Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
File: dlOpinSeVpdEoe3iyUDy5DPEQIo.mft (raw, json)
Hash identifier: Q2K3vTPXgPLe46StleXiSDHXuz1KyMyd4Nzy6sxo4Fk=
Subject key identifier: 46:C4:2C:34:C8:06:CE:4D:C2:E8:45:36:A6:B3:7A:A4:06:4E:98:E5
Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
Certificate issuer: /CN=7653a98a749e569744a1ede2c940f2e433c4408a
Certificate serial: 019D39AF4F699A698F5B848AD95F49738DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
Manifest number: 0C21
Signing time: Sun 29 Mar 2026 13:01:23 +0000
Manifest this update: Sun 29 Mar 2026 13:01:23 +0000
Manifest next update: Mon 30 Mar 2026 13:01:23 +0000
Files and hashes: 1: RsF6wJG_DVoKQM6B-sCzW6WCDW0.roa (hash: qws597tbqP0XDfiuU1TMHHh3nxH1S6tAU3H9xRP9fH8=)
2: dlOpinSeVpdEoe3iyUDy5DPEQIo.crl (hash: 2rb2RWolyfVj351H5mwIcWBfai8jdtr61Cj08Fxk/I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:4f:69:9a:69:8f:5b:84:8a:d9:5f:49:73:8d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a
Validity
Not Before: Mar 29 13:01:23 2026 GMT
Not After : Mar 30 13:01:23 2026 GMT
Subject: CN=46c42c34c806ce4dc2e84536a6b37aa4064e98e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:d4:47:0d:56:5d:fe:42:00:c4:b5:f6:99:
7a:53:65:c1:6a:2c:83:4c:0d:41:d5:a6:71:2a:7d:
9e:6a:83:b7:a0:19:12:32:4d:e7:0f:6e:dc:98:a6:
bf:03:31:94:c4:ec:b0:a5:0b:f3:e7:34:55:bc:39:
69:f0:4a:84:c7:dc:e6:37:d4:08:9c:0f:28:a7:0f:
a0:3e:c2:26:ae:64:30:ce:4f:6b:55:c8:a2:42:c7:
a3:56:45:e4:55:92:0d:27:f8:28:c0:5f:80:8f:40:
c5:4b:1f:c7:f7:28:d0:9a:85:5f:dc:64:ac:3f:1b:
39:82:07:2d:13:43:f5:3c:88:1f:c4:d4:09:6f:f9:
a9:e2:48:da:ec:f4:6f:db:c2:24:53:18:10:cc:b0:
7b:5a:e7:7c:86:c2:dd:3f:35:d0:86:b9:c9:c3:65:
ee:e3:ca:e8:a5:cf:63:a2:b8:68:6d:9b:ce:11:13:
57:9a:44:50:c6:7e:0a:15:8c:0b:b8:7f:b7:7b:58:
8a:ce:17:df:0b:37:e7:4a:98:8d:ad:5a:82:94:2f:
fd:c8:f4:16:bd:d4:58:b5:4f:bc:32:1b:9c:d3:0b:
a8:0b:fc:58:fb:08:cf:bf:f5:96:80:18:ec:72:c5:
6f:13:53:5c:c9:20:08:83:a3:99:4d:fc:c7:96:9c:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C4:2C:34:C8:06:CE:4D:C2:E8:45:36:A6:B3:7A:A4:06:4E:98:E5
X509v3 Authority Key Identifier:
keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:86:63:c5:0e:db:c5:f3:7f:8f:97:ab:47:92:a9:16:55:bf:
7c:88:b0:72:5d:f5:84:9c:da:0f:9e:c4:77:72:b5:19:dd:a9:
2a:aa:f7:ee:f7:99:28:0c:87:6b:12:73:03:e2:90:8a:85:47:
3f:84:d3:50:00:6d:03:42:aa:f0:34:34:c3:bd:7e:1f:48:4d:
7c:09:72:82:be:73:1a:2f:65:1f:71:fc:b3:01:b2:7b:9e:7a:
02:26:bd:a9:d0:90:f9:79:56:88:fc:fa:60:85:18:b2:e8:9a:
0b:39:09:23:3a:d5:2a:65:ea:d7:df:93:31:b5:97:a1:0d:a4:
b2:a2:29:20:72:48:ba:21:19:23:a6:e2:8c:0b:49:29:33:f6:
ae:f7:e5:38:81:54:ed:86:4d:c0:90:68:61:e7:dc:2d:c5:d1:
40:16:2d:d8:33:4c:74:41:dd:8f:3e:2e:06:53:4c:00:38:29:
f5:24:50:08:cd:6f:9a:f7:2b:49:03:b2:46:bf:82:8d:c5:4c:
c2:60:26:dd:84:42:e0:0e:bb:78:ac:2e:eb:8a:a1:af:15:9f:
aa:73:6d:6d:44:a0:50:4c:0c:bc:3b:8e:17:c9:3c:a4:2f:30:
b9:24:f4:3a:8d:52:f3:cd:7c:50:10:4d:70:c1:4d:e4:b6:84:
30:68:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:16 2026 by rpki-client