Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: dGrGn/DbJugzwC5AFRMPAan6osFF1NbQbVBwvncB56U=
Subject key identifier: 3B:7D:DF:63:11:21:56:99:EC:FD:E2:33:7C:43:88:22:31:66:AA:E5
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01A0EC2F09FDDD81FE3770D6C30C04EEE912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 1A81
Signing time: Tue 29 Sep 2026 08:01:40 +0000
Manifest this update: Tue 29 Sep 2026 08:01:40 +0000
Manifest next update: Wed 30 Sep 2026 08:01:40 +0000
Files and hashes: 1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=)
2: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (hash: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI=)
3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: NFQ4gcrIrYYS+pjaSAZDE7e9iqFq4S6MAVhm/5CRq9g=)
5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=)
6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=)
7: kWJsfOPSFq_jhRUPK95fJnFQ6gQ.asa (hash: kjZzNLymA0q763NzFlPQRMaG1f9jPqoiNbS2FEJsFnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:09:fd:dd:81:fe:37:70:d6:c3:0c:04:ee:e9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Sep 29 08:01:40 2026 GMT
Not After : Sep 30 08:01:40 2026 GMT
Subject: CN=3b7ddf6311215699ecfde2337c4388223166aae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:92:98:4c:38:16:83:b9:14:47:95:c5:32:
4c:33:4e:b9:34:03:b9:5f:15:c0:9b:40:c4:70:fd:
23:92:d4:ba:1f:af:79:51:f4:b9:2c:8d:ed:ee:a2:
65:3d:3f:e6:7a:60:26:0a:aa:80:b7:e4:42:49:0a:
d2:2c:6f:8a:a0:2d:e9:fe:fe:8a:28:09:a8:1d:80:
4b:a5:b8:35:55:8b:a6:a2:e4:2d:c6:63:08:50:b4:
d4:cd:ee:f7:c5:ae:30:f2:f4:aa:3f:64:90:af:09:
50:91:f5:77:aa:cb:84:6d:c5:11:ae:9e:60:a1:1d:
53:e6:22:93:fe:fe:33:fa:cb:0c:60:98:6f:bd:a6:
19:d7:1c:69:0c:12:e0:2c:51:ff:87:76:12:1a:bd:
90:0c:43:ac:35:a3:2e:0d:84:ce:5a:44:8e:23:e3:
4e:b1:b7:82:6a:0c:6a:91:84:64:f7:e6:2b:3b:1e:
dc:e4:d3:f0:23:7c:d6:d2:23:24:50:09:62:e3:38:
2d:0e:e2:22:23:48:f2:9c:d4:d0:9d:40:1b:04:96:
97:a6:6b:ee:85:06:0b:93:c4:49:7c:1f:d1:ec:d7:
f9:5d:a9:67:7b:de:45:92:7f:b9:60:40:90:72:7f:
6c:6e:f4:91:c6:68:dd:fd:4d:66:ff:a2:32:cb:2a:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7D:DF:63:11:21:56:99:EC:FD:E2:33:7C:43:88:22:31:66:AA:E5
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c3:1c:86:2e:3b:c7:8b:80:bc:ad:c7:9b:33:6a:81:39:44:
2a:5a:33:cb:fd:2e:74:e4:5b:b6:d4:bd:d4:80:ec:f1:dc:d4:
01:b6:df:0b:0f:45:42:32:31:40:98:2e:46:71:af:56:18:4c:
c6:3e:de:90:75:cb:1b:80:25:d0:1c:9d:17:df:b8:73:cf:e6:
3c:8d:ce:54:f8:37:d1:75:e9:c3:4c:17:e6:58:a8:cf:f0:d6:
c6:eb:94:ae:d6:e3:90:5e:39:75:f3:52:58:c0:41:33:81:b5:
6a:a8:fc:cf:a7:40:b0:68:94:1f:30:9a:f9:b7:0e:b0:01:7b:
e7:c1:56:65:bc:20:00:ae:15:ee:2b:82:63:c6:51:b3:2b:1a:
36:47:65:0d:13:27:20:aa:e1:6c:bb:ad:c0:ca:42:0a:1e:6b:
d9:b6:73:eb:5a:0d:1e:6b:f2:4e:b5:3e:ac:6e:20:80:2e:67:
ca:fe:90:13:b0:49:0e:05:89:6e:7c:33:63:89:22:f4:bf:40:
74:d7:67:0f:4d:97:19:a1:f9:7b:f5:83:8a:07:be:ab:33:26:
ee:24:c1:8c:07:80:ef:df:6e:e1:fb:30:7e:3a:92:f3:21:4c:
05:e3:b3:61:03:e3:40:79:e7:66:4b:0c:31:1f:da:14:8e:32:
04:9c:a4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:54:43 2026 by rpki-client