Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier: /V0nIbPPaNq5Aq/6TCvW2iSi7qVF1KbU5QjGvGP0cWM=
Subject key identifier: EB:C5:6E:48:98:EA:A9:7B:BA:69:6E:D0:79:DE:D7:72:A1:BC:4C:CB
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial: 019D3909EA1921FD52CE3E3B7B17E77714C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number: 07F4
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: 9n2P8fn6Nj8qXUZvphYYjkueZ+LuouDlY3tDSohtfSo=)
2: OmwLJQSTnBEef8YiJyy3vHeNNZ0.roa (hash: nXRJF8GSGVftBJX0NpNorUWjicV35MGzGuSyOIxO7fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ea:19:21:fd:52:ce:3e:3b:7b:17:e7:77:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=ebc56e4898eaa97bba696ed079ded772a1bc4ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:59:88:20:10:f4:7d:c9:43:b5:fa:7d:09:b4:
dc:3d:37:8f:fb:43:6d:0b:b9:81:9e:f6:07:41:df:
da:4e:98:d9:04:47:48:61:49:46:88:97:90:df:e4:
54:15:2c:53:ee:80:48:9d:e3:9c:e6:82:4b:0e:1a:
c5:87:17:46:d6:07:f1:07:e1:51:5d:b2:08:41:ff:
af:a9:47:f7:94:ec:3e:ae:07:bd:9b:fe:37:9e:8f:
87:0b:ee:ac:a8:22:64:3b:f2:46:4a:a0:8c:ce:4d:
c4:28:8b:8d:ca:62:c1:4a:ce:a4:99:85:87:72:be:
5c:f6:30:e5:d8:e9:29:40:60:35:26:4c:ab:05:ea:
b4:6b:7b:a0:4e:2a:2a:f7:f4:33:30:15:d4:7d:ed:
f3:b2:b4:e9:3b:af:d8:64:b6:91:01:0f:43:64:75:
57:d6:a0:9f:eb:cf:a9:9c:07:13:d7:63:f4:8f:bf:
17:95:f8:f6:84:15:00:66:e0:2b:4e:9e:10:7f:dd:
34:15:89:4a:73:9e:ea:82:43:9f:33:af:db:23:49:
ca:59:da:a6:ef:ed:3d:b4:27:bc:81:8f:0c:5f:f2:
e2:6b:6e:75:8f:f1:aa:75:63:e4:45:87:e4:47:a1:
79:f8:95:88:c9:60:38:c5:55:d0:0a:07:94:45:8c:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:6E:48:98:EA:A9:7B:BA:69:6E:D0:79:DE:D7:72:A1:BC:4C:CB
X509v3 Authority Key Identifier:
keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4d:6d:cd:ea:de:c9:08:bb:ca:99:76:24:29:b1:c2:b2:69:
0e:ad:4b:aa:ab:9c:9c:5e:a4:4c:05:0a:3e:57:12:0d:71:a7:
32:7b:85:47:cc:52:8b:8c:8f:21:8e:37:7d:d7:31:29:9e:c7:
d2:7a:72:6b:64:4e:ce:02:04:35:1b:fd:c2:0b:ab:e6:f2:75:
3c:78:c0:1a:30:44:46:62:b4:76:b0:79:ca:1d:0a:7f:e0:54:
06:19:e3:03:95:05:45:d8:2e:64:ff:17:1c:6d:ef:08:85:fa:
09:93:4f:19:42:70:cd:6d:3c:d3:d2:d1:03:19:5c:cf:08:42:
11:26:f1:69:9d:89:c1:5a:64:a8:6c:e4:83:7d:b4:58:8d:ca:
32:43:f7:67:1e:02:a2:a8:de:0a:cb:f7:ed:dc:04:d9:50:d2:
60:de:ab:18:e1:52:91:8c:ca:d2:75:08:57:f2:3b:0c:ac:79:
94:d0:f5:cb:79:81:64:0c:c0:e6:4e:f8:bb:cb:f1:c9:e9:57:
5b:0b:86:78:d0:73:33:9a:51:db:28:4a:1c:96:2c:03:df:1e:
86:e7:ef:db:f1:13:ed:84:dc:c8:2a:d8:a6:11:d7:c1:25:c1:
b2:80:8b:49:bd:73:a6:a2:2a:7e:1f:69:13:89:97:c0:9b:38:
7f:ec:30:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CeoZIf1Szj47exfndxTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZmVlNmMxZjhjYjIyNTAzOTI1YzFlOTI5MmJmZDE4MWNh
OTU5ODQwHhcNMjYwMzI5MTAwMDQ0WhcNMjYwMzMwMTAwMDQ0WjAzMTEwLwYDVQQD
EyhlYmM1NmU0ODk4ZWFhOTdiYmE2OTZlZDA3OWRlZDc3MmExYmM0Y2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VmIIBD0fclDtfp9CbTcPTeP+0Nt
C7mBnvYHQd/aTpjZBEdIYUlGiJeQ3+RUFSxT7oBIneOc5oJLDhrFhxdG1gfxB+FR
XbIIQf+vqUf3lOw+rge9m/43no+HC+6sqCJkO/JGSqCMzk3EKIuNymLBSs6kmYWH
cr5c9jDl2OkpQGA1JkyrBeq0a3ugTioq9/QzMBXUfe3zsrTpO6/YZLaRAQ9DZHVX
1qCf68+pnAcT12P0j78Xlfj2hBUAZuArTp4Qf900FYlKc57qgkOfM6/bI0nKWdqm
7+09tCe8gY8MX/Lia251j/GqdWPkRYfkR6F5+JWIyWA4xVXQCgeURYylzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvFbkiY6ql7umlu0Hne13KhvEzLMB8GA1UdIwQY
MBaAFDj+5sH4yyJQOSXB6Skr/RgcqVmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lNjE5ODUtYjBiMi00ZTc4LWFmYmYt
YjVlNGE2ZGNlMTk0LzEvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lNjE5ODUtYjBiMi00ZTc4LWFmYmYtYjVlNGE2ZGNlMTk0
LzEvT1A3bXdmakxJbEE1SmNIcEtTdjlHQnlwV1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHk1tzere
yQi7ypl2JCmxwrJpDq1LqqucnF6kTAUKPlcSDXGnMnuFR8xSi4yPIY43fdcxKZ7H
0npya2ROzgIENRv9wgur5vJ1PHjAGjBERmK0drB5yh0Kf+BUBhnjA5UFRdguZP8X
HG3vCIX6CZNPGUJwzW0809LRAxlczwhCESbxaZ2JwVpkqGzkg320WI3KMkP3Zx4C
oqjeCsv37dwE2VDSYN6rGOFSkYzK0nUIV/I7DKx5lND1y3mBZAzA5k74u8vxyelX
WwuGeNBzM5pR2yhKHJYsA98ehufv2/ET7YTcyCrYphHXwSXBsoCLSb1zpqIqfh9p
E4mXwJs4f+wwJw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:22 2026 by rpki-client