Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: Uj2DV+r8ex4AN96FfXsRKvDLfJCddKaGxrQuVneFu7k=
Subject key identifier: CD:10:FD:85:36:AC:15:5B:FA:63:F0:9E:34:B2:37:F7:9A:9A:60:45
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 019D9AAC3249EF076A4C644939924C64892C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 09:01:09 +0000
Manifest this update: Fri 17 Apr 2026 09:01:09 +0000
Manifest next update: Sat 18 Apr 2026 09:01:09 +0000
Files and hashes: 1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=)
2: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (hash: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI=)
3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: riZC94xgebZWsvNRCsFQpFmMyd/8r3b8d73mzB37D/s=)
5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=)
6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=)
7: fw0YP162WW2RmauK0r76hCJq7FI.asa (hash: gBQWVbDzHTXqbw6Lz9qGJDwJuoShYEIdho/K7qMK5b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:32:49:ef:07:6a:4c:64:49:39:92:4c:64:89:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Apr 17 09:01:09 2026 GMT
Not After : Apr 18 09:01:09 2026 GMT
Subject: CN=cd10fd8536ac155bfa63f09e34b237f79a9a6045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:76:b0:22:50:56:b9:6a:31:78:e6:c0:10:
55:36:09:0f:a0:8b:93:23:54:3e:80:7b:b1:5f:8f:
a5:4d:64:f9:a7:7d:df:d4:7e:96:48:57:f1:3b:d6:
9d:01:cc:ad:d0:e9:7f:ab:92:a2:42:e4:35:1c:81:
03:af:57:aa:8b:f9:be:a9:0a:d4:20:00:db:d7:af:
58:91:33:f2:09:85:c4:0f:4a:c3:2e:fb:2d:35:9f:
d3:89:c7:8c:ab:1a:b6:d6:e5:49:ee:4b:96:6e:c2:
c6:fe:74:b4:db:6d:2b:aa:12:bc:71:b2:c1:43:5e:
57:fd:88:18:2c:fa:a4:68:a8:91:34:96:17:33:6d:
b6:4d:25:e0:1f:8b:63:11:c9:74:be:ac:a1:33:b3:
07:d1:56:bb:eb:f6:20:d1:38:52:98:6b:6e:3e:4a:
93:c8:78:ea:71:26:a9:4f:41:0c:1a:15:e4:7a:48:
f8:6b:08:7d:34:5c:81:43:59:13:ad:65:8b:b0:3e:
80:8a:05:6b:7e:da:34:08:ca:c6:2a:f4:c2:39:cf:
ef:39:e8:7f:08:a3:f0:f6:a3:77:9c:22:b4:9b:ae:
a9:b4:a2:49:8e:e0:2f:22:7d:a4:30:77:3e:36:9d:
47:db:fa:34:8d:df:47:25:40:29:11:d6:77:17:b6:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:FD:85:36:AC:15:5B:FA:63:F0:9E:34:B2:37:F7:9A:9A:60:45
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:56:96:2e:4c:c0:ea:5d:8d:0f:8b:85:4e:7d:7d:7f:9a:a6:
f2:56:a7:40:86:19:5f:28:71:05:32:6f:e2:2d:99:89:4c:30:
00:c1:b9:f7:0c:71:e3:9b:1c:c0:97:20:e6:d1:77:b9:8d:4f:
ad:41:a6:bc:a7:09:9a:b6:cf:e8:ac:dc:9a:31:b7:83:0b:0a:
d0:cc:b1:11:f6:ce:76:a4:5f:74:8b:d8:ec:95:1c:de:59:31:
fa:2f:12:37:02:da:96:63:4e:38:3e:6e:1b:83:eb:42:07:9c:
c8:53:54:2a:96:03:e9:e4:08:5f:73:f8:8c:d7:e9:43:ce:ef:
c8:5f:22:16:84:9c:3d:81:3a:d3:88:af:4b:43:e0:d2:29:ba:
11:df:37:9d:5f:3d:56:d8:b8:f6:dc:0e:7b:a3:92:29:06:9d:
a6:9e:a2:b7:07:9a:d4:3b:c6:07:7e:7b:57:46:ac:61:18:20:
0c:2d:4b:ad:cf:7c:7d:84:42:91:00:ac:d9:67:32:9d:f2:f5:
57:6b:2c:2b:90:12:46:5e:00:3e:05:9c:69:21:2c:95:14:16:
93:57:69:0b:d0:69:c8:cd:3d:e2:b0:38:a7:c1:41:ce:bc:59:
f6:b4:b6:6b:c2:fa:84:e2:c2:3c:56:86:b4:82:c9:01:f2:87:
0f:97:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:19 2026 by rpki-client