Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
File: OpNtLymObP1WYEVz0e-eDoKZtSk.mft (raw, json)
Hash identifier: Z26XtoRc/8H+S2XZRfcxozwNt0fPRoWXJ7K40YFs1eM=
Subject key identifier: 24:A9:1B:04:AD:AB:8B:AB:FB:AB:8D:AF:66:D0:5F:33:81:80:D3:A4
Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Certificate issuer: /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Certificate serial: 01A11F769763905A300B3888FF0435FC8D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
Manifest number: 1359
Signing time: Fri 09 Oct 2026 07:00:28 +0000
Manifest this update: Fri 09 Oct 2026 07:00:28 +0000
Manifest next update: Sat 10 Oct 2026 07:00:28 +0000
Files and hashes: 1: OpNtLymObP1WYEVz0e-eDoKZtSk.crl (hash: vQ7G6Xjr6DX2Y5ssJqiTeJPPEFkToaOCImmA0EmyMfY=)
2: e4qPjYtVZNjFgNgoQb6aifisJTs.roa (hash: 1M+oNLSG3cS6v1C1UyKbtqc0oXSkYgVWMgvB/761VUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:76:97:63:90:5a:30:0b:38:88:ff:04:35:fc:8d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Validity
Not Before: Oct 9 07:00:28 2026 GMT
Not After : Oct 10 07:00:28 2026 GMT
Subject: CN=24a91b04adab8babfbab8daf66d05f338180d3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:9e:80:65:30:3c:21:86:89:db:be:13:ef:
80:4a:44:72:15:45:2e:cd:fa:1e:8e:7e:c5:ce:a6:
fa:86:28:1f:3f:9a:8e:6c:e9:f8:82:61:11:d7:3a:
ef:8a:e4:11:f0:3b:6d:47:37:af:01:c3:4a:fc:5a:
28:d6:a0:63:a9:55:9e:74:16:d3:3b:28:8b:5a:b4:
ff:61:f4:44:d1:a4:b1:69:37:73:e8:8b:a1:a0:d4:
10:34:6c:11:27:27:a3:6e:46:ac:e1:b4:25:92:b6:
0a:bf:09:e7:fe:df:c3:a9:fa:0a:06:7f:91:e9:3e:
df:ae:d9:f8:66:67:cf:9b:63:2d:20:b3:9f:9d:67:
6c:05:5e:bc:c1:30:c6:cc:cb:ea:24:78:a3:c8:95:
20:76:00:6a:f2:31:ed:4c:0e:26:a7:83:a6:7a:47:
64:dc:15:19:7e:ad:28:1d:82:da:d4:86:da:18:cb:
e8:88:02:03:1f:2f:09:8c:20:21:a3:f1:5d:48:1f:
d9:19:ac:ff:14:93:80:26:c2:5e:7c:72:70:a1:89:
95:f9:07:91:5a:8a:be:3d:19:21:8b:e2:ed:17:03:
fc:67:ea:a6:21:c1:27:64:b9:f0:c2:0c:6e:3b:12:
2e:71:67:f6:1c:39:8e:e5:ba:82:48:5f:2a:ea:31:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:1B:04:AD:AB:8B:AB:FB:AB:8D:AF:66:D0:5F:33:81:80:D3:A4
X509v3 Authority Key Identifier:
keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:37:7a:8f:f8:37:59:f9:b7:ed:d0:28:81:37:1b:e5:71:48:
20:0f:c7:25:37:6b:47:93:64:73:91:91:2f:c8:8c:d1:34:93:
df:66:68:2f:6a:fc:3a:e1:98:6a:a7:e3:60:3b:fc:a3:6b:da:
