Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
File: opu5R2dQ7A4mIqUF5RUS729aW7Q.mft (raw, json)
Hash identifier: c8s4BZ2vr5RY78gLKQLZc/+kKufICwhLH0H0LzB5Zks=
Subject key identifier: FB:A0:FC:19:D3:38:C6:7E:2A:F6:D6:A8:55:10:E7:85:EE:32:78:5D
Authority key identifier: A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
Certificate issuer: /CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Certificate serial: 019DA265D591E23AFE0D6B43CA09C7A2A34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
Manifest number: B8
Signing time: Sat 18 Apr 2026 21:01:15 +0000
Manifest this update: Sat 18 Apr 2026 21:01:15 +0000
Manifest next update: Sun 19 Apr 2026 21:01:15 +0000
Files and hashes: 1: gSw2I7cSynhsa1v5yL1GK2liJV0.roa (hash: OgZIv5antAo192tWCR26SC8ruKYKpzX9vhQDQJpKYWw=)
2: j3tFGt__mjBy6A4laCBtTNakkR0.asa (hash: Ya4LiyF5bRj+tvHg5hNrH2HeLbopOCsjFcZajvf8SKE=)
3: opu5R2dQ7A4mIqUF5RUS729aW7Q.crl (hash: /QWbMxwDzujl7i82RxAe6NcMZobp9veU1NgHYJ4Ut6k=)
4: x3mNd6D6usA5k_7l-emYO2TtcmI.roa (hash: kwiTjzAM2+mXC68INamqfljbqxN1Ud0ltCywsiZuaEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:65:d5:91:e2:3a:fe:0d:6b:43:ca:09:c7:a2:a3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Validity
Not Before: Apr 18 21:01:15 2026 GMT
Not After : Apr 19 21:01:15 2026 GMT
Subject: CN=fba0fc19d338c67e2af6d6a85510e785ee32785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:f8:b1:d4:89:83:99:07:a6:96:c6:4f:0d:
b8:f2:fd:f2:2e:e9:96:85:07:d3:e0:26:88:9a:cc:
02:b4:35:64:3f:25:0a:30:32:58:35:1e:11:1a:b6:
c7:53:46:26:0e:1e:27:4d:1d:8d:ef:b9:70:f7:57:
9d:93:9e:a5:2e:5f:18:db:6c:b2:bf:06:07:f8:76:
40:c0:7f:5e:60:df:b6:b7:c4:ea:7c:c8:bf:16:6c:
61:50:c8:a2:8f:74:79:c1:21:ba:6f:4a:e8:b0:54:
9f:f9:84:e7:cc:24:e0:26:9a:12:08:78:b6:a9:dd:
85:24:6a:e4:f5:f3:1e:4c:d8:4c:bd:9a:3a:9f:e9:
02:69:bb:11:69:1b:4a:d6:13:a7:0f:b1:f5:79:8e:
31:83:49:82:5c:5d:2d:90:4c:05:74:be:6b:0b:0b:
15:9a:3b:a5:72:ea:61:2a:ea:00:af:ec:b9:3d:b3:
87:0a:ba:db:b8:37:da:8a:83:04:7b:78:c1:4b:e4:
24:32:61:0e:86:18:78:6e:5c:93:92:c9:2b:d9:3e:
f5:16:bf:80:d3:b0:88:d1:0b:1e:e2:30:00:da:9c:
09:b4:9d:a9:c5:62:2f:c9:10:15:d3:17:c9:89:5f:
e3:8e:0b:92:36:14:95:03:09:65:4c:20:e2:4e:2c:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A0:FC:19:D3:38:C6:7E:2A:F6:D6:A8:55:10:E7:85:EE:32:78:5D
X509v3 Authority Key Identifier:
keyid:A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e4:35:dd:f0:e0:49:e9:0a:e0:c3:87:3f:b1:1a:6b:c5:60:
a5:4b:27:85:c6:9d:8c:fb:b3:2f:58:5e:d5:28:06:62:ae:fd:
71:fb:23:f8:de:76:8e:ff:75:34:d8:cd:79:71:dc:ed:bc:d2:
99:fc:11:79:6b:a5:03:68:dc:90:e7:b2:69:44:d4:3c:b0:70:
ca:ad:cf:98:58:94:cb:fd:62:e4:48:b8:40:b5:33:69:fb:56:
1c:f5:c7:87:95:f9:88:e9:39:f1:5d:a9:56:a9:92:bc:74:a1:
75:45:fd:e8:8b:ef:05:a1:8d:c7:53:6c:bd:eb:ab:21:26:cf:
68:7b:69:57:36:66:0a:12:d6:4f:51:ac:43:3e:c1:92:e9:69:
59:cb:41:5c:52:9f:9e:6c:06:d0:db:23:ff:40:4c:81:b7:bd:
37:a9:a9:79:73:27:ed:99:30:83:3f:0e:9d:6b:7c:9e:7e:52:
be:6f:35:56:6d:01:45:f9:fd:78:95:97:bc:06:20:2d:c3:38:
7c:29:c4:b0:4f:51:e7:30:3f:d9:fc:c4:e6:54:33:60:78:34:
8d:98:ea:f2:3c:5e:a4:41:24:f5:86:81:8d:b9:b4:77:c4:0b:
63:38:98:c8:2c:31:29:a5:a8:19:aa:56:8c:d8:12:cb:74:3e:
34:ac:bb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:56:28 2026 by rpki-client