Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: aa1QhNaNzGxZUiFvlTW2bcpFMJqlJbCHYi5znEXOEPk=
Subject key identifier: 19:8C:38:CC:EE:B0:60:57:42:58:52:C4:8A:75:F4:C8:79:80:31:6B
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019F8568D4EF7DD03CA5ED0B39CE60C882E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 0336
Signing time: Tue 21 Jul 2026 16:01:07 +0000
Manifest this update: Tue 21 Jul 2026 16:01:07 +0000
Manifest next update: Wed 22 Jul 2026 16:01:07 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: +iLLMxSJv5m2RCZs+MYIR7TZZCNykNzyGgLm3XsotvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:d4:ef:7d:d0:3c:a5:ed:0b:39:ce:60:c8:82:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Jul 21 16:01:07 2026 GMT
Not After : Jul 22 16:01:07 2026 GMT
Subject: CN=198c38cceeb06057425852c48a75f4c87980316b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:a7:4b:1d:06:16:e8:17:d7:2b:66:66:27:
c3:16:96:eb:8a:ef:b7:d8:6b:e7:ac:aa:2c:38:e6:
f2:9e:d1:1c:c4:8b:ed:65:3a:d5:9a:71:a3:c4:ba:
f6:6f:fd:d3:06:c4:53:74:3f:9b:56:3a:a4:c7:93:
64:5d:54:4f:37:be:55:4d:e8:f0:8a:71:a7:84:4f:
ea:61:f8:bc:95:59:e7:1d:05:8a:1c:06:2a:14:01:
89:a4:d3:74:fa:c1:5e:e0:32:26:a3:8c:3f:95:db:
09:72:7b:1f:22:a1:21:5d:79:73:22:4b:2d:d3:03:
83:e5:eb:ca:a2:19:c0:74:45:c2:b5:20:b0:9c:4d:
91:a9:d4:9f:f4:b2:73:81:5a:53:36:91:1e:50:c8:
bb:21:86:9c:16:55:25:e1:29:e3:17:13:c8:3f:42:
b4:51:1d:54:00:4c:b5:54:ce:ae:92:4a:3c:99:de:
ff:b8:6a:a2:ce:83:ea:38:b1:5c:b3:5d:ed:ba:cd:
73:6b:52:19:4e:11:bc:b4:d1:18:66:c6:7b:9f:55:
40:ad:a2:6a:86:2f:4a:ad:5f:63:05:a0:58:2d:5d:
98:1b:89:6d:df:87:eb:4e:51:ef:ee:7f:b5:68:9b:
5f:cb:8e:f8:c2:77:e0:8d:59:4d:9e:4a:2c:ee:19:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:38:CC:EE:B0:60:57:42:58:52:C4:8A:75:F4:C8:79:80:31:6B
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4c:2e:bc:b5:fe:e1:6a:1e:f1:14:5c:24:9f:7f:c7:d5:cd:
ff:a4:4e:9d:58:2f:91:ac:20:4c:82:71:9e:12:17:0a:55:78:
c1:35:80:bc:89:2d:97:fd:38:07:99:37:6f:da:4d:63:84:4c:
af:fd:62:2a:cd:14:ef:ad:50:f3:e5:bf:f0:8b:91:45:81:eb:
21:70:37:a0:24:ef:9a:88:fe:59:7d:81:f1:ce:5d:03:62:0a:
71:b6:00:8f:17:33:45:01:a1:de:58:6a:59:5b:6b:c4:3e:29:
6d:9c:20:ea:5e:77:15:13:0d:3a:66:95:5c:44:c2:61:2f:c7:
00:e1:f0:7b:85:01:9e:34:13:1c:71:02:fe:21:65:80:26:78:
41:f5:db:61:a7:ca:cb:c6:20:56:8b:01:04:5a:78:bc:65:8d:
fb:50:c5:d1:c8:e7:a8:68:f5:76:93:8e:e5:62:dc:5b:ff:29:
c6:cc:53:29:98:e9:75:a6:41:70:b5:1f:9a:ce:2d:19:45:97:
35:ee:78:55:43:a9:1a:4a:06:59:e4:7e:df:c2:8c:e4:5d:c9:
57:3c:08:8d:2c:a0:d1:98:39:5e:e2:f8:92:b1:03:68:40:37:
36:ea:07:8a:67:e1:f9:b6:54:b1:de:bb:f1:e7:8b:f7:01:83:
12:ab:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:15 2026 by rpki-client