Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier: umITMgIzNE1Kr1mhrztELkiAS1j5qHfveJB/+cMoIrc=
Subject key identifier: D7:2B:E4:8A:30:38:06:05:93:43:3A:10:DE:AE:DF:96:E2:2C:30:5C
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial: 019D97E25ED75E672A498B1E6C4D393DA7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 20:01:28 +0000
Manifest this update: Thu 16 Apr 2026 20:01:28 +0000
Manifest next update: Fri 17 Apr 2026 20:01:28 +0000
Files and hashes: 1: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: DfSWMFb2XE8HvNfjsvQ4Q6cmKo0Q7CN+qViAnsaVf3k=)
2: crGJsaUqkVJvevG7S1aR5kRrjuk.roa (hash: JplAsFQ7Xa/4SQCkj3u1taRZpnPpuKuRz//hnGEkFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:5e:d7:5e:67:2a:49:8b:1e:6c:4d:39:3d:a7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Validity
Not Before: Apr 16 20:01:28 2026 GMT
Not After : Apr 17 20:01:28 2026 GMT
Subject: CN=d72be48a3038060593433a10deaedf96e22c305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:44:6e:53:7c:21:6a:50:02:40:97:fc:39:
05:02:96:1a:7e:8c:6e:ba:dc:cc:88:6b:65:6a:cf:
ba:a6:3d:60:8e:ed:54:66:b5:0b:df:a8:98:cb:5a:
ef:31:52:58:bb:d7:2b:b2:d5:fe:72:1b:55:2c:1e:
c8:98:67:36:04:dd:3a:53:61:18:2e:6e:7c:f6:5b:
4c:20:ed:9b:91:31:fc:6f:19:7d:cc:21:09:09:e4:
42:60:9a:17:4c:f3:2d:3f:85:f6:db:fb:23:51:40:
3d:99:f4:ce:82:63:81:0f:02:a5:0e:09:80:5b:72:
20:f8:b7:a4:25:0f:e4:f5:b7:f5:10:e8:93:fd:ad:
55:65:7a:81:95:0e:62:13:6d:a2:84:dc:10:78:65:
87:a0:59:7a:af:79:b5:91:eb:5e:15:aa:97:a4:16:
c8:95:01:45:38:ed:c1:40:35:f6:ad:85:69:e2:98:
d5:09:9f:92:60:72:50:11:89:ed:33:8f:1c:1d:1d:
aa:7e:33:ba:4e:aa:42:b9:fa:44:1c:fc:31:47:1a:
69:8a:60:3d:2b:be:69:d1:bb:35:50:c2:93:5f:ec:
5d:f1:94:dd:2a:2c:fc:4f:ed:4b:0c:34:4b:1d:2a:
5c:03:01:1e:da:53:fc:81:b8:bf:21:26:ad:72:a1:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2B:E4:8A:30:38:06:05:93:43:3A:10:DE:AE:DF:96:E2:2C:30:5C
X509v3 Authority Key Identifier:
keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2c:31:4e:db:03:aa:7f:77:a0:85:21:17:b2:7b:82:31:fb:
4c:6e:f4:ab:51:2a:91:66:47:c3:2c:2d:26:84:e1:d2:b0:f6:
64:f4:0c:18:03:ab:29:6c:cc:88:66:7a:5e:90:12:1a:6a:6d:
7d:67:60:0a:c9:e8:ee:9b:3a:b6:5e:c2:e6:6e:0c:a7:d9:1f:
b5:b0:aa:fd:7d:bc:00:19:b4:54:99:53:f1:79:c1:72:c2:f2:
d9:72:c1:99:8f:51:74:45:77:d3:6c:07:5b:65:cc:e1:16:a1:
bf:7f:54:23:c7:d9:9a:bb:c5:00:58:b6:09:45:11:4f:d8:e8:
b1:b6:4f:63:71:c2:8d:9e:16:e1:91:49:9b:f2:4f:b1:28:32:
7b:ee:17:2f:9f:f0:7c:36:2a:32:78:c2:a8:8f:99:ff:55:bc:
a0:5a:cb:69:d0:34:21:8a:04:4f:ef:aa:03:a9:44:cc:a0:ef:
39:c0:fa:2c:82:78:27:9d:f7:de:00:de:93:01:76:cf:e2:77:
31:4f:39:f2:5c:40:19:5a:f4:7b:46:d6:72:7a:95:6b:bb:9e:
b4:ab:bb:d7:e1:79:f6:ef:5d:52:d9:67:22:1f:3b:9e:76:5d:
20:3a:d8:4c:63:51:31:65:92:a7:23:24:b8:68:01:55:35:cf:
cc:c2:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:14 2026 by rpki-client