Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: nR9giOezMiyoc/vucKpmX4K7ehT4TqXc5GtZj8f8tXs=
Subject key identifier: F7:8C:95:CE:6E:A1:9C:B7:9D:8D:06:82:A8:6C:E8:16:3C:FD:D8:5E
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 01A1A97071AE7AABDFC3190417470E3620D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 1AE3
Signing time: Thu 05 Nov 2026 02:01:20 +0000
Manifest this update: Thu 05 Nov 2026 02:01:20 +0000
Manifest next update: Fri 06 Nov 2026 02:01:20 +0000
Files and hashes: 1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: zKb7ayyeFg2IpxfYP9Hd2sKNTXUPIFh/yCDNNymE1aU=)
3: el1QJ8EZEOroSio5mjAT6cdENeQ.roa (hash: Rq2+3JsrgLjDqBXH9XO5ReXrknj46T6QViW1jQC5N00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:71:ae:7a:ab:df:c3:19:04:17:47:0e:36:20:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Nov 5 02:01:20 2026 GMT
Not After : Nov 6 02:01:20 2026 GMT
Subject: CN=f78c95ce6ea19cb79d8d0682a86ce8163cfdd85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:c2:a6:0c:b3:65:e8:5a:12:69:75:5d:67:
4b:11:75:b2:25:c3:4e:46:06:2a:65:7a:01:b4:c3:
52:64:ad:ab:a0:40:0c:ec:21:16:78:13:12:67:26:
c0:a8:8a:fa:cb:19:b5:74:c7:9b:ae:de:6d:5e:8b:
ca:74:23:84:91:01:22:4a:9b:cf:b7:c5:f7:25:2d:
75:26:9e:18:41:37:30:cd:07:3b:e4:61:5b:da:3b:
a5:f1:7a:2d:1f:29:85:28:56:84:74:09:99:fd:8c:
56:78:37:54:0a:68:96:27:67:b1:1c:e1:46:72:a7:
b6:ec:57:9a:7f:4f:8c:cf:a0:8b:e3:10:bb:fb:ea:
95:79:25:d7:eb:fd:bb:c5:4a:66:81:8a:35:0e:44:
b7:90:51:c1:24:71:6b:7b:cc:da:7c:a4:5f:dd:55:
b1:86:f5:da:48:04:89:61:f1:bd:b6:8a:a6:ec:9c:
49:51:bf:a3:52:5b:1f:a0:7b:69:51:ec:f6:52:96:
42:94:e6:2d:1c:af:c1:b2:f1:21:b9:b0:c8:84:21:
d0:a4:74:10:6e:08:e6:0a:97:41:12:f8:ce:e6:8f:
01:bd:fd:26:0a:4b:dc:ad:bc:74:b8:d4:64:10:89:
33:d2:1b:ed:a7:91:cf:47:46:53:8f:74:3c:3e:48:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:95:CE:6E:A1:9C:B7:9D:8D:06:82:A8:6C:E8:16:3C:FD:D8:5E
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4a:4d:55:da:0d:c2:5b:78:63:19:a2:55:6b:89:1e:9b:6b:
f6:a3:45:ab:a9:f2:3b:1d:22:08:04:f2:ba:79:36:ad:6e:2d:
37:be:26:99:73:dc:9e:a0:c1:6b:7c:57:09:2f:dc:2f:b3:3d:
8f:3a:fc:cd:43:20:c7:c4:de:3a:84:98:b4:9d:3f:d0:f9:a2:
b1:4b:ff:70:6e:b9:09:88:b7:93:0f:0d:cb:43:6e:60:14:66:
48:f5:81:5e:c0:41:59:f4:fc:12:30:18:6e:10:9f:e6:b9:80:
16:4b:e6:ce:cd:14:ea:cb:ad:53:21:7c:45:a2:41:63:87:21:
ab:56:a1:1e:d9:89:eb:fc:bc:82:e5:f6:e5:4d:4b:f7:95:bd:
cc:36:cd:f5:2b:c7:d3:63:1e:9d:a5:42:e6:17:3c:84:07:3c:
70:be:0a:cb:3d:1e:f8:4a:a6:02:a2:a3:5d:a7:47:75:9e:d6:
28:4a:88:4f:9d:9a:be:ce:c5:92:b0:8e:a1:80:78:f4:d3:50:
63:99:a4:41:65:eb:d9:c6:67:68:8d:50:1b:46:ac:82:86:04:
f3:95:00:92:45:7f:d8:2b:03:5c:3d:f8:a7:ce:cb:ae:84:56:
b5:39:31:43:20:73:c2:64:ef:6d:84:4e:89:00:20:40:64:7b:
8c:11:af:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpcHGueqvfwxkEF0cONiDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOTJmNWQ5MzY3NTJiYWYyZDBkZjcxMzI5OTQ5OWNlY2Zh
OWY0OGQwHhcNMjYxMTA1MDIwMTIwWhcNMjYxMTA2MDIwMTIwWjAzMTEwLwYDVQQD
EyhmNzhjOTVjZTZlYTE5Y2I3OWQ4ZDA2ODJhODZjZTgxNjNjZmRkODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg/CpgyzZehaEml1XWdLEXWyJcNO
RgYqZXoBtMNSZK2roEAM7CEWeBMSZybAqIr6yxm1dMebrt5tXovKdCOEkQEiSpvP
t8X3JS11Jp4YQTcwzQc75GFb2jul8XotHymFKFaEdAmZ/YxWeDdUCmiWJ2exHOFG
cqe27Feaf0+Mz6CL4xC7++qVeSXX6/27xUpmgYo1DkS3kFHBJHFre8zafKRf3VWx
hvXaSASJYfG9toqm7JxJUb+jUlsfoHtpUez2UpZClOYtHK/BsvEhubDIhCHQpHQQ
bgjmCpdBEvjO5o8Bvf0mCkvcrbx0uNRkEIkz0hvtp5HPR0ZTj3Q8PkgnbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeMlc5uoZy3nY0Ggqhs6BY8/dheMB8GA1UdIwQY
MBaAFDqS9dk2dSuvLQ33EymUmc7PqfSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTIt
MTY5NmIyNDZjZDUwLzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTItMTY5NmIyNDZjZDUw
LzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEpNVdoN
wlt4YxmiVWuJHptr9qNFq6nyOx0iCATyunk2rW4tN74mmXPcnqDBa3xXCS/cL7M9
jzr8zUMgx8TeOoSYtJ0/0PmisUv/cG65CYi3kw8Ny0NuYBRmSPWBXsBBWfT8EjAY
bhCf5rmAFkvmzs0U6sutUyF8RaJBY4chq1ahHtmJ6/y8guX25U1L95W9zDbN9SvH
02MenaVC5hc8hAc8cL4Kyz0e+EqmAqKjXadHdZ7WKEqIT52avs7FkrCOoYB49NNQ
Y5mkQWXr2cZnaI1QG0asgoYE85UAkkV/2CsDXD34p87LroRWtTkxQyBzwmTvbYRO
iQAgQGR7jBGvrQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 06:14:58 2026 by rpki-client