Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: Ikrmo7VhUagOaFtYuTDO+SdQ9LrTH+ZC3+TibJkszL0=
Subject key identifier: 20:F2:58:FB:40:06:87:37:AC:ED:AB:6D:A7:E3:DD:CC:7C:00:48:C1
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 01A17BBB8E576DE8B725714F2453BC174016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 05:00:51 +0000
Manifest this update: Tue 27 Oct 2026 05:00:51 +0000
Manifest next update: Wed 28 Oct 2026 05:00:51 +0000
Files and hashes: 1: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: D3AxutcfQyWYVO5oYV2e8uZDOZ6b7YrsGiV4GOVM6qc=)
2: pm79H7mwduu7mnhDJctsn-uYWPE.roa (hash: ED5J8d3NpU/HwXaPFnumSsfSWb72ZAcfll3lZasNaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:8e:57:6d:e8:b7:25:71:4f:24:53:bc:17:40:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Oct 27 05:00:51 2026 GMT
Not After : Oct 28 05:00:51 2026 GMT
Subject: CN=20f258fb40068737acedab6da7e3ddcc7c0048c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:10:e9:ee:fc:f2:95:be:57:c7:40:94:0c:
78:e8:db:a9:d8:08:aa:e7:bf:f5:0c:3c:44:4d:6e:
a0:ec:76:4f:69:bc:62:5c:bb:4a:d2:57:98:ae:51:
6d:2b:46:78:7c:08:b7:7f:57:04:89:55:92:f5:3f:
6d:b5:12:29:9e:f1:72:ab:0e:b3:40:0a:6f:60:df:
f9:35:37:fe:6b:05:43:1c:62:d3:64:77:9e:0b:84:
34:4d:d5:a8:33:93:70:3f:65:eb:17:3f:5c:5a:53:
08:1f:0e:76:24:0c:2f:99:1e:c8:70:9e:9e:bd:de:
1b:89:07:7f:d0:bb:50:ed:e0:0f:02:4c:0c:4d:34:
23:b8:a3:1e:a7:5f:10:3c:75:56:9f:d6:b9:84:f2:
9f:bc:d3:b7:11:a4:5a:ed:cf:61:23:05:e3:0a:25:
a9:e9:de:19:91:ee:93:b4:4f:a7:99:97:c7:75:95:
28:a8:3f:c8:6d:84:01:b2:5d:09:62:4e:24:a6:44:
b7:db:60:51:0e:5d:dd:24:a3:a0:4b:2c:6f:f4:46:
2f:53:2a:71:97:11:ac:03:f2:f7:6f:ef:65:79:98:
86:7c:29:bc:3f:de:97:4f:51:82:68:aa:31:de:dd:
75:a0:2e:f7:dd:04:9b:37:01:ca:ce:1c:db:ee:d1:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:58:FB:40:06:87:37:AC:ED:AB:6D:A7:E3:DD:CC:7C:00:48:C1
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1d:87:c9:bf:48:8e:3d:5f:98:25:0e:32:78:b4:fc:56:e3:
7f:e8:f7:0b:f6:6d:d5:3e:6e:6b:8f:37:bd:99:59:08:0a:d6:
86:d8:bf:ea:0e:0f:60:67:e0:78:57:8c:d2:0b:5c:61:22:e2:
dd:09:a8:cb:e0:e5:27:f3:6f:cd:2b:fc:62:fb:fd:ac:bc:fc:
b6:73:44:14:0c:93:32:5e:09:85:51:e3:ef:3d:dc:00:fa:75:
39:1e:72:cd:7c:bb:f6:e6:d1:c5:6e:de:29:da:98:d9:18:a8:
d2:96:58:84:d5:dc:fa:42:b9:69:2e:51:73:16:67:45:20:76:
4f:fc:ca:a8:94:c8:61:13:23:34:0d:a3:ba:b4:13:21:f2:d0:
49:1c:3a:ba:00:aa:dd:11:ec:54:27:dd:6d:d8:d6:87:50:bb:
f7:ce:86:a7:cb:88:aa:01:fb:c4:9b:e8:e1:4e:01:0f:a5:d5:
de:b6:ab:83:ab:0f:e0:ce:88:54:da:fb:a3:0a:5a:cd:98:eb:
b6:d5:b4:1b:f4:93:30:45:9c:6b:7e:25:85:64:01:a9:76:36:
b6:f6:93:da:4d:ec:91:44:aa:70:53:6a:c9:fd:31:2c:99:44:
95:21:87:8b:f8:74:1e:bf:1d:04:51:6e:a3:89:1f:dc:bc:c6:
4d:32:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:19:07 2026 by rpki-client