Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: sqIKoBts4VhAdDFXQaUUb+m/+gZXMOrYIGd3SeRVqT8=
Subject key identifier: 5B:8A:D4:75:98:69:F1:6B:12:02:D2:34:01:3A:1B:F6:29:BD:39:8B
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 019E75531C941A43EBF74EA90E03244B831E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 1935
Signing time: Fri 29 May 2026 20:00:41 +0000
Manifest this update: Fri 29 May 2026 20:00:41 +0000
Manifest next update: Sat 30 May 2026 20:00:41 +0000
Files and hashes: 1: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: 9G/d3Gy8jEG00iqt1KiWWU9+K31e5IUMcSUlfeRE7sc=)
2: pm79H7mwduu7mnhDJctsn-uYWPE.roa (hash: ED5J8d3NpU/HwXaPFnumSsfSWb72ZAcfll3lZasNaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:75:53:1c:94:1a:43:eb:f7:4e:a9:0e:03:24:4b:83:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: May 29 20:00:41 2026 GMT
Not After : May 30 20:00:41 2026 GMT
Subject: CN=5b8ad4759869f16b1202d234013a1bf629bd398b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:6e:15:16:f0:2a:92:be:4c:b1:27:35:77:
a0:74:37:c0:df:db:32:1a:56:d3:e6:56:59:49:2b:
ed:91:c1:e9:b5:28:d3:d8:59:71:5c:17:07:1b:a3:
e5:1a:7f:f1:e7:74:6e:27:f4:60:00:b3:9b:42:16:
a9:19:65:ab:0f:de:b7:9f:f8:68:06:61:7b:b7:b2:
20:80:1c:45:24:c6:b5:a5:d8:05:29:52:d3:40:ea:
14:e6:24:80:db:5b:0c:ab:9b:bb:1e:bb:87:e7:d3:
c1:98:cb:71:30:9a:e9:5b:76:c4:e3:0b:98:35:5d:
81:9a:31:cb:cf:7d:f4:e6:dc:d1:bd:52:79:2c:64:
bc:f0:f5:ff:8b:05:56:c0:29:ab:6b:ff:ca:8b:18:
fa:98:3b:85:87:dd:88:04:43:fa:de:95:8f:7b:b4:
88:92:b0:bc:c6:d6:2b:5d:f3:c3:d1:d4:e4:a5:04:
6f:1f:31:85:f9:01:1f:a5:07:eb:2a:01:50:bb:e8:
33:0d:5b:53:b0:16:f1:9b:fe:3b:b6:39:54:9d:c2:
a6:ef:7b:04:fd:d9:e8:92:90:5b:ba:68:88:75:2d:
ae:e0:9f:3f:c5:40:3a:fd:91:43:60:06:4f:e9:17:
f8:05:0e:0e:ad:85:28:6b:9f:30:bf:a5:e0:c8:d7:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8A:D4:75:98:69:F1:6B:12:02:D2:34:01:3A:1B:F6:29:BD:39:8B
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3d:c4:ea:df:5e:41:75:3e:12:dc:83:20:d0:31:65:f9:ab:
b5:72:36:0f:20:00:d5:37:ed:9f:d6:a5:f2:37:d8:29:d0:51:
d4:3e:f7:35:d2:10:e7:a6:a1:66:1f:c0:28:29:2c:e8:5d:ca:
8f:2f:76:70:03:e3:3f:76:17:c2:84:8e:28:57:bb:f7:01:33:
d3:c5:9e:a2:85:7b:63:ef:d3:2f:48:1d:16:9b:8e:66:e1:1c:
26:56:7e:dc:bd:1e:9d:04:39:a9:01:cd:e7:15:30:8e:c7:ee:
52:7a:33:1b:45:da:ed:58:d7:65:a5:40:6c:6f:62:ab:87:36:
15:d5:b5:85:87:9c:ef:8b:ff:43:8d:30:37:01:81:6d:a5:85:
aa:b6:66:a9:4e:63:4b:e0:eb:c7:d2:34:e8:da:52:31:17:6c:
ba:5d:ab:d2:c6:69:16:51:89:71:59:84:73:1c:cf:5b:d4:49:
28:79:01:8f:26:77:c8:5f:f5:2c:f2:94:5e:22:ae:45:c4:99:
31:a1:ab:8d:08:16:8f:a1:78:be:20:0f:7a:94:f7:fe:65:97:
67:09:18:39:23:15:99:c8:fe:a8:98:cb:44:d7:01:06:16:14:
eb:2e:09:e4:11:7b:95:c7:45:95:31:3c:ce:99:46:20:1b:a8:
5b:e6:66:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ51UxyUGkPr906pDgMkS4MeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTE2NTI3ZmQ5MWU5YjNjZjhlMDYyYmNlMDZkZjVjYmQ0
YzRiMWEwHhcNMjYwNTI5MjAwMDQxWhcNMjYwNTMwMjAwMDQxWjAzMTEwLwYDVQQD
Eyg1YjhhZDQ3NTk4NjlmMTZiMTIwMmQyMzQwMTNhMWJmNjI5YmQzOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslRuFRbwKpK+TLEnNXegdDfA39sy
GlbT5lZZSSvtkcHptSjT2FlxXBcHG6PlGn/x53RuJ/RgALObQhapGWWrD963n/ho
BmF7t7IggBxFJMa1pdgFKVLTQOoU5iSA21sMq5u7HruH59PBmMtxMJrpW3bE4wuY
NV2BmjHLz3305tzRvVJ5LGS88PX/iwVWwCmra//Kixj6mDuFh92IBEP63pWPe7SI
krC8xtYrXfPD0dTkpQRvHzGF+QEfpQfrKgFQu+gzDVtTsBbxm/47tjlUncKm73sE
/dnokpBbumiIdS2u4J8/xUA6/ZFDYAZP6Rf4BQ4OrYUoa58wv6XgyNee9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuK1HWYafFrEgLSNAE6G/YpvTmLMB8GA1UdIwQY
MBaAFKKRZSf9kemzz44GK84G31y9TEsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjct
ZTBkYzE4ZTg4MjI5LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjctZTBkYzE4ZTg4MjI5
LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArD3E6t9e
QXU+EtyDINAxZfmrtXI2DyAA1Tftn9al8jfYKdBR1D73NdIQ56ahZh/AKCks6F3K
jy92cAPjP3YXwoSOKFe79wEz08WeooV7Y+/TL0gdFpuOZuEcJlZ+3L0enQQ5qQHN
5xUwjsfuUnozG0Xa7VjXZaVAbG9iq4c2FdW1hYec74v/Q40wNwGBbaWFqrZmqU5j
S+Drx9I06NpSMRdsul2r0sZpFlGJcVmEcxzPW9RJKHkBjyZ3yF/1LPKUXiKuRcSZ
MaGrjQgWj6F4viAPepT3/mWXZwkYOSMVmcj+qJjLRNcBBhYU6y4J5BF7lcdFlTE8
zplGIBuoW+Zmsw==
-----END CERTIFICATE-----
Generated at Sat May 30 04:46:22 2026 by rpki-client