Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: T9Mgr219AqHCjiQmRGi7jSeX924H7qKn8kkVkxfMLHc=
Subject key identifier: 52:C9:2C:3B:4F:01:3C:34:BA:AA:F4:28:50:5C:ED:0D:45:9A:4C:85
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 01A16834A23C44B66A48B8CB530442105738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 0430
Signing time: Fri 23 Oct 2026 10:00:42 +0000
Manifest this update: Fri 23 Oct 2026 10:00:42 +0000
Manifest next update: Sat 24 Oct 2026 10:00:42 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: SnJGctJIjiuzFZCM3WbTUwMfcy6ZgqfxYJrTG/KiGnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:34:a2:3c:44:b6:6a:48:b8:cb:53:04:42:10:57:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Oct 23 10:00:42 2026 GMT
Not After : Oct 24 10:00:42 2026 GMT
Subject: CN=52c92c3b4f013c34baaaf428505ced0d459a4c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:19:46:1c:d0:63:89:6d:e1:e0:a0:7f:f5:
6d:37:bd:c6:c8:4d:ea:50:9e:3d:89:bc:c4:90:b5:
28:39:82:5a:15:18:4a:fd:d6:74:f4:5a:8f:c9:e9:
18:9b:83:a6:b8:60:37:82:38:17:25:de:ee:66:6b:
55:46:40:f9:b6:60:5a:e1:51:a9:ea:82:9c:cf:52:
8e:9e:db:59:28:ca:8a:28:6a:7e:ea:eb:2d:ae:bd:
f5:99:46:a7:30:65:bb:cc:dd:1a:e3:98:e5:78:1a:
35:82:be:a6:04:14:3c:f1:f4:56:f0:62:6d:32:67:
52:a4:61:73:fd:0c:ff:da:62:6a:da:b6:10:0f:fa:
51:3e:24:89:da:d4:4c:47:74:a3:5b:d7:3e:37:d9:
37:9e:85:35:1b:3f:05:9b:44:04:91:2e:80:de:28:
2d:be:74:03:9c:7b:1b:d3:e2:9b:d7:a0:fd:7b:7b:
ea:3e:51:a4:ea:95:83:a5:4b:b4:ab:ab:a2:90:b7:
16:00:fa:f8:ab:77:16:ee:f9:6c:62:0e:ec:3e:fb:
35:9e:46:98:25:0e:29:04:6e:6c:73:2a:26:7c:6c:
d0:d9:64:ca:e6:7d:a1:07:18:4d:65:4e:c0:ad:5e:
99:04:3d:31:5f:4a:7f:f0:9e:7b:cb:33:ad:7e:b1:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C9:2C:3B:4F:01:3C:34:BA:AA:F4:28:50:5C:ED:0D:45:9A:4C:85
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:72:e9:17:db:a5:86:ab:d2:6a:03:4c:9c:7f:78:8d:70:a7:
6c:fa:5b:42:2d:28:6c:b9:70:9f:52:11:07:25:cf:d4:60:63:
f0:37:bd:ea:cb:e8:4f:be:dc:d4:1c:06:54:c9:2e:66:01:df:
e9:0d:1d:ea:b7:18:64:90:90:55:5b:f9:b7:83:8b:e8:17:c3:
19:91:c1:e3:b6:22:e4:d6:24:a7:52:00:aa:f0:64:b7:21:1b:
13:df:ae:4e:b5:59:0f:9a:70:92:51:5c:8b:b4:00:3e:81:a7:
9c:84:af:7a:8b:79:b9:e9:10:8c:78:54:68:21:e8:cd:f3:67:
98:5f:b1:42:f9:e7:2c:ca:69:73:0c:5c:64:c7:8d:f7:90:2e:
ab:9c:ca:41:92:1b:a2:5c:eb:2a:39:42:ac:52:7b:c1:41:4b:
a3:44:c1:f2:1e:ed:72:e5:90:34:05:f3:49:09:7a:ac:6b:4c:
cc:76:d2:8d:80:85:55:42:8c:06:e1:8b:31:fb:32:fd:37:16:
91:4d:45:a1:15:ef:41:82:67:2f:4d:e3:b1:39:31:d9:98:68:
cb:d4:91:0d:bf:9b:43:80:0f:d3:67:0b:94:e0:42:20:af:d4:
5b:4f:c7:a9:3b:c9:71:37:08:fc:7a:a9:fa:91:b4:5c:84:79:
3f:55:90:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:35:06 2026 by rpki-client