Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: 81nPNnGZgnDGRZ10KUwpvF89lFy4nVnGeYPx8q4XMn0=
Subject key identifier: CE:B0:44:AA:2C:9A:74:FC:D8:E5:C0:DA:88:70:CF:C3:70:10:EF:D3
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 01A08ED6F2430488B5D6DA4DB5DC69A25C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 1A50
Signing time: Fri 11 Sep 2026 05:00:46 +0000
Manifest this update: Fri 11 Sep 2026 05:00:46 +0000
Manifest next update: Sat 12 Sep 2026 05:00:46 +0000
Files and hashes: 1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: 7N48XnHViXZWD7eZ7UJAc8wMU7lMlzekbO92yiQcqOI=)
3: jksHLXQsL8kIaSdyy1KKgItGkLM.roa (hash: SvVYKXT2yItHZ/QXEnN9YsWJ7pv9MmMOoAi6wKxSVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d6:f2:43:04:88:b5:d6:da:4d:b5:dc:69:a2:5c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Sep 11 05:00:46 2026 GMT
Not After : Sep 12 05:00:46 2026 GMT
Subject: CN=ceb044aa2c9a74fcd8e5c0da8870cfc37010efd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a6:00:a0:bf:aa:31:93:3e:24:ef:53:0b:cc:
65:65:45:33:23:6e:00:57:3e:42:d7:58:e8:a9:65:
fb:3f:16:03:dd:6d:22:e2:be:66:a8:ec:f4:79:a1:
b0:40:3c:bf:42:37:6f:63:ec:2b:6f:9f:a5:40:22:
c3:03:06:6d:62:fe:4b:6b:d4:f7:99:50:e6:95:96:
7a:92:02:da:ed:3a:ef:e6:1a:6a:bf:8b:e2:be:fd:
f4:bc:00:ae:d9:23:4c:32:c1:57:0e:fc:f0:f9:e6:
28:b4:96:80:e9:da:ea:dd:57:1c:ca:bd:96:5d:fd:
b4:c2:a2:25:51:42:49:31:71:82:df:b9:49:8c:0a:
3f:29:4c:34:70:73:8e:e1:e0:26:7d:7d:13:ff:a0:
46:88:7c:80:ba:ac:d4:29:fc:ce:5c:ef:6d:4f:38:
84:bb:1d:f2:c4:83:d4:c1:ba:39:ad:be:7d:10:00:
64:48:5e:2f:dd:80:b3:5a:92:32:0f:e2:84:49:62:
1b:2b:b5:66:e0:0f:88:32:1a:4e:d4:d1:73:bf:56:
f1:9f:5d:a4:7b:66:3c:f3:56:3f:62:34:45:94:c7:
aa:b2:2d:37:90:f6:f9:dc:04:51:de:14:41:63:11:
73:83:fa:02:2d:1f:99:ed:c0:fa:d9:b5:a1:cc:fa:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:44:AA:2C:9A:74:FC:D8:E5:C0:DA:88:70:CF:C3:70:10:EF:D3
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:92:b4:10:81:43:80:24:fa:fd:dc:35:80:e4:5e:c7:50:0e:
f4:b2:9f:7d:3b:55:78:85:a8:f4:a0:ac:c1:95:5a:74:12:28:
12:f3:48:b8:8a:13:fd:b0:82:6d:7d:2b:64:b5:92:8b:51:9a:
6e:54:9c:5a:b0:72:63:d6:91:51:02:00:4e:cd:da:cc:0f:dd:
ae:2d:06:31:65:3c:e2:36:2d:59:c6:da:dc:0f:9f:37:73:04:
83:57:fa:89:41:cc:62:27:ba:74:cd:28:d4:74:b4:f5:39:83:
f7:72:a8:fe:98:a6:bd:4f:a3:73:e0:03:ea:33:8c:f9:f7:08:
65:2a:6d:7e:b4:ba:02:cf:3b:44:4b:28:1e:aa:de:57:27:fb:
ca:3e:1c:01:9d:7d:b7:1e:f9:dc:67:49:05:40:63:cb:ae:71:
cb:93:c8:94:ca:e8:7b:6c:8e:ad:98:d5:ce:e2:11:17:56:b1:
ea:c1:6e:ac:ed:a4:64:c8:19:73:d0:7c:64:19:19:e4:be:d5:
b3:f2:59:ef:3b:f4:24:b0:4b:6f:cd:e6:94:ef:91:8f:59:4c:
73:51:98:4a:e2:53:5b:f4:7e:e5:cc:84:81:b2:51:39:2a:6b:
ce:ef:e1:c1:bc:dc:24:e7:e4:cb:fe:50:83:72:f4:00:d8:41:
6f:af:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:30:14 2026 by rpki-client