Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: fFhxbOnRuRGNdmkmv+tNtIswQJdYr4Go6V772r7azDk=
Subject key identifier: 46:69:98:48:EA:0B:04:59:44:D1:A9:F3:DD:A9:EE:4E:9A:7B:2E:64
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 01A1A7823B6123FA8803EB7BA3F7937723C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 1AE2
Signing time: Wed 04 Nov 2026 17:01:32 +0000
Manifest this update: Wed 04 Nov 2026 17:01:32 +0000
Manifest next update: Thu 05 Nov 2026 17:01:32 +0000
Files and hashes: 1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: xg9y8ZtCoCm+0dcsHM3WiyRm6FWiUfhvm3/Js5WGSsI=)
3: el1QJ8EZEOroSio5mjAT6cdENeQ.roa (hash: Rq2+3JsrgLjDqBXH9XO5ReXrknj46T6QViW1jQC5N00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:82:3b:61:23:fa:88:03:eb:7b:a3:f7:93:77:23:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Nov 4 17:01:32 2026 GMT
Not After : Nov 5 17:01:32 2026 GMT
Subject: CN=46699848ea0b045944d1a9f3dda9ee4e9a7b2e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c2:b3:47:a0:40:ad:16:a7:34:03:8c:61:be:
e5:21:c8:d8:01:d4:81:5c:16:c0:df:1c:cd:f5:51:
30:1f:a9:80:95:bf:b5:65:f3:2f:5d:90:84:b5:5e:
75:19:4f:b2:b6:78:70:ba:06:72:56:5e:d8:04:ab:
f9:d4:f0:6d:ac:da:58:4e:42:33:18:9e:03:b1:66:
7d:df:1a:20:31:4e:c0:c0:06:c9:22:53:c8:18:0c:
21:89:69:89:68:9e:44:a9:86:38:27:52:51:a6:c0:
7a:7d:01:f7:51:c0:e7:e0:00:6a:52:cb:8f:ac:69:
4d:1c:e2:7b:b1:67:38:dc:84:9a:b7:db:44:62:91:
51:c9:d9:c4:b0:ea:ab:40:fd:e7:78:58:69:a2:5b:
98:58:d8:06:c0:9d:78:36:16:56:9d:84:54:09:f0:
37:c7:46:d3:9f:c7:d1:e3:b9:a4:91:bb:f6:47:a3:
a3:ec:f1:b0:30:a7:04:e9:12:c8:ab:43:18:49:00:
17:24:2b:f2:75:c4:ec:2c:f1:ae:bb:14:43:59:7f:
75:5b:a9:fe:03:80:a8:38:7f:6f:f0:58:8b:ac:c9:
58:67:cc:6d:1b:1a:59:81:7c:f0:76:d1:53:6a:31:
81:16:65:15:36:91:b7:42:f3:40:b9:a1:18:79:e2:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:98:48:EA:0B:04:59:44:D1:A9:F3:DD:A9:EE:4E:9A:7B:2E:64
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ad:d6:bc:0c:24:51:da:f9:53:3c:79:b2:8c:91:ce:35:23:
31:91:34:94:76:7f:64:c9:ec:fd:6d:f0:92:bf:e9:3f:84:39:
c4:fc:14:73:8c:81:4e:85:61:48:52:c4:4e:86:1c:b4:cb:60:
15:88:6e:3f:66:a0:de:1f:10:01:48:dc:36:7d:53:39:20:50:
a0:aa:0f:0d:7f:e5:42:fd:31:19:f5:38:17:98:6d:f5:a8:80:
cb:59:08:39:d6:5e:62:ab:fd:53:80:8b:40:98:6e:26:90:ee:
4a:57:1a:ba:85:5f:6c:bc:80:a4:46:e6:9d:3b:04:93:d6:f7:
42:c2:93:19:a1:c3:81:b8:87:1b:a4:9a:30:da:3a:f5:76:d8:
a6:d7:58:38:29:3b:3f:fc:30:03:13:34:ac:f6:e5:09:58:79:
86:a4:67:01:3e:6c:28:a4:0d:1c:e7:21:5b:67:e7:d7:f2:10:
1a:69:39:92:f8:72:c1:c2:80:7f:55:00:da:d8:4c:b6:03:8f:
b1:cf:47:b5:55:6a:72:ac:6c:c0:a1:b3:87:bf:6f:06:85:8d:
88:63:bb:59:02:cd:2b:88:84:36:f4:26:8f:0e:63:65:dd:1d:
fe:15:0a:c8:f7:2e:d5:b0:9c:be:ea:f3:3c:f1:41:45:e3:78:
6e:dd:f6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:21:09 2026 by rpki-client