Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier: vFe/2Z18zTuqGhkeaHEy0Vqnvp0etPkwZgfT80N35R8=
Subject key identifier: 10:6E:30:7D:5F:D5:93:F6:BC:A9:CE:6B:53:4C:8E:53:63:DD:5A:3F
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 019CAB33D7DC22C292E58D5F676C9851311C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number: 0421
Signing time: Sun 01 Mar 2026 21:00:27 +0000
Manifest this update: Sun 01 Mar 2026 21:00:27 +0000
Manifest next update: Mon 02 Mar 2026 21:00:27 +0000
Files and hashes: 1: SNrZr0YQQkVPerWsrOP1UeJuDXc.roa (hash: hBAiAyDFyC3xgXvGIjNpbEwJ1pYU7Ki/GLElCyuFn4c=)
2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: tpwIrVg/6hAoLIOtqNo0KFkNLqvqvuzBX2JkL9kYBQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:d7:dc:22:c2:92:e5:8d:5f:67:6c:98:51:31:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: Mar 1 21:00:27 2026 GMT
Not After : Mar 2 21:00:27 2026 GMT
Subject: CN=106e307d5fd593f6bca9ce6b534c8e5363dd5a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:2f:07:e0:9c:e9:99:29:0f:b0:ab:b2:4a:
6a:37:20:d9:24:ce:33:e9:0c:d8:36:2f:a1:6c:ff:
86:96:0f:c6:a6:3c:d0:60:3e:9d:2c:ab:65:ec:94:
b1:20:38:4e:90:8d:c3:69:19:7c:94:94:65:a4:49:
29:c2:c1:96:26:39:ed:4b:b4:dd:b5:36:88:ec:85:
b1:cb:14:c5:03:e2:53:b6:31:7f:14:96:b8:40:c4:
8e:4f:3c:43:38:47:fe:81:a5:d1:99:1e:9b:40:5a:
61:84:ef:4b:a9:66:64:92:a4:b0:15:2c:1b:90:67:
fe:12:31:9f:70:56:0f:95:52:20:1b:1c:81:e6:7d:
fe:dd:f4:bf:89:71:1b:e5:a2:79:5c:51:e5:c3:a9:
c5:3f:0b:b0:b7:f4:62:ec:b3:8c:7c:4a:c0:e0:13:
2d:4a:e1:cf:86:8f:3c:56:90:cb:10:55:cf:18:22:
7f:73:95:e7:e8:b2:f0:06:9a:a6:cb:15:54:99:2d:
e4:a3:89:5c:32:bf:63:00:54:13:1e:2b:a9:f7:ca:
69:7f:25:0f:1e:3e:8c:5d:21:60:b7:f2:ad:1c:a4:
de:e4:39:59:6c:2e:d7:54:06:84:10:4a:e7:92:e6:
3a:21:97:eb:95:99:c8:4b:36:43:1d:f5:d2:1d:2b:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6E:30:7D:5F:D5:93:F6:BC:A9:CE:6B:53:4C:8E:53:63:DD:5A:3F
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1f:ad:99:50:cc:90:30:fe:37:18:04:ad:41:a4:1c:96:8f:
d9:19:d9:7e:f4:e5:41:d6:71:42:00:2c:db:8d:75:f9:6a:c6:
4c:94:46:e8:d2:36:26:6d:ea:9c:0b:fb:e0:e4:98:dd:ca:45:
87:a2:47:dc:81:37:f5:d3:f1:ea:94:ef:c4:57:4f:de:00:01:
0c:c7:ae:fd:18:e4:da:c1:96:c7:67:c0:8a:da:c0:81:cc:54:
e0:05:fe:c8:01:85:4c:e7:51:89:22:45:01:a5:bc:3e:68:45:
aa:92:0f:c5:05:23:58:a7:da:e2:20:d1:b4:bf:dd:0c:2f:13:
37:80:91:4c:bd:6b:0c:13:1b:88:b2:fb:4e:95:da:77:f9:3f:
2a:1b:69:64:f6:1e:e4:bc:bc:b7:a5:46:c2:f0:d8:1b:4c:27:
f4:82:4d:0d:ee:c6:97:20:5c:b1:14:8c:e5:8a:ed:d2:a7:c1:
7f:39:e6:ee:f3:a1:2b:c9:76:d7:02:71:fa:5f:db:8d:52:c5:
be:59:ac:0a:0b:d9:a3:9c:df:d4:28:e9:fc:f4:a7:5e:27:e2:
5f:0f:1f:08:48:31:c4:ba:9e:92:29:99:2b:67:3d:90:0c:a6:
43:a5:a7:9b:e1:95:4c:2b:97:4a:98:a8:87:b3:a3:ca:64:16:
19:07:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:35 2026 by rpki-client