Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: x0zbLWgtxEGU3f2zavstfELU6OCJlePRXNwWkzCLDQ8=
Subject key identifier: 66:A7:89:20:2A:07:75:06:AF:2B:48:5F:A3:1B:0A:49:83:1A:21:4D
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 019CAAC636C29ABE231C545BA01ACD868961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0EFB
Signing time: Sun 01 Mar 2026 19:00:42 +0000
Manifest this update: Sun 01 Mar 2026 19:00:42 +0000
Manifest next update: Mon 02 Mar 2026 19:00:42 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: b5rkXqeKPunNZhEObhYKgyPR+1uFNID1N90Os+/VgXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:36:c2:9a:be:23:1c:54:5b:a0:1a:cd:86:89:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: Mar 1 19:00:42 2026 GMT
Not After : Mar 2 19:00:42 2026 GMT
Subject: CN=66a789202a077506af2b485fa31b0a49831a214d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:40:05:6e:e2:41:58:d0:a5:32:20:18:7d:
55:60:f8:18:da:e4:a9:ce:31:ed:f2:19:9f:c2:5a:
a3:33:58:d4:7f:6b:9a:58:3d:d6:4c:fa:c2:73:4a:
a2:03:44:4f:83:31:ab:4f:c2:0a:77:8e:7c:c5:84:
04:0a:e5:6d:8f:a6:43:ec:c1:72:9e:be:a9:e1:0b:
de:6a:66:df:8b:dc:b6:28:7d:bd:71:ab:d0:6e:03:
c3:01:1c:94:3c:cf:1d:f7:67:9f:e9:c2:36:8c:f1:
7d:c5:d0:48:a6:d7:7b:5d:77:79:58:07:e2:0e:d4:
46:0b:06:5a:2a:db:70:8c:f7:98:a8:2b:b2:91:97:
55:4b:4a:f4:c9:5a:61:e4:5f:24:74:32:36:da:f0:
68:fc:32:aa:e4:70:f3:86:e7:87:40:cb:fb:2c:6a:
03:ef:d4:46:4d:35:58:1f:a7:ef:df:1b:97:3c:79:
0c:b4:29:9a:81:20:eb:da:e8:cb:d6:ac:2a:30:b1:
f9:72:75:2e:09:38:41:dc:9f:38:85:8f:e8:65:3e:
03:2f:11:2c:49:47:9d:ff:1d:f3:50:c4:21:0c:8f:
b5:a5:79:7c:8c:4c:6f:9a:c9:ff:d8:57:c5:d2:fe:
e7:f0:78:d2:3c:e6:2a:9f:45:33:0a:d2:fa:6a:56:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A7:89:20:2A:07:75:06:AF:2B:48:5F:A3:1B:0A:49:83:1A:21:4D
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:fb:f7:a3:e9:17:1e:90:b4:68:ef:8a:ca:30:99:b0:17:36:
6b:26:0f:96:13:19:8a:39:2e:cf:2d:1c:23:43:35:c3:93:01:
e3:54:2c:d6:89:13:1f:75:dc:f5:db:e2:fa:eb:bb:5e:4d:e4:
b3:70:c9:f6:ed:40:2c:1f:1c:18:36:05:4f:81:4c:a4:99:46:
a6:3b:f6:97:b8:98:0c:09:5b:02:04:c7:f0:05:4f:98:be:27:
c5:cf:1f:4e:1f:96:e5:6c:cc:b5:e7:ac:67:78:d2:e1:4e:10:
6a:9f:93:b8:19:0d:f8:9c:63:f4:45:20:75:cc:dd:69:72:64:
47:f1:f8:23:6d:9d:22:94:f7:94:38:88:2e:f8:2f:ca:cb:ad:
f5:4f:31:50:40:9a:cd:6d:c7:c3:c3:5e:e5:9c:b3:6a:64:41:
f7:78:87:70:48:e7:19:4b:1d:9c:5f:f6:b6:4f:ba:01:80:7f:
14:34:8b:bd:d5:5a:54:ce:ca:43:69:ea:85:6f:07:11:12:ae:
d5:4c:cf:e3:7b:0a:82:61:bf:cd:f5:53:f8:d8:1b:c0:28:a1:
91:86:6b:a8:30:71:ad:32:83:17:7e:6f:de:21:26:6b:d9:6a:
10:ba:68:70:f6:d5:6e:61:18:43:d1:37:fc:e2:4c:bd:2a:2d:
ef:6e:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:19 2026 by rpki-client