Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: qCKF86Kavaq9JfB9umiCRtUV0ZMQ4XIIEgC9+12zHsU=
Subject key identifier: 77:FA:E4:EA:77:48:6D:DA:AC:BC:A6:0F:B1:3A:3C:A4:98:C4:F9:91
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019E9BBBA9753A8F812560953DDAC15D2A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 02BD
Signing time: Sat 06 Jun 2026 07:00:27 +0000
Manifest this update: Sat 06 Jun 2026 07:00:27 +0000
Manifest next update: Sun 07 Jun 2026 07:00:27 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: Sdzqk/GqC8tF/17ugaruIAiXYOaFB0J4WONmzXU+Hl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:bb:a9:75:3a:8f:81:25:60:95:3d:da:c1:5d:2a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Jun 6 07:00:27 2026 GMT
Not After : Jun 7 07:00:27 2026 GMT
Subject: CN=77fae4ea77486ddaacbca60fb13a3ca498c4f991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ef:30:80:37:fe:04:83:3a:b2:69:f3:4f:72:
9e:31:e0:07:d0:8d:41:35:88:0e:d8:6e:2b:12:39:
a9:18:05:c7:03:9e:43:51:3a:66:24:0b:19:82:57:
22:de:c0:bd:59:1f:2c:08:d6:e4:28:7a:f4:d6:ba:
da:09:8f:7c:f1:d4:0d:87:c9:8d:25:1e:3c:38:21:
f2:41:2a:b1:0a:77:b8:38:e2:54:27:9a:f7:47:1e:
c8:10:7d:cd:7d:de:3e:3b:fa:54:20:16:c8:9b:30:
14:70:b0:ea:01:69:bf:0c:8e:a1:9c:a9:b9:0c:8a:
26:b0:03:12:cc:09:77:d9:7f:b9:f4:ac:1d:97:ad:
e0:ea:c8:64:47:03:3b:a9:3f:03:51:a2:fe:67:2f:
41:02:07:85:37:82:00:10:2f:f6:49:65:b0:5a:66:
99:19:a0:d1:6b:cd:b9:a5:e1:2f:82:17:f8:92:1e:
0b:12:74:13:30:14:2c:50:d2:01:ce:21:f3:dd:bd:
48:8b:04:3c:4a:a9:b7:ff:b6:72:98:d2:cd:fd:c9:
b8:c9:03:d5:c3:a4:92:1e:d2:9d:ca:2a:d9:e3:31:
de:79:0d:20:b2:b0:6f:ae:37:7d:23:a0:9e:87:14:
5a:ba:e5:3d:6e:09:3f:ff:eb:8d:40:bf:62:9f:1a:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FA:E4:EA:77:48:6D:DA:AC:BC:A6:0F:B1:3A:3C:A4:98:C4:F9:91
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cd:9e:1b:be:91:45:38:a3:d1:31:ce:ed:d5:22:58:dc:60:
00:36:c7:a7:87:23:e8:e6:91:8a:6e:71:22:3f:75:1b:28:71:
53:9d:2a:5f:05:46:91:33:96:c1:78:cb:0b:ca:a1:c1:30:8d:
3a:2c:56:50:b7:9b:f4:8b:36:38:0d:5a:54:9b:74:e5:b2:86:
23:27:51:3b:34:47:8f:82:4f:dd:b2:a4:b3:13:1f:c6:3c:25:
29:70:be:bd:61:76:24:9a:25:af:f0:85:27:c5:d7:d2:1f:df:
67:89:8f:c2:3c:9e:16:2f:76:ed:e6:a9:32:49:d3:d5:22:7d:
31:1a:09:c5:87:59:f8:2c:7f:a1:7a:4d:fa:1c:1b:09:78:b8:
d2:3e:52:73:4d:1b:de:ce:ab:ed:d4:18:1c:87:82:4a:81:d2:
87:65:96:67:ec:b1:3f:32:ad:77:bf:b1:d4:bf:a4:ac:1b:83:
09:23:cf:af:86:2a:a1:a9:96:fb:6b:8a:8f:6a:47:c2:fa:bc:
f0:34:e0:1b:2a:0c:b6:08:7c:5e:a3:8d:43:0c:b0:c0:ab:cc:
c2:c4:a7:1d:0c:2c:18:aa:65:d9:1f:43:9a:40:3a:2f:6b:52:
18:b3:be:f0:d0:38:5b:69:d6:6c:35:b8:a3:f2:3d:d8:7b:81:
e8:0d:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:59 2026 by rpki-client