Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
File: OPp_x3GCjPs5cigk9_3z7cSzxSk.mft (raw, json)
Hash identifier: TGdOqOuDyxOkPBfIqIfZavQ05/lDIkglFvU68gIEag4=
Subject key identifier: 3B:C2:DF:A0:7A:2A:F1:AD:08:83:1A:44:A4:06:13:13:73:1F:9F:CD
Authority key identifier: 38:FA:7F:C7:71:82:8C:FB:39:72:28:24:F7:FD:F3:ED:C4:B3:C5:29
Certificate issuer: /CN=38fa7fc771828cfb39722824f7fdf3edc4b3c529
Certificate serial: 019D39AE4F780FAE7B0D027C97B9D9769B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
Manifest number: 0285
Signing time: Sun 29 Mar 2026 13:00:17 +0000
Manifest this update: Sun 29 Mar 2026 13:00:17 +0000
Manifest next update: Mon 30 Mar 2026 13:00:17 +0000
Files and hashes: 1: OPp_x3GCjPs5cigk9_3z7cSzxSk.crl (hash: jbXeY36Rud1E8RsTSOuAEtZRsgPCyHjtYaxhIGt2Lc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:4f:78:0f:ae:7b:0d:02:7c:97:b9:d9:76:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fa7fc771828cfb39722824f7fdf3edc4b3c529
Validity
Not Before: Mar 29 13:00:17 2026 GMT
Not After : Mar 30 13:00:17 2026 GMT
Subject: CN=3bc2dfa07a2af1ad08831a44a4061313731f9fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:8a:0b:84:f8:06:1d:d7:6d:6f:ff:11:de:
47:20:1e:cd:94:48:be:83:91:f4:59:57:53:71:eb:
7c:cd:33:71:c6:81:ed:ba:c4:52:0e:90:d7:07:4b:
74:f2:04:4d:bc:9e:0d:40:de:10:99:a5:a2:3c:ff:
28:5f:f6:cb:c5:6c:5c:70:4b:51:60:17:b4:48:5e:
74:8f:b4:2d:5e:d5:50:1d:61:7a:91:a5:0e:ce:92:
6b:0e:e5:51:6c:07:d2:cb:39:57:d7:c6:f1:d2:32:
2e:cc:45:72:5d:ac:8a:dc:ff:67:af:9e:c6:44:fb:
b2:d9:b8:77:96:ef:09:23:cd:50:7e:2a:38:e5:65:
b8:85:a1:2d:9c:54:54:92:0a:72:a5:ff:64:d0:6e:
96:18:91:62:38:41:61:fc:d8:84:8b:3a:de:a1:f4:
5e:5b:37:89:e9:75:d2:fe:6b:d4:b4:61:9c:92:34:
75:0f:a4:cb:49:ea:25:a6:00:bd:95:bc:ca:44:f6:
b4:7d:84:90:35:13:15:d4:c2:38:0c:47:50:af:bf:
0d:5f:6d:cc:da:38:10:dc:18:00:68:82:0b:90:d1:
9c:a3:28:d0:b3:51:e0:15:26:8d:9f:43:6c:95:f2:
81:c1:2a:c0:8c:c9:e0:d5:2f:0f:a8:1a:0b:f5:75:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C2:DF:A0:7A:2A:F1:AD:08:83:1A:44:A4:06:13:13:73:1F:9F:CD
X509v3 Authority Key Identifier:
keyid:38:FA:7F:C7:71:82:8C:FB:39:72:28:24:F7:FD:F3:ED:C4:B3:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:37:62:3c:73:ff:7f:d6:3b:f6:b5:c1:25:b8:c8:b8:73:7e:
0d:25:9e:a0:64:73:87:b4:2a:64:c3:06:cd:4f:9c:ef:2d:52:
22:69:c3:34:61:6a:b1:2b:4b:63:5f:8a:07:5e:a4:56:50:d1:
25:91:49:5e:e0:d6:aa:58:9c:e9:6a:29:ab:72:49:19:33:41:
71:b4:e9:d0:82:22:a0:cc:37:3d:51:e6:cd:0a:7a:43:4f:35:
72:e5:f4:45:5b:c7:27:f8:ea:7a:a2:1e:73:20:be:8b:85:e6:
3e:0a:93:ca:da:16:64:68:c0:f0:4d:db:82:44:1a:8d:99:27:
d4:7a:89:83:12:af:1c:77:58:5d:0a:a0:cd:a2:4f:3c:60:e4:
90:53:03:2c:23:c3:80:4e:d6:98:9d:15:9e:22:aa:60:97:16:
6f:a7:56:74:0c:fa:c6:9f:05:10:3a:19:4b:8f:81:a6:6a:da:
1e:bc:e1:f6:ac:2d:95:b1:a1:6e:9f:85:d5:ae:9d:c1:fd:95:
5f:a4:83:bc:1d:e9:60:37:bd:96:ea:f6:5c:97:a9:ff:48:51:
5d:d1:98:c0:0a:fd:52:a4:3e:a8:6d:fa:72:a1:22:90:01:8a:
2d:23:32:4f:53:90:ac:02:93:b8:74:21:0f:cf:65:82:1c:08:
1e:c0:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:03:00 2026 by rpki-client