Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: ThTAVGqzVPLiXY3b5B2DZlFSJ/im+GQwwa2tl/CBfg8=
Subject key identifier: B0:D6:12:88:CC:DE:D1:37:04:04:1B:6A:6C:2F:2D:C7:42:A9:A5:B2
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 019F859F93179FAB3072EBD1422F7835E74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 17:00:55 +0000
Manifest this update: Tue 21 Jul 2026 17:00:55 +0000
Manifest next update: Wed 22 Jul 2026 17:00:55 +0000
Files and hashes: 1: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: XZD13mLvPWCdms1hGDl5LDRBEhG3+aM/MZRPW0pL0Ek=)
2: pm79H7mwduu7mnhDJctsn-uYWPE.roa (hash: ED5J8d3NpU/HwXaPFnumSsfSWb72ZAcfll3lZasNaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:93:17:9f:ab:30:72:eb:d1:42:2f:78:35:e7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Jul 21 17:00:55 2026 GMT
Not After : Jul 22 17:00:55 2026 GMT
Subject: CN=b0d61288ccded13704041b6a6c2f2dc742a9a5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:ca:77:c8:7b:23:d7:29:b6:e8:7b:00:ef:
d3:11:92:6a:71:0d:ca:32:59:76:64:04:b2:8c:f8:
a1:87:c6:b7:da:40:b0:f5:bb:74:95:53:ec:bd:42:
53:7c:cc:94:c8:35:39:2b:b2:10:ec:01:43:98:5b:
25:42:6b:a0:6f:fb:07:8c:f7:b3:01:48:59:12:c0:
d9:29:42:08:c2:d3:4e:d5:48:e6:56:2f:45:f2:db:
f9:f5:ac:be:4c:e3:55:50:ec:d9:29:67:97:88:56:
c8:05:f3:b3:0d:d9:17:05:89:cf:ad:7b:44:0d:2c:
ca:a0:3c:10:f9:c2:f8:79:04:20:e1:a6:59:0b:18:
5b:8f:22:eb:5d:ee:4d:7a:b1:40:52:d4:e7:e4:0d:
03:4c:da:a0:97:d5:7d:c8:a4:a9:22:2b:c6:95:e9:
ff:cc:e2:4f:6d:84:1a:f8:22:41:56:73:be:8a:fc:
97:7e:a7:8d:82:d0:a3:b4:44:35:f6:80:af:7a:f5:
30:20:64:36:83:11:e2:c2:e8:ec:39:21:87:b1:07:
e7:90:a1:8f:9b:75:09:b0:01:a8:65:f0:7b:9b:37:
53:48:52:5b:72:15:b7:ce:8d:d4:23:41:b3:a0:d6:
33:c1:01:3a:85:00:5b:b9:57:3d:ab:f5:6c:b4:2a:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D6:12:88:CC:DE:D1:37:04:04:1B:6A:6C:2F:2D:C7:42:A9:A5:B2
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:aa:f5:07:f1:07:b5:a8:6e:68:24:34:28:24:f2:a9:fa:f7:
e4:fb:ee:06:26:af:2c:7b:27:e6:03:06:ec:79:79:0e:01:a1:
af:45:52:f7:3a:5d:76:b9:7a:f7:47:4e:14:c7:5a:c5:77:53:
25:cd:bc:3e:3f:36:80:57:f9:d5:19:83:4d:ee:de:25:e6:86:
e7:41:d5:50:3d:90:d7:a2:36:9a:67:31:8c:0f:96:b1:d4:56:
b7:79:85:69:d5:37:ff:8b:2d:60:4a:1b:ef:e3:fb:bd:2e:3b:
9b:be:52:0f:98:b5:ad:83:10:b1:82:0f:ee:83:23:95:51:a5:
5d:3c:52:e9:92:87:2a:56:33:dd:89:6e:3e:ad:e0:e2:dd:14:
18:3b:a1:52:a9:33:34:f1:14:a9:b5:ed:17:27:70:92:bf:70:
e2:2c:50:46:dd:87:f6:8b:aa:b6:3f:2a:a4:bb:b8:b9:a5:fa:
b5:2e:62:d2:20:10:d2:02:4f:4e:eb:71:f2:1d:84:d9:9c:f1:
42:b7:07:29:6b:10:93:e6:3a:5d:43:cf:5a:b8:d7:6a:17:cf:
19:3a:79:10:83:eb:29:d3:91:97:aa:e8:12:be:5f:12:fc:64:
5a:83:6b:7c:c7:41:34:76:26:fc:80:00:45:29:57:29:79:ee:
bc:c9:cb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:01:42 2026 by rpki-client