:67:07:c7:a9:1a:
c8:10:3a:ee:36:7b:98:6d:45:ac:67:fc:3f:5e:08:
9e:55:d5:8d:4e:7a:76:0d:c1:5a:e4:cd:97:df:66:
0d:06:49:9b:c1:82:f3:7d:25:4c:52:71:e3:97:26:
c6:80:74:e9:48:a5:18:c7:64:ac:fc:c3:e3:04:f9:
48:5f:58:ac:c0:f7:5c:dc:ef:4f:1e:2f:77:21:f4:
f3:ed:10:dc:a3:d9:fa:2c:83:50:59:b9:f1:c9:7d:
03:89:a5:17:b1:54:72:0b:23:3e:d8:56:a8:f7:f5:
cc:95:f0:67:2d:3f:fe:6d:b6:cc:44:fc:bf:c6:77:
d6:54:95:39:d7:88:9a:ca:d4:0b:53:c7:03:d5:be:
b8:d7:ce:5a:52:14:a5:ff:01:6f:04:c2:68:96:ab:
8f:4f:e9:b9:2e:58:f6:a9:e2:84:55:42:b0:5b:3c:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:E7:83:76:E0:71:96:32:EE:EF:8E:04:0F:0F:C4:CC:3C:68:DA
X509v3 Authority Key Identifier:
keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:de:d9:b7:04:3f:10:03:2a:88:8e:b2:ac:c3:d4:eb:9a:3b:
aa:61:ec:34:b6:66:48:be:ad:b4:09:b8:b4:96:7d:dd:66:83:
35:16:e0:d0:f4:66:9f:36:98:d4:2e:0f:55:14:63:15:66:77:
ae:b6:fd:e4:f3:0a:db:0f:e9:c2:1e:b8:64:b3:35:65:e2:b3:
19:a6:a3:9b:e9:62:86:25:c2:05:c1:d6:d5:e5:66:92:de:f2:
fa:08:9b:85:b7:df:ed:97:b7:30:c4:38:76:b0:35:50:e0:dd:
62:ac:ca:10:b7:da:a1:e3:3b:62:f4:bc:6a:9d:67:56:89:fe:
98:a9:2a:8e:d7:29:fc:f6:ca:21:2d:91:7c:59:cf:fd:70:67:
91:0d:fb:0e:ca:93:95:18:81:e2:b0:cd:c2:91:9a:49:4e:e6:
5b:cf:e8:43:f1:ed:9d:80:ab:f3:b5:0d:c6:62:15:7e:9f:d9:
02:49:97:23:b0:ee:02:a7:0d:7e:1f:6a:ca:5c:9a:4f:37:e1:
35:05:ac:0c:2d:1d:9b:4b:35:d6:b6:c4:ea:e6:80:8e:44:e9:
ea:d5:5d:fc:5e:99:20:cd:31:80:ef:bd:81:b7:8b:94:34:aa:
78:ff:77:b5:d9:c8:f0:1e:5b:2b:cf:6a:f5:62:91:44:b7:97:
47:f5:d1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:12 2026 by rpki-client