Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: Ht9As1akfSxRZTjhj5dfQ3kdKhpeqmg/kvMA8ta7084=
Subject key identifier: 40:55:7C:97:11:94:FA:E5:2C:76:E0:38:1C:63:45:74:D8:77:25:AD
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019DB2102A870E86DCB970848D85D6FBC0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 0244
Signing time: Tue 21 Apr 2026 22:01:36 +0000
Manifest this update: Tue 21 Apr 2026 22:01:36 +0000
Manifest next update: Wed 22 Apr 2026 22:01:36 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: 8hpjicwXD1tVQzgLWPAh/YwUu13+54DeDOjNUCv7Q94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:10:2a:87:0e:86:dc:b9:70:84:8d:85:d6:fb:c0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Apr 21 22:01:36 2026 GMT
Not After : Apr 22 22:01:36 2026 GMT
Subject: CN=40557c971194fae52c76e0381c634574d87725ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:44:89:4d:4f:a4:42:2c:2f:77:6b:c9:e2:
b9:02:74:5a:2d:54:c3:32:3c:23:e4:74:6e:12:7e:
a1:d5:62:61:dd:71:4b:f8:19:c3:c6:ce:2e:85:2a:
2b:c6:cd:ef:28:c3:4d:98:79:3a:87:f2:8c:3c:36:
a3:5b:33:55:d8:4d:32:07:bb:6c:06:2a:30:94:2f:
1a:0e:95:c6:b3:dc:bc:b1:00:fc:ff:51:4e:33:b0:
24:22:ba:cf:6b:41:bf:70:0f:63:15:69:b1:c5:16:
55:f3:52:e7:d9:fe:a0:0c:90:83:ab:e4:97:e2:89:
10:1e:a4:32:6f:bd:15:72:3e:8d:b4:5c:21:9d:a2:
47:92:bb:6e:a1:6c:78:45:81:55:e1:85:1f:b4:1d:
65:c4:51:84:4a:ab:a1:20:22:c9:e8:b1:6a:92:fe:
45:6b:f0:94:2e:78:77:40:13:b0:5f:23:56:60:51:
81:33:ed:a5:b2:73:8c:eb:d1:7e:5d:a4:b4:75:fb:
a4:be:32:d6:74:45:24:ac:08:b8:8b:59:a9:ed:1a:
d3:63:74:d7:4d:f2:e2:c5:58:dc:42:6e:ce:a3:6f:
73:4c:8a:39:0a:dd:b8:66:87:dc:af:49:28:ff:0a:
54:c5:02:b2:a5:81:55:0f:91:be:41:32:d2:28:0c:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:7C:97:11:94:FA:E5:2C:76:E0:38:1C:63:45:74:D8:77:25:AD
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:34:27:24:2f:a8:3d:15:67:af:cb:28:ec:72:47:15:1a:8d:
ec:d4:05:d2:8b:1a:af:06:2f:2c:e7:b0:60:bb:00:f0:56:02:
9d:08:0c:d0:67:62:bb:39:54:a9:b1:ae:2f:76:04:a4:33:f9:
f7:50:04:27:1b:77:14:13:53:2b:52:58:f3:00:59:90:a0:c0:
ea:7d:b3:48:07:93:d8:60:14:8f:0d:e1:86:7b:6d:e1:b7:be:
09:0d:1f:ed:f2:8a:2a:45:42:fa:e2:6d:21:36:3a:de:26:e7:
4a:ac:ed:e8:99:4f:f2:58:ad:52:cf:31:b0:0e:55:b3:1e:81:
8e:f9:43:c5:18:1a:8e:39:c0:05:a5:8a:aa:c2:71:e8:34:c3:
5b:4d:cc:4d:52:20:51:56:a4:cb:76:fd:d2:09:6a:18:88:4a:
55:2b:14:48:6e:7e:f8:24:7f:2d:be:bc:04:b5:a5:99:f8:5c:
bf:71:37:24:90:3b:50:aa:ce:d3:52:e8:6c:0f:31:02:dd:ca:
5e:45:6a:69:6b:ab:69:47:a4:9f:5e:41:46:59:8c:7b:b7:bb:
5b:90:e7:68:f6:47:36:08:00:fb:08:02:71:76:98:e1:ac:69:
d0:49:48:91:71:f6:cc:14:59:a9:46:05:5a:05:2f:c1:5c:a9:
a7:36:35:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:36:54 2026 by rpki-client