Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier: 70oF+ROWZVPyIliuL/JwZUV2SC6pNyqjyXeP5FCgJrU=
Subject key identifier: FB:26:BF:D0:05:99:7A:0F:1C:F5:F0:A2:F4:31:53:69:01:D8:B4:3B
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 019DA453C10A2A6991389191DB2B7A98AA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number: 04A2
Signing time: Sun 19 Apr 2026 06:00:45 +0000
Manifest this update: Sun 19 Apr 2026 06:00:45 +0000
Manifest next update: Mon 20 Apr 2026 06:00:45 +0000
Files and hashes: 1: SNrZr0YQQkVPerWsrOP1UeJuDXc.roa (hash: hBAiAyDFyC3xgXvGIjNpbEwJ1pYU7Ki/GLElCyuFn4c=)
2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: JgjqTVwxWdq/FSa6MvfKlrxxWvvCf+7B/2wmHMvgmoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:c1:0a:2a:69:91:38:91:91:db:2b:7a:98:aa:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: Apr 19 06:00:45 2026 GMT
Not After : Apr 20 06:00:45 2026 GMT
Subject: CN=fb26bfd005997a0f1cf5f0a2f431536901d8b43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:14:89:2c:84:69:41:d6:1c:9e:38:90:f2:
12:3d:e8:52:f7:1b:04:58:86:ac:73:95:c2:98:4f:
dd:a9:f7:a9:27:62:22:97:f2:41:13:6e:2a:1f:f7:
be:f6:eb:70:6d:96:f7:52:3c:56:2f:63:4b:c9:39:
48:7b:12:74:c3:4f:aa:9c:24:84:00:a2:c9:b7:72:
be:79:25:0c:a7:94:03:f7:28:13:25:e8:14:30:46:
61:cd:bd:75:11:23:b8:43:50:40:d3:20:ca:f1:31:
62:5b:8f:ec:5c:fe:4d:95:79:2d:51:cf:19:03:db:
31:15:fd:00:f1:8e:de:27:32:32:13:fb:da:0a:73:
52:a8:cc:bf:0e:0f:1e:dd:e6:2b:6f:da:17:b9:d2:
78:f2:a4:ed:32:43:4f:0a:7a:17:3b:c1:d3:6c:36:
27:5b:87:e0:08:b2:ce:94:e8:86:d1:03:08:54:47:
28:c6:72:59:38:04:6c:c1:c6:42:38:0f:eb:52:78:
41:85:15:91:86:30:44:5b:a2:2a:41:d3:1f:d7:31:
ed:02:58:e2:86:d8:2c:d2:bc:f9:2c:a8:3d:58:7e:
0e:d2:ce:f5:9b:19:a2:73:b8:e5:c3:f8:cd:88:70:
ce:5a:2c:46:6b:46:6c:cf:ce:a4:7f:bc:0b:d5:8d:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:BF:D0:05:99:7A:0F:1C:F5:F0:A2:F4:31:53:69:01:D8:B4:3B
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:90:d2:b3:03:f6:8c:03:c7:05:cd:41:f8:f9:63:da:92:36:
b1:34:d5:91:a2:52:b6:0f:95:f3:b9:88:ad:54:d4:4a:d9:04:
cd:44:3a:da:b2:90:df:9c:89:1f:62:d6:01:e2:a7:b5:65:1d:
3e:61:57:1e:7a:b2:c9:e1:fc:82:56:e0:89:6e:e7:b4:98:4d:
30:a7:b0:48:52:94:9c:9d:c4:bd:37:f3:b8:d8:59:a5:af:5f:
0a:bb:58:c3:4d:24:75:89:b2:6d:f5:6a:85:a5:b2:de:f2:2f:
1c:c9:a0:67:83:4d:4e:c5:e2:c3:84:e8:dd:ea:75:21:5f:50:
d5:bb:19:a6:24:65:35:8c:6d:2e:48:1f:1f:7c:15:38:ba:1d:
3e:cb:c0:53:4c:55:28:a7:78:c3:85:a8:77:37:7a:3b:07:56:
2f:8b:d5:00:62:d2:52:03:f7:16:bb:9e:46:d9:c8:eb:89:29:
dd:fd:6d:83:97:1b:5d:12:18:62:c2:ab:53:44:16:7c:1a:74:
23:4c:65:b3:eb:31:74:19:0b:0d:de:17:68:99:88:22:ed:99:
1d:cd:8f:f1:a7:83:ef:32:44:95:3c:c3:4f:86:2c:ad:81:c6:
09:25:1d:02:19:90:03:5d:53:05:2d:4a:65:29:7d:e1:32:c2:
35:a3:da:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:00 2026 by rpki-client