Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: kSmwDr/Pe4b8NQrq36U39M7Cd33harM1k/Kff4Xhun4=
Subject key identifier: EB:68:DD:8A:CF:69:B7:DB:56:E3:41:CC:2E:10:68:7C:87:94:76:54
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 019DA3E661048A5B58F24662CA6B85FB22C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0F7C
Signing time: Sun 19 Apr 2026 04:01:17 +0000
Manifest this update: Sun 19 Apr 2026 04:01:17 +0000
Manifest next update: Mon 20 Apr 2026 04:01:17 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: H5/5Qw0yzTPhjcEbe86q38c9AhndgAxgiWajvxsAocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:61:04:8a:5b:58:f2:46:62:ca:6b:85:fb:22:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: Apr 19 04:01:17 2026 GMT
Not After : Apr 20 04:01:17 2026 GMT
Subject: CN=eb68dd8acf69b7db56e341cc2e10687c87947654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:e8:58:d2:89:a3:92:3f:00:00:4e:cd:a8:
28:f4:a5:8a:9a:46:c0:a0:d5:8a:c5:4e:e1:1c:2a:
11:8a:97:7f:6c:94:18:df:34:a2:0f:83:3e:64:e7:
dd:a1:0c:e1:0c:62:47:8a:c3:f2:76:39:58:8f:ab:
31:71:ea:64:d9:45:22:08:5c:8f:e4:f2:0d:21:e7:
fc:de:78:e7:5a:ec:4d:e8:5e:80:75:03:5d:e7:1f:
6d:f6:76:ef:39:c3:34:96:9f:39:44:6b:c8:62:5c:
74:12:92:c6:e2:73:3c:b8:59:b7:e9:5f:38:80:a8:
32:d2:99:14:53:9d:14:85:ad:3e:c8:ce:47:ec:8a:
68:e7:2c:ea:9a:e0:30:e7:af:65:ae:5c:5b:e0:4e:
8e:d5:1b:1c:ba:2d:0d:19:f3:1b:14:24:1b:05:fe:
17:6d:2d:7b:cc:f2:d2:cb:26:74:64:ec:03:23:d7:
21:dc:bf:77:b6:a7:0b:9e:b8:8c:eb:b9:2c:db:9f:
96:42:95:5a:f2:55:b9:00:f7:98:ff:ca:18:34:34:
23:51:de:77:53:3e:d2:10:70:94:15:68:68:78:27:
32:23:2a:6c:41:45:fc:c7:4e:ef:0a:89:8d:b3:b1:
4b:c8:b4:01:d9:43:f2:67:e7:27:e1:69:f4:c4:9f:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:68:DD:8A:CF:69:B7:DB:56:E3:41:CC:2E:10:68:7C:87:94:76:54
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:73:87:a6:78:30:b7:47:c0:43:4c:b6:b0:f4:1e:44:b4:b6:
db:0e:4c:30:a2:8b:b7:2b:b5:02:d4:2e:4a:a3:d3:7f:1a:8b:
ce:e1:b3:e2:13:47:f5:d0:fe:1f:25:2d:e7:a6:50:98:12:ba:
91:4d:27:57:79:58:ef:3c:f7:b8:6b:24:3f:4f:56:cf:9e:34:
e2:44:07:ec:d4:62:b2:91:2b:51:4e:84:a1:d7:4f:c0:da:3e:
5f:f3:8d:d7:a3:09:a7:88:7a:cb:9c:78:1a:33:79:59:e2:93:
d2:22:f5:df:a6:22:6b:58:5b:b9:b0:4b:7f:17:fa:72:fa:c1:
9c:4c:7e:bd:fd:23:93:ff:89:c4:89:5b:65:b2:f1:39:ce:b3:
f6:f6:cd:c7:2d:b5:a8:f1:9d:b7:b9:b5:e1:23:c8:f3:a1:5e:
81:9a:0f:07:98:ab:ca:83:5e:83:34:ba:f1:02:6a:05:4e:7c:
74:ca:57:c5:99:f2:1f:1f:8c:c2:0e:97:02:da:7e:0d:3a:c3:
fe:fc:81:fe:70:56:8d:3c:c0:2a:f1:ff:b0:bb:0d:70:76:2c:
3c:c0:5e:95:bf:2c:8b:b9:b2:3d:4c:f8:8b:06:52:14:18:94:
88:cb:de:30:ad:f5:fb:d0:45:67:44:c5:66:0d:64:98:6a:23:
0c:c6:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:29 2026 by rpki-client