Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
File: opu5R2dQ7A4mIqUF5RUS729aW7Q.mft (raw, json)
Hash identifier: 2GsFFyAMA2lfciLJGkYFzuCMaBVeRPoD4YJvt8LaQeg=
Subject key identifier: 26:DB:FC:69:BB:FA:33:42:30:98:EC:05:E2:F3:8E:16:EE:C4:7F:84
Authority key identifier: A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
Certificate issuer: /CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Certificate serial: 019D9C9ADBA8B6FD8112CCC3DB96C43A8525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
Manifest number: B5
Signing time: Fri 17 Apr 2026 18:01:27 +0000
Manifest this update: Fri 17 Apr 2026 18:01:27 +0000
Manifest next update: Sat 18 Apr 2026 18:01:27 +0000
Files and hashes: 1: gSw2I7cSynhsa1v5yL1GK2liJV0.roa (hash: OgZIv5antAo192tWCR26SC8ruKYKpzX9vhQDQJpKYWw=)
2: j3tFGt__mjBy6A4laCBtTNakkR0.asa (hash: Ya4LiyF5bRj+tvHg5hNrH2HeLbopOCsjFcZajvf8SKE=)
3: opu5R2dQ7A4mIqUF5RUS729aW7Q.crl (hash: z7tkLPvy+IyKok1nRoumJJ21JZjZ4UGfkJaRw66wrF8=)
4: x3mNd6D6usA5k_7l-emYO2TtcmI.roa (hash: kwiTjzAM2+mXC68INamqfljbqxN1Ud0ltCywsiZuaEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:db:a8:b6:fd:81:12:cc:c3:db:96:c4:3a:85:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Validity
Not Before: Apr 17 18:01:27 2026 GMT
Not After : Apr 18 18:01:27 2026 GMT
Subject: CN=26dbfc69bbfa33423098ec05e2f38e16eec47f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:5a:2f:63:04:64:31:d6:63:c7:51:73:49:
fd:13:ff:28:d7:9c:aa:50:d8:15:64:46:f7:df:15:
7e:37:9f:6c:7a:54:fa:a6:96:42:76:08:22:52:b3:
09:df:7e:9c:76:16:d2:d6:99:de:31:e4:ff:2d:40:
88:cf:79:b6:76:8f:52:70:4a:f3:a8:29:37:2e:26:
68:a7:66:e1:51:44:80:68:2b:11:45:e8:24:7b:ea:
ea:76:61:5b:de:db:18:b1:c9:3c:d1:09:2c:1d:65:
03:fc:7a:26:7d:f5:83:46:f3:37:5a:f8:05:c6:e3:
2f:22:93:fc:4a:0a:43:44:cb:fa:ca:8a:37:61:b8:
99:bb:13:8c:1d:67:1c:77:35:8f:c7:29:09:12:3c:
42:b5:2a:6d:0e:02:a4:62:78:5a:3a:35:2f:23:8d:
02:e7:8d:dc:4f:0b:2e:ff:8f:f7:a1:04:e7:7b:ae:
ae:fd:12:50:74:80:8b:df:38:24:a2:9f:44:29:3f:
50:28:bf:e2:aa:bf:aa:a6:b0:28:a1:8c:60:41:40:
df:1a:45:a9:df:55:12:16:91:78:04:e8:57:c1:fe:
b3:46:32:11:2a:2b:7e:88:3a:4a:de:89:62:b9:2c:
f9:96:b1:67:ba:ec:e1:21:a5:8c:23:7f:b7:95:e1:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DB:FC:69:BB:FA:33:42:30:98:EC:05:E2:F3:8E:16:EE:C4:7F:84
X509v3 Authority Key Identifier:
keyid:A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d1:74:56:5e:2d:c4:51:1d:8b:47:be:9e:9a:dd:c6:7c:9b:
cb:52:57:f0:a8:49:6c:b7:62:80:ee:da:85:db:73:d9:24:36:
c8:e7:3a:0b:73:4c:f3:f0:1a:dd:76:90:30:63:8f:61:68:ef:
04:51:27:e7:08:37:ac:62:c1:eb:02:66:9f:32:8c:6d:2b:8f:
a8:00:66:c9:6a:93:2a:8e:92:24:a4:2e:ad:4b:81:cd:62:e7:
3d:aa:6d:94:16:1c:90:80:14:b2:82:72:59:c5:98:37:4f:ba:
4b:95:4b:d5:3e:48:ce:f5:d7:f2:62:55:8b:60:b1:85:c1:69:
cd:fb:98:68:c8:14:02:2a:30:ab:e1:e7:e0:aa:ab:0c:46:28:
a8:f3:d0:2e:77:fe:b3:40:18:9c:e8:21:d2:d4:b2:e7:6f:b0:
a4:3d:9f:ea:65:aa:bb:b3:50:b3:09:93:99:eb:8f:2a:65:73:
46:fa:08:73:78:60:1c:c0:10:89:32:29:72:67:5a:5e:57:ee:
22:8f:91:d7:e4:89:d9:be:29:64:8d:fe:50:ae:b7:70:b2:5a:
96:c1:92:e4:f2:01:2d:58:12:4a:2c:28:63:10:9f:c4:e9:d6:
af:b7:e6:aa:10:63:2c:9e:a0:5c:ef:87:23:d1:6d:8d:97:31:
0c:07:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:29:55 2026 by rpki-client