Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
File: OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft (raw, json)
Hash identifier: U6Kze2m8k5YbEvc204Cnw+TrXudbDopbnyUK5+wbXzk=
Subject key identifier: 08:1D:39:39:5B:BF:0B:88:95:69:E9:E2:83:B1:0D:13:48:50:F5:5F
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 019D382E3BCB8C50039250CB0301DF1A39E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: LnaW5765Yz17Jsu6jhp4pcS4phE.roa (hash: IQeYGnlewk42LV1orLSIQiV+CC/nS8IwBcXiQsT3VkU=)
2: OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl (hash: 3zoNN9ezWTVi+VjIuENwDIAnk4ZmEnhjquAAGzO0Ogo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3b:cb:8c:50:03:92:50:cb:03:01:df:1a:39:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=081d39395bbf0b889569e9e283b10d134850f55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:2f:22:92:18:91:4d:f7:97:10:c8:8d:f6:
74:9f:92:a4:64:29:79:d9:00:84:2b:2f:a0:22:9b:
ee:cd:6e:7b:0a:f8:71:e6:bf:e5:46:17:d2:dd:65:
b4:bc:24:2a:d0:7f:1c:61:b4:df:d1:f9:e6:21:89:
fb:57:6c:d1:1b:a6:d7:d2:32:ed:b0:0b:61:c6:6c:
7a:30:5b:49:bc:d9:62:67:ce:26:63:29:dc:a2:af:
54:82:d7:2d:35:23:69:2b:d1:32:42:48:65:c5:5d:
63:ca:8a:18:23:fe:48:1c:3f:07:7f:fd:17:cd:cb:
c6:a9:58:77:a9:84:33:c5:3d:9c:e7:c3:5e:43:e5:
8e:05:b8:f1:c9:b4:f4:38:84:f4:c9:1d:97:85:ff:
a2:cf:01:92:32:df:17:a0:53:9a:d9:f7:c9:65:f1:
06:5e:9f:a6:06:0e:00:72:dd:57:72:ff:b9:f2:8a:
09:77:c7:56:29:0d:58:e4:17:6d:57:21:8d:0d:23:
de:cc:08:1a:86:a0:3a:73:53:db:22:88:9f:c0:f8:
bc:38:75:1c:af:d6:47:fd:78:15:5e:9a:ad:73:18:
ab:1f:78:e0:8e:da:b9:11:3e:16:a0:63:52:dd:59:
24:ef:82:eb:cf:04:4a:8c:49:02:b9:36:e3:46:93:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1D:39:39:5B:BF:0B:88:95:69:E9:E2:83:B1:0D:13:48:50:F5:5F
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6b:48:e0:d3:e0:29:6f:7e:08:48:3f:6b:92:82:7c:ae:4e:
0c:40:d8:07:f2:9a:09:51:d6:32:53:dd:12:20:4b:e9:e4:31:
50:c3:f3:67:fc:a6:9e:ac:22:0a:41:e8:eb:64:bd:28:69:29:
11:75:88:87:d3:9f:61:f5:81:84:0b:10:66:58:96:e6:38:6d:
42:18:45:3f:ca:4f:35:2c:0a:84:fe:aa:60:23:ee:a7:96:14:
97:0a:b7:29:7c:db:e8:47:d3:21:b0:ef:f3:de:ed:a6:79:d6:
ea:a3:a1:ab:ba:fa:19:31:27:83:a1:c2:ba:93:75:ad:26:3d:
73:04:e2:e5:e3:7c:d3:00:0c:90:4e:57:7f:58:82:dd:6c:81:
71:4a:6f:85:19:e2:3d:13:6b:e3:aa:40:92:96:7f:76:0d:7d:
df:9c:2d:15:f5:b5:e5:9d:d5:eb:7c:27:42:f0:80:85:bf:f0:
a7:7c:c9:cc:ce:25:8b:df:8d:5b:e2:e5:b4:6f:5c:ad:ee:c9:
00:8b:b2:1b:06:2d:26:34:42:77:9b:e1:77:1b:47:c8:3a:53:
65:37:92:f5:ff:8c:2c:0c:a6:dc:95:63:34:88:db:d7:34:f9:
2e:9f:7c:c5:4e:85:07:e9:5b:d4:f9:ca:8e:1c:03:75:46:07:
16:ea:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:29 2026 by rpki-client