Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: 25dxHTp2hO+mVqqTU5LKHj3pDyNMyVMuAuvQsQccFgg=
Subject key identifier: E2:5C:2A:FD:11:CA:3D:F2:5F:1B:7E:84:DF:C1:B4:F3:21:2F:FD:0D
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 01A15A0B97BA7516E28B286C235B417DFFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 0F72
Signing time: Tue 20 Oct 2026 16:01:11 +0000
Manifest this update: Tue 20 Oct 2026 16:01:11 +0000
Manifest next update: Wed 21 Oct 2026 16:01:11 +0000
Files and hashes: 1: OOTmSDz9ct7BasuGsC3EgT-bcQY.roa (hash: onBcNIZoRGO8OodD7K7EyDioCxf28CvQsMXqlTs+2wo=)
2: UvulvKNPlQ3DW7OFO84K_Dsu4xs.roa (hash: sbA5hsgIPFLxYaMguAK/fWfL4FZLjCI5T2S6fCZgzls=)
3: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: ErwcovE1l3EvM0e/nPcqgRnQ9qooYzG8/ur35/fFPKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:0b:97:ba:75:16:e2:8b:28:6c:23:5b:41:7d:ff:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Oct 20 16:01:11 2026 GMT
Not After : Oct 21 16:01:11 2026 GMT
Subject: CN=e25c2afd11ca3df25f1b7e84dfc1b4f3212ffd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:96:58:94:a4:50:25:f0:3a:26:00:ab:8d:
cb:e1:cf:1a:09:22:d8:4b:2e:03:3c:b1:48:86:19:
0c:6f:f5:0e:73:ad:1a:f7:e2:99:42:94:10:d7:df:
cc:03:39:3f:5b:4b:c2:ae:e8:b3:c5:54:0a:90:b0:
c3:09:55:e9:1b:ea:32:de:fa:81:7a:07:ef:ee:0d:
de:81:fb:bf:23:42:da:14:7b:2b:8a:39:96:a7:5e:
de:b6:e9:88:38:b6:14:90:c4:42:6b:7b:a6:3c:ac:
b0:b5:29:60:a2:31:95:6d:5c:56:88:81:9f:d2:d8:
7c:7b:64:09:00:a3:13:19:57:e1:65:2d:3f:6b:7b:
90:a3:59:31:cd:3d:90:74:ea:a5:6f:f3:27:7f:1a:
71:88:6c:06:0b:e5:47:b9:d5:d5:9f:6b:58:6f:37:
6c:80:68:4b:15:8a:84:72:a4:86:39:6c:38:f2:49:
f7:70:a8:af:c5:b4:e1:75:96:54:19:c0:79:64:db:
6e:be:99:a9:69:95:fd:2e:4a:0a:fc:26:33:91:45:
28:12:ee:21:cc:e6:aa:92:55:7e:c4:57:36:55:37:
d8:8a:6a:4f:63:d5:69:67:fc:66:68:53:81:60:e8:
cc:86:79:47:f1:30:4e:b8:55:0a:8b:c9:e1:0a:c8:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5C:2A:FD:11:CA:3D:F2:5F:1B:7E:84:DF:C1:B4:F3:21:2F:FD:0D
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:19:2e:0e:bf:63:20:57:bf:7b:7a:f0:78:13:da:3d:d8:18:
42:42:35:ab:86:f8:05:3a:54:59:f3:ed:06:59:63:95:09:59:
12:14:32:31:fe:c0:d9:ce:ef:b2:67:d1:ed:b0:55:0e:ea:0f:
04:3d:32:95:32:1d:b7:3f:f0:3a:80:b5:81:71:24:83:9f:a2:
fb:60:2d:b7:c2:31:77:3e:af:60:4a:51:f2:77:f2:96:a5:e5:
0d:f9:57:3d:08:3d:7c:bb:d6:16:de:e3:77:d2:7b:f8:f8:d6:
c1:0f:c1:b9:aa:17:6c:4f:34:3a:d2:b6:4d:d5:f0:12:a3:d0:
dd:c5:dd:c3:86:d4:2f:5b:4f:df:17:88:a1:69:30:3a:27:45:
94:ea:0a:89:8e:34:ab:c0:a1:75:6a:bd:29:c2:fd:53:9b:e9:
28:89:2a:34:82:22:db:fa:3d:4a:3f:b2:1f:59:61:b1:76:6e:
51:d2:49:75:78:c9:89:49:1a:02:c0:44:ad:2f:4e:a0:71:31:
f0:c1:1c:6c:3c:09:19:88:dd:13:82:73:c8:07:c4:b7:96:f0:
75:78:99:f4:25:ab:f3:cd:6c:a0:5d:48:dd:c9:15:c9:7f:b4:
ba:79:4b:e5:59:d8:37:63:f8:0a:3f:15:0f:c2:4c:80:f3:21:
bb:69:36:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFaC5e6dRbiiyhsI1tBff+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGEyOWM2MTM4ZTJkOTNkNTRhMzYzMjhiOTRjYjFmOGEz
ODJhNmIwHhcNMjYxMDIwMTYwMTExWhcNMjYxMDIxMTYwMTExWjAzMTEwLwYDVQQD
EyhlMjVjMmFmZDExY2EzZGYyNWYxYjdlODRkZmMxYjRmMzIxMmZmZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12SWWJSkUCXwOiYAq43L4c8aCSLY
Sy4DPLFIhhkMb/UOc60a9+KZQpQQ19/MAzk/W0vCruizxVQKkLDDCVXpG+oy3vqB
egfv7g3egfu/I0LaFHsrijmWp17etumIOLYUkMRCa3umPKywtSlgojGVbVxWiIGf
0th8e2QJAKMTGVfhZS0/a3uQo1kxzT2QdOqlb/MnfxpxiGwGC+VHudXVn2tYbzds
gGhLFYqEcqSGOWw48kn3cKivxbThdZZUGcB5ZNtuvpmpaZX9LkoK/CYzkUUoEu4h
zOaqklV+xFc2VTfYimpPY9VpZ/xmaFOBYOjMhnlH8TBOuFUKi8nhCsi20QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJcKv0Ryj3yXxt+hN/BtPMhL/0NMB8GA1UdIwQY
MBaAFK5KKcYTji2T1Uo2MouUyx+KOCprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQt
MTM0MDFkMWYyMmQyLzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQtMTM0MDFkMWYyMmQy
LzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhkuDr9j
IFe/e3rweBPaPdgYQkI1q4b4BTpUWfPtBlljlQlZEhQyMf7A2c7vsmfR7bBVDuoP
BD0ylTIdtz/wOoC1gXEkg5+i+2Att8Ixdz6vYEpR8nfylqXlDflXPQg9fLvWFt7j
d9J7+PjWwQ/BuaoXbE80OtK2TdXwEqPQ3cXdw4bUL1tP3xeIoWkwOidFlOoKiY40
q8ChdWq9KcL9U5vpKIkqNIIi2/o9Sj+yH1lhsXZuUdJJdXjJiUkaAsBErS9OoHEx
8MEcbDwJGYjdE4JzyAfEt5bwdXiZ9CWr881soF1I3ckVyX+0unlL5VnYN2P4Cj8V
D8JMgPMhu2k2xQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 23:33:11 2026 by rpki-client