Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json)
Hash identifier: UG1fAtmwXQpRgY/gPaEOOnaB577sH6yciJWcCmRxPJs=
Subject key identifier: 05:94:E9:96:71:AE:DA:E8:8C:34:DC:3C:BD:8B:46:69:A4:FC:59:29
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 019EBFC8A3BEB63EC2B0D54BD44B21B1510D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
Manifest number: 197B
Signing time: Sat 13 Jun 2026 07:00:57 +0000
Manifest this update: Sat 13 Jun 2026 07:00:57 +0000
Manifest next update: Sun 14 Jun 2026 07:00:57 +0000
Files and hashes: 1: FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa (hash: 7YUc6wfgN+sYhdx1cpmGPpDGVuugRkWqHt6/wHp1CDk=)
2: HkwuJu9io020PbxRWDFjsBLDBY0.roa (hash: 54qGpDCHJR33ZIOHfgUlFjHcaUi+BAqkWs7Zaq0wwz8=)
3: I5rk1e-Hzys6bZ34Mf2djbHcYi8.roa (hash: 68VlGtBqjjMcBNNmfnX4SS0mmlFBjW9D5LF+wH6+/Ac=)
4: L-To8dTceN5xxbEJ2QWl3_lVx0Y.roa (hash: VwojFWUhMCERU0Ki7bA5wqTbNgVL6QvW7R1KnsktuYI=)
5: RUdkYB7gYtQia_NavoRTMoG3pvE.roa (hash: T6PW2Xl5c1A8FrzU6sJtHxxL5BTjblBQGY54ZziHyw0=)
6: VQsDH7SGd5hal_nlNR8i5lyIdTU.asa (hash: CUgzrAYaMR8T7BZPdashoUewG1Aed1T1TxeGji8a5Ac=)
7: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: y597N9Gz/J2kDSqXjZTUBl3Af1r0YEzbjsLh0dxmVf0=)
8: sypz3alt6kD9RUIKSoriU5Cgg9c.roa (hash: Q5XVGAYpXK3W0dy+5n1dt4ArQn0bSHlxksL+5uZfIdA=)
9: tDIPyCeJ6lwABqJN9BvBHe0hGng.roa (hash: Ct8rOWY/RQns6Y0hISopyHYEG2NvtwUoOdKLUr3Niy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:a3:be:b6:3e:c2:b0:d5:4b:d4:4b:21:b1:51:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jun 13 07:00:57 2026 GMT
Not After : Jun 14 07:00:57 2026 GMT
Subject: CN=0594e99671aedae88c34dc3cbd8b4669a4fc5929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:b2:0d:61:dd:4e:b4:d5:f3:30:be:82:01:
cf:40:a7:27:a5:c0:4b:3e:92:40:a4:52:1e:42:60:
e5:57:f6:e0:e8:70:eb:bb:13:b0:19:c9:7d:7e:d3:
dc:21:7e:aa:63:ee:70:a1:4c:8b:d2:a7:bc:4e:d6:
47:e5:bf:d6:b2:cd:cf:72:6c:0c:09:4b:e3:19:57:
4d:64:83:14:5e:1f:33:64:b3:73:68:e4:e1:2b:85:
b8:79:d4:ef:15:8e:bf:88:a8:a0:7c:04:7b:b5:ac:
f6:9e:1c:93:72:d3:b4:d1:2a:fb:ee:43:3f:a4:86:
38:43:45:b0:bc:70:18:6c:b7:00:1f:c3:ba:62:88:
c9:3f:35:26:79:c7:d6:97:e2:30:ea:21:45:99:5d:
8b:e8:c3:ea:c4:38:ed:0f:56:ad:43:00:ba:af:b8:
05:2b:14:16:8f:d1:29:7a:e5:68:bd:30:b9:83:4e:
ab:26:34:1f:b5:4b:c7:a0:36:23:c0:a2:d7:f1:7a:
f2:d9:f9:5c:86:94:ce:dc:70:ff:b5:92:15:b1:38:
a1:1f:1f:62:1e:51:c4:2d:40:c4:17:0c:5f:93:15:
3b:9b:fe:83:55:1d:ee:8f:4c:93:35:a9:a9:cb:76:
03:b6:2a:f9:74:8a:e2:8f:7d:fd:32:34:ed:5e:68:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:94:E9:96:71:AE:DA:E8:8C:34:DC:3C:BD:8B:46:69:A4:FC:59:29
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ff:11:00:ed:3d:f5:4a:24:76:f6:b5:b5:05:7b:a2:52:b8:
e4:5e:c5:3f:13:5f:13:9f:3e:77:4f:aa:45:83:3e:a9:8a:66:
20:78:95:70:92:a1:ee:b8:f8:90:96:ae:ba:71:86:c1:1f:d5:
0e:31:3b:a8:e5:3d:47:a8:b4:9a:9c:32:e3:c5:d8:8b:97:75:
4a:74:c2:a6:ef:a3:ef:df:bd:14:b7:04:0c:0c:ae:81:7d:ac:
08:22:93:42:e7:68:64:99:6c:35:23:47:9a:af:00:d8:38:47:
09:ab:00:91:c6:d7:4a:91:20:8f:cd:76:d4:f6:51:19:a4:41:
fd:df:16:5c:d5:16:1b:d5:33:57:96:21:7f:5f:d2:8f:02:be:
c6:d3:f8:88:94:aa:90:a0:4d:a8:81:b5:d1:91:b5:d0:1c:64:
02:73:5e:b1:c2:8a:8c:ea:28:6e:a7:57:32:9f:be:9b:8c:7c:
ab:6a:8c:6a:90:48:2f:a3:aa:be:76:01:2a:69:e6:f7:95:1c:
4c:77:19:ed:52:14:31:69:72:fd:49:19:97:d8:c7:d3:b2:71:
3c:db:33:79:2e:a6:c6:ab:5e:83:52:da:eb:02:8b:a0:07:83:
b5:c7:a6:9d:5e:e7:77:9f:1d:b5:b3:0f:42:73:7d:0c:ff:3c:
d5:6b:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:35 2026 by rpki-client