Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: 1Q8J1cYMslS/LqNO9aa9e0tbiVrSpIQ8AuBOCVP0d9k=
Subject key identifier: 4E:04:1E:40:C0:0D:3C:85:E9:C3:8B:49:8C:B3:2E:F5:06:26:CA:A6
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019CCA520F7E727E41D183C3FEC803700E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 01CC
Signing time: Sat 07 Mar 2026 22:01:41 +0000
Manifest this update: Sat 07 Mar 2026 22:01:41 +0000
Manifest next update: Sun 08 Mar 2026 22:01:41 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: bIiN2hRuAbm1moeT0Rjcx8IRPwqXhA9sOfV45MBRqEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:52:0f:7e:72:7e:41:d1:83:c3:fe:c8:03:70:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Mar 7 22:01:41 2026 GMT
Not After : Mar 8 22:01:41 2026 GMT
Subject: CN=4e041e40c00d3c85e9c38b498cb32ef50626caa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:50:ae:29:32:cc:b9:0b:bb:30:bf:8c:cc:
3d:ac:10:3f:b7:9e:5e:33:15:6c:e2:2d:3b:ee:12:
75:de:c8:92:da:f6:99:24:a9:e7:49:25:96:c9:74:
10:e2:0c:55:a6:b9:06:0b:d7:90:a0:98:ea:c3:16:
65:dd:d6:09:93:5d:af:a7:93:d5:80:fb:9c:c4:75:
7a:fd:c9:f7:5c:d7:a3:1c:5d:71:1c:ca:58:64:1e:
b1:ef:07:18:89:c6:7a:28:23:03:c0:2e:05:c9:82:
34:40:f5:00:47:3a:51:1a:98:0b:75:87:6a:c2:ae:
65:4e:52:77:21:2e:0e:3f:e9:9b:85:a0:34:bb:6e:
b2:1d:08:78:39:b3:7b:eb:0e:47:57:ec:07:ae:9e:
e3:ef:84:e5:ce:b0:0d:c3:5c:e6:e4:a9:7c:af:9b:
0f:c3:c2:06:d1:11:50:b6:c9:10:69:26:76:b2:db:
e5:1a:2f:47:30:ff:a5:92:ec:97:97:aa:15:e2:6d:
f3:70:aa:2b:92:0a:47:3b:9c:1f:a9:e3:58:14:d1:
98:42:2f:e3:5e:48:a0:ef:df:40:87:ff:42:42:68:
19:c3:4b:be:1f:d8:bf:82:e5:04:f8:14:2b:3a:5e:
b0:46:7c:9a:1b:25:27:59:06:45:f5:12:a5:bb:bd:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:04:1E:40:C0:0D:3C:85:E9:C3:8B:49:8C:B3:2E:F5:06:26:CA:A6
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:af:c3:6a:c8:ef:a8:29:10:d1:a2:c8:5b:45:38:fd:40:2b:
ff:38:68:f0:e3:9e:2e:21:31:fe:90:d8:55:a0:cf:b4:f7:9c:
ea:2b:b1:70:da:c7:87:44:dd:cf:d8:f5:2c:09:53:4e:03:3d:
4f:e2:d8:cb:20:6c:8b:d4:0e:f5:da:f1:b0:4c:e4:3c:5a:e9:
ce:ce:ea:5e:33:81:87:1c:0e:50:de:46:86:4f:cc:02:47:25:
16:10:dc:1e:83:66:f8:2c:86:23:a6:1b:1d:89:bc:8e:d1:42:
8e:0f:97:1f:f3:12:d2:ef:03:bb:91:a3:31:f5:c8:9e:a5:07:
da:cb:4b:04:8c:52:10:34:d6:0e:5d:02:4b:6e:42:0a:d1:91:
ef:c4:b9:c2:6b:35:a4:f8:dd:a0:97:1b:a7:54:f5:25:9f:68:
4c:b2:9f:47:de:eb:59:16:34:66:d1:68:c3:81:20:d9:9f:62:
f0:36:57:89:ee:cf:ce:1d:55:ba:31:9b:11:ac:11:ce:3d:01:
75:ca:92:37:30:7c:8e:df:92:ff:5b:53:1a:d5:fe:45:6b:7d:
65:d7:89:c4:24:23:2d:af:c1:fe:73:0a:32:36:d7:f6:16:e5:
82:cd:7c:35:ec:e6:19:ee:db:04:32:12:f1:a8:66:d7:58:2a:
0c:69:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:26:44 2026 by rpki-client