bc:22:32:aa:0a:a6:33:6e:69:08:0b:1b:4e:3e:e5:49:e0:59:
c7:e4:a9:32:bc:be:e6:72:ce:fb:92:7f:f6:65:ae:da:e6:ca:
60:a2:61:39:c5:9e:f5:a6:20:44:5d:2e:70:ee:0c:1a:9e:c7:
ce:30:a6:65:30:97:9f:87:6c:26:be:f8:c9:66:e2:36:19:b4:
af:80:20:dc:47:5b:a6:bc:46:d6:7c:98:3b:3b:35:05:db:78:
90:48:c7:90:67:8b:18:40:e3:6f:44:ac:d3:12:cb:7d:c7:67:
88:f0:c5:ab:c1:26:26:b4:fd:f0:90:b4:80:7f:d2:03:0c:78:
e7:88:cd:e6:85:12:59:40:79:bd:06:1f:67:b6:86:98:6c:67:
46:74:58:0d:9d:99:dc:be:93:41:ce:b2:96:73:23:2f:2f:c9:
4f:09:9c:a8:b1:3a:b3:e9:2b:bd:f3:a8:dc:87:7f:62:3e:32:
5b:02:19:2f:cd:96:46:f5:cd:f1:3c:a6:26:98:bb:ce:0a:2f:
27:b9:d6:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEfdpdjkFowCziI/wQ1/I07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOTM2ZDJmMjk4ZTZjZmQ1NjYwNDU3M2QxZWY5ZTBlODI5
OWI1MjkwHhcNMjYxMDA5MDcwMDI4WhcNMjYxMDEwMDcwMDI4WjAzMTEwLwYDVQQD
EygyNGE5MWIwNGFkYWI4YmFiZmJhYjhkYWY2NmQwNWYzMzgxODBkM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHaegGUwPCGGidu+E++ASkRyFUUu
zfoejn7Fzqb6higfP5qObOn4gmER1zrviuQR8DttRzevAcNK/Foo1qBjqVWedBbT
OyiLWrT/YfRE0aSxaTdz6IuhoNQQNGwRJyejbkas4bQlkrYKvwnn/t/DqfoKBn+R
6T7frtn4ZmfPm2MtILOfnWdsBV68wTDGzMvqJHijyJUgdgBq8jHtTA4mp4Omekdk
3BUZfq0oHYLa1IbaGMvoiAIDHy8JjCAho/FdSB/ZGaz/FJOAJsJefHJwoYmV+QeR
Woq+PRkhi+LtFwP8Z+qmIcEnZLnwwgxuOxIucWf2HDmO5bqCSF8q6jHSjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSpGwStq4ur+6uNr2bQXzOBgNOkMB8GA1UdIwQY
MBaAFDqTbS8pjmz9VmBFc9Hvng6CmbUpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3BOdEx5bU9iUDFXWUVWejBlLWVEb0tadFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83MDQ5NzMtMTg2Ni00MGQxLTlhMWQt
YjVmOGVjMGFhZDdjLzEvT3BOdEx5bU9iUDFXWUVWejBlLWVEb0tadFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83MDQ5NzMtMTg2Ni00MGQxLTlhMWQtYjVmOGVjMGFhZDdj
LzEvT3BOdEx5bU9iUDFXWUVWejBlLWVEb0tadFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzd6j/g3
Wfm37dAogTcb5XFIIA/HJTdrR5Nkc5GRL8iM0TST32ZoL2r8OuGYaqfjYDv8o2va
vCIyqgqmM25pCAsbTj7lSeBZx+SpMry+5nLO+5J/9mWu2ubKYKJhOcWe9aYgRF0u
cO4MGp7HzjCmZTCXn4dsJr74yWbiNhm0r4Ag3EdbprxG1nyYOzs1Bdt4kEjHkGeL
GEDjb0Ss0xLLfcdniPDFq8EmJrT98JC0gH/SAwx454jN5oUSWUB5vQYfZ7aGmGxn
RnRYDZ2Z3L6TQc6ylnMjLy/JTwmcqLE6s+krvfOo3Id/Yj4yWwIZL82WRvXN8Tym
Jpi7zgovJ7nWjw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 12:56:50 2026 by rpki-client