Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/opD2NcL2nmRTrpHS0YAP7eQzc1E.mft
File: opD2NcL2nmRTrpHS0YAP7eQzc1E.mft (raw, json)
Hash identifier: VY2+n74IMv5ASQvbfJVkb5Vjup0pLE+4fqzMhRo0hdc=
Subject key identifier: 1A:1A:2A:1E:03:1E:18:29:3A:94:53:7B:2E:F3:05:FD:68:D9:E5:32
Authority key identifier: A2:90:F6:35:C2:F6:9E:64:53:AE:91:D2:D1:80:0F:ED:E4:33:73:51
Certificate issuer: /CN=a290f635c2f69e6453ae91d2d1800fede4337351
Certificate serial: 01A1732643E6C1E9700148E0881271FA67C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opD2NcL2nmRTrpHS0YAP7eQzc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/opD2NcL2nmRTrpHS0YAP7eQzc1E.mft
Manifest number: 1D
Signing time: Sun 25 Oct 2026 13:00:49 +0000
Manifest this update: Sun 25 Oct 2026 13:00:49 +0000
Manifest next update: Mon 26 Oct 2026 13:00:49 +0000
Files and hashes: 1: 5J1ZLpGRglEIpqIkhiDq2AnrLR8.roa (hash: YCh1O/pya2tgScmgjqyyOWL9RIorCG7iaoLIO54Rx4k=)
2: opD2NcL2nmRTrpHS0YAP7eQzc1E.crl (hash: SRYXjRb6qJW+mWOcUZDkZypM5EFsaSlzdVNOkoXM98g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/opD2NcL2nmRTrpHS0YAP7eQzc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/opD2NcL2nmRTrpHS0YAP7eQzc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/opD2NcL2nmRTrpHS0YAP7eQzc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:26:43:e6:c1:e9:70:01:48:e0:88:12:71:fa:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a290f635c2f69e6453ae91d2d1800fede4337351
Validity
Not Before: Oct 25 13:00:49 2026 GMT
Not After : Oct 26 13:00:49 2026 GMT
Subject: CN=1a1a2a1e031e18293a94537b2ef305fd68d9e532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:9f:da:be:63:76:60:80:90:85:58:0b:47:
3f:5c:b7:ae:24:23:c4:f4:73:18:12:2e:d6:ed:68:
ea:c7:68:ab:a8:5c:10:ce:18:1d:46:51:71:4e:14:
b8:aa:1e:35:8d:c2:ae:1b:3e:7d:87:d0:9e:61:86:
48:4f:02:e5:ff:2a:d9:2b:19:d5:c2:7c:aa:00:93:
81:66:7f:7f:99:1f:ef:34:17:5e:f4:7c:c9:fe:4d:
42:07:b4:d1:bf:c1:df:8a:29:4a:75:62:be:45:3a:
03:7e:17:22:9e:04:35:05:50:4e:ed:cb:78:65:e0:
d8:a3:26:e9:cb:97:c2:af:04:77:c4:2c:9c:21:6c:
5b:21:05:04:aa:92:f8:52:1d:52:12:9c:c8:b0:6a:
83:75:09:f6:bc:b7:4b:f9:0f:c0:b8:49:db:b6:cf:
9c:52:d1:1c:e5:40:97:11:e1:64:3c:a7:fc:98:dd:
79:17:af:18:ac:f3:cf:73:85:c0:6b:64:34:d6:71:
65:cc:66:83:1e:48:63:15:2f:5d:16:54:b1:ae:b4:
72:85:ce:d3:15:28:9d:b7:01:dc:a0:43:13:f7:ac:
26:85:8f:2d:3e:48:48:e1:de:b3:2f:76:23:2f:ae:
3b:91:c0:51:29:1f:63:c9:01:1d:2d:fd:f6:ae:48:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1A:2A:1E:03:1E:18:29:3A:94:53:7B:2E:F3:05:FD:68:D9:E5:32
X509v3 Authority Key Identifier:
keyid:A2:90:F6:35:C2:F6:9E:64:53:AE:91:D2:D1:80:0F:ED:E4:33:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opD2NcL2nmRTrpHS0YAP7eQzc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/opD2NcL2nmRTrpHS0YAP7eQzc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ff0031-a7f7-44da-9b5a-61c37372bdb6/1/opD2NcL2nmRTrpHS0YAP7eQzc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:79:0e:3b:cf:5e:8c:14:7f:29:80:f6:cb:67:b4:df:12:8d:
7c:b5:50:ee:ad:81:e3:85:bf:ed:f8:ac:de:5c:55:ff:d6:d5:
35:1a:93:f4:9e:14:a0:ae:d4:92:ad:ba:ec:71:9c:38:25:8c:
38:ed:af:12:5f:7f:76:74:5f:44:be:78:3e:15:d5:96:cb:05:
15:3f:f6:6e:c5:de:68:ca:20:a3:ea:94:ad:c6:73:dd:ed:1c:
50:77:49:12:78:d1:77:a3:7a:20:ed:c8:9c:af:8e:fb:0e:1e:
9c:81:37:20:75:58:fa:93:27:a1:f2:e8:8b:32:9a:78:59:7c:
8a:97:67:1f:79:0a:ab:df:5a:36:32:0b:7c:a2:3f:6d:c4:4d:
fc:08:0a:71:2e:09:d4:2e:c5:e8:fb:7d:49:42:08:95:59:b5:
fd:d1:d4:6c:21:49:85:27:83:39:fb:5d:49:76:6e:0c:6f:dc:
3c:d2:72:63:97:5f:11:b5:62:0c:6c:6e:0c:e4:82:bf:de:73:
39:4a:a1:1a:ed:e0:d8:1d:bf:69:3c:87:67:c2:ed:b5:ac:00:
6b:b4:72:7a:64:6a:bc:19:43:32:42:5f:e7:fa:aa:24:8a:a1:
d3:f8:c9:a8:ee:c8:47:64:5d:13:7c:c0:52:69:c2:a6:8a:6c:
e1:80:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:01:46 2026 by rpki-client