Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
File: Op8dKBTKebYZFWiagmFLkldaS1s.mft (raw, json)
Hash identifier: eElJSvWxWAnpPY6bM0NgB+56NUVZu+ZWttOl57SqsvM=
Subject key identifier: D0:BA:F6:D2:39:1A:21:78:54:39:82:D1:19:5D:47:81:72:57:A2:EE
Authority key identifier: 3A:9F:1D:28:14:CA:79:B6:19:15:68:9A:82:61:4B:92:57:5A:4B:5B
Certificate issuer: /CN=3a9f1d2814ca79b61915689a82614b92575a4b5b
Certificate serial: 01A151E3BF85F8BB559E5566CFB34941FC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
Manifest number: 01BB
Signing time: Mon 19 Oct 2026 02:00:42 +0000
Manifest this update: Mon 19 Oct 2026 02:00:42 +0000
Manifest next update: Tue 20 Oct 2026 02:00:42 +0000
Files and hashes: 1: Op8dKBTKebYZFWiagmFLkldaS1s.crl (hash: z3uRtts9hiZSJJlrrmQZXGCgT/WwFV/vj193RPTle0s=)
2: ZujPeFLEKXZUzVLUC2T-QFZI6OM.roa (hash: EtbDCHEn2THDzHpj6J6jSqVTS+eJbiX7R8y0kc6QTNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:e3:bf:85:f8:bb:55:9e:55:66:cf:b3:49:41:fc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a9f1d2814ca79b61915689a82614b92575a4b5b
Validity
Not Before: Oct 19 02:00:42 2026 GMT
Not After : Oct 20 02:00:42 2026 GMT
Subject: CN=d0baf6d2391a2178543982d1195d47817257a2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:bb:16:ee:38:06:df:35:b3:52:c0:cc:96:
20:57:e9:a1:d3:d0:9c:3a:47:85:20:2b:b3:96:92:
7c:22:e6:95:c4:de:eb:fa:7a:e4:72:9f:c4:b5:5c:
36:04:57:2f:89:10:24:63:53:90:27:ab:fc:34:bd:
35:d1:af:78:42:e6:2d:42:5d:cf:56:98:53:25:04:
b4:fe:de:11:10:18:a9:f4:bb:77:8a:56:32:1d:36:
61:e1:44:19:6b:f8:6c:28:30:53:2f:14:11:bf:8c:
d7:27:17:35:41:69:9c:4e:b3:ec:bb:10:89:7e:35:
9d:93:3c:8e:a7:23:c8:d5:98:2c:82:fc:95:8b:6e:
52:8d:75:21:25:3f:b6:3d:f8:b0:19:38:ea:ea:69:
06:f9:f1:8d:40:02:e2:6d:da:4f:ff:dc:35:c6:5e:
67:10:7f:a3:a0:73:5a:f8:45:e5:df:80:e9:a6:65:
e5:e7:48:6d:24:67:5a:11:35:c0:bb:11:01:2e:14:
25:0d:49:94:5a:ae:1c:1f:63:6f:85:33:0f:f8:57:
de:5a:4a:d4:35:8a:88:fe:af:c4:84:69:c7:d7:4f:
f6:db:8d:7b:06:23:75:59:5f:59:fc:56:32:84:d6:
d4:ba:aa:38:f0:e5:9c:7e:84:e8:cf:f6:65:aa:61:
76:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BA:F6:D2:39:1A:21:78:54:39:82:D1:19:5D:47:81:72:57:A2:EE
X509v3 Authority Key Identifier:
keyid:3A:9F:1D:28:14:CA:79:B6:19:15:68:9A:82:61:4B:92:57:5A:4B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:29:88:a8:14:aa:9c:2c:96:6d:d7:df:4a:b0:af:55:02:8b:
7b:d5:75:c8:18:34:0e:4c:d3:01:71:7e:bd:df:de:1f:1a:c6:
6d:60:14:33:c9:97:81:83:d0:4d:1e:46:32:b0:63:5f:40:93:
cd:96:20:1f:da:5d:c9:b0:7c:a4:78:33:55:93:ff:b7:51:3d:
06:10:ab:d4:d0:88:eb:26:e7:5b:fa:8a:3e:51:57:83:0f:59:
d9:2b:8c:a2:7b:74:56:e4:1a:58:f0:b1:8a:4b:5b:a8:9f:b8:
f9:fd:64:dd:f9:34:42:55:45:89:66:2e:72:56:8d:80:6d:6a:
bc:e5:58:95:9f:52:dd:67:8c:49:1d:df:93:91:63:20:cf:97:
0a:89:95:c2:47:ab:2b:4d:ad:a4:4a:1d:56:b2:75:0c:51:65:
cf:65:02:3d:d5:39:a3:39:8a:fd:7c:84:12:64:b0:f6:da:a0:
41:a2:ec:58:12:0e:4a:06:c9:7a:65:2f:b6:4f:2e:ba:8c:e5:
c2:92:35:94:99:c4:ae:03:25:f1:15:fe:13:43:c6:d6:47:93:
54:5f:dc:e3:28:ed:52:bd:58:56:7d:5c:d0:5d:b5:42:c4:15:
40:1f:20:95:d3:18:e1:13:50:0d:42:29:b7:03:51:7c:4e:50:
f6:84:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:57:58 2026 by rpki-client