Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: abc0GJf24H84+0I1Zjt6jVP2HWDGLhSmICI/L3v3uZE=
Subject key identifier: 67:3F:DC:EE:BA:6C:E5:A5:0E:7A:CF:7A:97:8B:BB:37:A9:E6:35:61
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 019CAF10E3773BAF677E87D8108D5BA18055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0E4B
Signing time: Mon 02 Mar 2026 15:00:45 +0000
Manifest this update: Mon 02 Mar 2026 15:00:45 +0000
Manifest next update: Tue 03 Mar 2026 15:00:45 +0000
Files and hashes: 1: DhiVgaWvNmOXlh13NZD3ECCC-Jg.roa (hash: YxArlaNhHs1+rEEwwN6ySNTuQKxwubxKRItAAtcuCZs=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: BgBmt9ReJAGn3JTy/LOY04yKt+RYQqdNNx1nU15PJ0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:e3:77:3b:af:67:7e:87:d8:10:8d:5b:a1:80:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Mar 2 15:00:45 2026 GMT
Not After : Mar 3 15:00:45 2026 GMT
Subject: CN=673fdceeba6ce5a50e7acf7a978bbb37a9e63561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:8c:12:35:3a:f9:a4:85:0a:aa:d9:d2:7e:
b8:73:f1:78:40:3c:90:07:27:4b:dd:42:e0:48:89:
5d:bc:b0:af:e2:50:58:fa:11:2a:95:c4:0d:73:90:
5f:c8:aa:ce:c3:f8:10:d4:6d:b3:f9:ea:d0:72:b5:
c0:e7:27:d9:3d:c6:cc:43:c9:9a:2e:3e:73:d1:2d:
3c:e2:c2:db:60:81:90:0e:a9:9e:bb:ac:9c:35:db:
f6:de:ba:40:07:1b:29:d5:eb:b6:96:9f:f1:cc:aa:
3b:83:1b:b2:c6:d7:a9:40:12:16:20:7d:48:b5:f3:
88:1e:b6:0d:3d:10:e4:31:bb:51:79:d1:a5:f1:04:
79:38:a8:22:df:ea:b8:fc:ba:2b:5c:45:77:24:21:
e5:12:91:fa:87:f2:da:a6:46:a8:ce:d3:e6:8b:a5:
c2:81:34:9f:57:82:ed:5d:62:92:57:51:3d:74:20:
d2:0f:3a:f9:66:67:ed:16:a1:2e:3a:1d:0b:bb:68:
21:3c:46:e4:c7:d8:c6:86:d2:e0:af:3b:ff:51:a9:
31:be:c5:a6:68:30:e3:e4:ca:b0:27:77:92:88:b5:
1c:8c:61:d3:dc:11:c0:55:4e:e1:fd:f3:b2:85:2d:
db:22:24:78:55:5b:4b:ea:cf:c1:25:6d:5e:2b:51:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3F:DC:EE:BA:6C:E5:A5:0E:7A:CF:7A:97:8B:BB:37:A9:E6:35:61
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b7:dd:a5:54:65:cd:0c:31:f0:f8:f1:6b:1f:8e:e5:01:36:
3c:c6:38:28:69:cc:b0:f5:b3:22:6f:4d:15:49:c9:03:bd:a4:
da:9d:e0:db:6a:38:4b:d8:9d:90:3f:8f:1c:9a:91:16:1b:fa:
e2:20:6e:f7:00:f4:ae:44:52:d0:56:bf:95:62:4c:47:f0:10:
d4:f0:f0:fb:30:b8:d6:ee:72:6f:fe:ca:10:01:e4:d1:20:ef:
14:61:7c:37:94:4f:82:7f:17:35:da:49:c1:1b:f4:26:64:17:
f6:e9:c5:45:45:b2:90:62:a6:65:c8:83:1f:20:cb:ef:f4:db:
53:e9:fe:8e:ca:59:af:49:97:0a:50:ed:8a:f9:75:42:a4:fe:
ca:d9:cd:9f:33:01:d5:ab:e9:a4:8f:49:4d:dc:98:34:ba:8d:
a8:20:aa:f9:c4:dd:5e:92:72:4f:1a:62:77:10:61:ff:07:bf:
66:53:c2:10:f2:0f:12:f6:af:26:58:a0:03:bb:17:73:e9:af:
a6:81:da:19:d8:a1:a1:83:86:30:16:15:a9:c6:69:14:1d:f3:
14:0b:40:3d:29:5c:7b:8c:24:70:8d:b0:a9:ed:36:3f:f0:07:
5a:85:e9:b1:18:28:95:97:94:85:4c:fe:09:b7:50:79:3c:6c:
c7:08:48:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEON3O69nfofYEI1boYBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Zjc0NmI4MWFlYzAwZTM2YjliY2I3YTA4NjQyYTY0ZTkx
M2RhNWIwHhcNMjYwMzAyMTUwMDQ1WhcNMjYwMzAzMTUwMDQ1WjAzMTEwLwYDVQQD
Eyg2NzNmZGNlZWJhNmNlNWE1MGU3YWNmN2E5NzhiYmIzN2E5ZTYzNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZGMEjU6+aSFCqrZ0n64c/F4QDyQ
BydL3ULgSIldvLCv4lBY+hEqlcQNc5BfyKrOw/gQ1G2z+erQcrXA5yfZPcbMQ8ma
Lj5z0S084sLbYIGQDqmeu6ycNdv23rpABxsp1eu2lp/xzKo7gxuyxtepQBIWIH1I
tfOIHrYNPRDkMbtRedGl8QR5OKgi3+q4/LorXEV3JCHlEpH6h/LapkaoztPmi6XC
gTSfV4LtXWKSV1E9dCDSDzr5ZmftFqEuOh0Lu2ghPEbkx9jGhtLgrzv/UakxvsWm
aDDj5MqwJ3eSiLUcjGHT3BHAVU7h/fOyhS3bIiR4VVtL6s/BJW1eK1EsnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGc/3O66bOWlDnrPepeLuzep5jVhMB8GA1UdIwQY
MBaAFDj3Rrga7ADja5vLeghkKmTpE9pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgt
YzIyMzk1Y2UxYmU0LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgtYzIyMzk1Y2UxYmU0
LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7fdpVRl
zQwx8Pjxax+O5QE2PMY4KGnMsPWzIm9NFUnJA72k2p3g22o4S9idkD+PHJqRFhv6
4iBu9wD0rkRS0Fa/lWJMR/AQ1PDw+zC41u5yb/7KEAHk0SDvFGF8N5RPgn8XNdpJ
wRv0JmQX9unFRUWykGKmZciDHyDL7/TbU+n+jspZr0mXClDtivl1QqT+ytnNnzMB
1avppI9JTdyYNLqNqCCq+cTdXpJyTxpidxBh/we/ZlPCEPIPEvavJligA7sXc+mv
poHaGdihoYOGMBYVqcZpFB3zFAtAPSlce4wkcI2wqe02P/AHWoXpsRgolZeUhUz+
CbdQeTxsxwhIKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:12 2026 by rpki-client