Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: qTrl5AABBfMULXMQPfdTCqPpywkdgbwySyeI1F7iiAM=
Subject key identifier: F7:58:DF:18:9F:F7:53:0A:2B:36:4A:17:D0:68:12:74:E2:77:4F:12
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 01A06D27589B6865577DFD4356BC7B0094BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 03AE
Signing time: Fri 04 Sep 2026 16:01:30 +0000
Manifest this update: Fri 04 Sep 2026 16:01:30 +0000
Manifest next update: Sat 05 Sep 2026 16:01:30 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: +5fggO0kLSxv+u9C3ZDgVcmiDWo4UPULkBbjsMLOwJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:58:9b:68:65:57:7d:fd:43:56:bc:7b:00:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Sep 4 16:01:30 2026 GMT
Not After : Sep 5 16:01:30 2026 GMT
Subject: CN=f758df189ff7530a2b364a17d0681274e2774f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:67:81:16:f3:00:89:d2:5e:50:41:0f:fb:
22:b6:cf:d1:fa:12:25:7f:06:fb:70:e1:27:74:da:
6c:25:f4:40:88:7a:dd:06:e5:50:77:b8:6a:46:73:
ed:94:06:e0:e9:0f:51:95:6e:7d:1d:97:7e:20:be:
d8:10:ee:63:dd:7e:ea:73:ea:12:33:65:80:81:39:
39:7b:b3:82:8b:54:ec:32:e5:f6:ae:cb:f6:36:b3:
21:5f:10:c2:15:5d:f2:91:ec:6b:90:c7:03:9d:87:
39:32:8a:42:61:65:1c:9e:36:3a:fe:9e:95:87:f5:
f1:91:fb:c7:fc:6c:2c:54:ca:b6:75:93:68:54:c5:
ba:88:4a:25:4f:23:ad:cf:14:47:b2:51:0d:b8:fd:
6b:62:19:93:4b:f9:48:00:5c:d8:d4:cb:8a:32:85:
fe:9d:7f:f6:48:78:dd:d8:d0:cd:2d:9f:ba:d7:c4:
45:18:c4:d6:6c:bc:2c:75:0e:a4:f0:8d:6d:a5:72:
6e:41:7a:82:6e:fe:0a:67:e0:c6:f8:c7:b3:8b:cc:
90:47:a1:85:3d:ab:bd:4e:e3:2d:31:5c:40:55:e4:
66:22:34:f3:67:07:cd:9b:34:fa:b1:03:06:e8:9b:
7b:ed:1a:a0:22:d1:e2:c6:3b:9c:89:98:b7:af:f1:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:DF:18:9F:F7:53:0A:2B:36:4A:17:D0:68:12:74:E2:77:4F:12
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:92:2e:a6:85:09:cb:0e:25:04:ea:89:72:d3:b1:dd:f6:e4:
8b:7d:2b:c9:a7:ad:17:88:6a:46:80:42:92:f1:61:01:80:c4:
b9:c4:dc:b7:4b:de:a7:ee:d5:4c:b9:5e:d0:88:33:03:6a:d5:
a2:2c:1a:a2:27:a0:60:59:fd:08:76:20:01:bf:3c:be:39:0f:
a6:54:b2:98:0b:7a:ce:70:79:ae:30:3d:e8:88:52:59:f8:7b:
43:b8:11:70:f0:a5:64:84:19:69:1d:19:ea:1c:3c:1e:7a:e6:
c3:b1:2a:0d:8d:93:0c:ee:54:8c:7b:ac:c0:c6:ce:f4:8e:d9:
d9:44:7b:e2:1b:b2:a4:4d:b2:b0:9b:c1:7d:40:fe:b9:bc:d5:
3a:db:53:34:cf:0b:41:0a:2c:ee:10:4c:42:a0:e5:79:fc:9a:
d3:18:35:04:6a:86:bb:be:dc:38:73:32:33:b0:5b:93:3a:63:
1c:66:b7:72:25:4f:6d:83:3f:63:29:67:81:87:27:b2:da:a5:
4d:44:bc:d0:b0:e9:fe:1f:a4:c7:50:7e:78:8e:2d:39:ac:53:
65:71:3a:1a:cc:86:98:40:6e:17:e5:47:60:f7:6d:ad:72:62:
39:cb:63:26:fd:cd:3b:67:bb:1e:de:ce:d7:ed:5d:c4:60:39:
83:66:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:16 2026 by rpki-client