Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
File: opu5R2dQ7A4mIqUF5RUS729aW7Q.mft (raw, json)
Hash identifier: UcNJiMWliEB2Zig06mCueBR6dzZQf3MBm2Kcu2sHAgo=
Subject key identifier: CC:5A:4D:97:C4:46:CF:88:79:AE:41:A9:C3:B6:9F:C4:BF:D9:C0:6F
Authority key identifier: A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
Certificate issuer: /CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Certificate serial: 01A167C6ED364B3F1BF1481120A38202BFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
Manifest number: 02AC
Signing time: Fri 23 Oct 2026 08:00:52 +0000
Manifest this update: Fri 23 Oct 2026 08:00:52 +0000
Manifest next update: Sat 24 Oct 2026 08:00:52 +0000
Files and hashes: 1: gSw2I7cSynhsa1v5yL1GK2liJV0.roa (hash: OgZIv5antAo192tWCR26SC8ruKYKpzX9vhQDQJpKYWw=)
2: j3tFGt__mjBy6A4laCBtTNakkR0.asa (hash: Ya4LiyF5bRj+tvHg5hNrH2HeLbopOCsjFcZajvf8SKE=)
3: opu5R2dQ7A4mIqUF5RUS729aW7Q.crl (hash: fhsbxOJaamKTaTIb1UQm404n/1kabYPDLZ5SXC4/TyY=)
4: x3mNd6D6usA5k_7l-emYO2TtcmI.roa (hash: kwiTjzAM2+mXC68INamqfljbqxN1Ud0ltCywsiZuaEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:c6:ed:36:4b:3f:1b:f1:48:11:20:a3:82:02:bf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Validity
Not Before: Oct 23 08:00:52 2026 GMT
Not After : Oct 24 08:00:52 2026 GMT
Subject: CN=cc5a4d97c446cf8879ae41a9c3b69fc4bfd9c06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:67:75:5e:34:c1:41:1a:7e:08:74:9c:8b:
09:82:fe:05:31:d1:74:ed:65:1a:c6:77:94:d1:1f:
b8:15:9c:1e:c9:68:96:5e:79:72:6d:52:15:48:2b:
c5:ef:fa:f4:c1:f4:1a:53:61:b6:93:3e:4c:0f:57:
4e:d8:fb:61:cd:05:c0:27:06:12:2b:c2:3e:a5:a9:
39:e5:89:f2:11:40:fa:7e:38:59:42:e0:13:06:bf:
12:02:a4:f0:ab:d9:e5:c1:af:24:f5:c5:e3:86:db:
60:90:6b:21:62:be:f2:90:c9:7c:a3:e0:e1:db:66:
63:ef:57:65:77:ff:c5:ab:b5:51:5a:6d:8d:e7:08:
54:26:49:ef:a6:1f:de:9a:4d:ad:55:f9:b6:08:ed:
b0:2e:dc:66:3d:c1:ca:3e:92:95:bd:cb:26:c1:61:
84:47:f2:6d:e3:23:4a:3a:b4:65:2a:c0:4b:b7:3b:
fa:b8:df:e6:9e:88:dc:82:94:4e:ad:b2:34:4c:73:
79:e8:5f:07:b8:ff:aa:fb:ac:cf:10:a5:37:db:55:
12:a8:bf:0e:84:05:93:f2:3b:58:19:a9:ba:86:7a:
ef:b4:3f:67:b4:65:04:a4:68:40:94:52:ea:68:17:
9d:46:b2:42:01:c7:8a:3b:ce:89:f1:61:4f:73:06:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:4D:97:C4:46:CF:88:79:AE:41:A9:C3:B6:9F:C4:BF:D9:C0:6F
X509v3 Authority Key Identifier:
keyid:A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:73:7c:eb:3d:56:e8:51:79:5a:ca:d4:a2:54:64:f2:d9:66:
29:f7:a9:f7:d0:c5:da:72:d9:f5:97:19:70:9b:2d:4a:ed:88:
5d:3c:d8:67:af:7b:ad:0c:01:86:26:25:9d:4f:f3:dd:e4:a1:
42:29:c7:49:b8:71:dc:d1:47:25:9c:91:88:d5:a3:df:b7:94:
6b:45:aa:8c:0a:9f:0c:06:7d:04:94:5a:62:d7:57:a2:c2:1c:
12:5f:b7:3b:63:c2:5c:d0:26:b7:68:66:55:ea:13:5b:4e:07:
e8:7b:b4:da:3b:48:c5:76:2a:93:9f:1c:54:f2:18:16:9e:09:
ea:e7:bf:f0:47:0e:b2:6b:f7:ad:4b:af:be:39:81:88:cd:34:
49:01:71:40:d2:6a:96:3e:e7:19:e0:b1:b3:ef:43:e1:4f:d8:
09:a0:88:13:82:aa:a4:e4:ad:39:56:01:0c:b7:7e:a6:75:80:
8f:2b:63:91:10:cc:d4:98:6a:b7:c9:ef:0a:6d:e7:c8:06:52:
a6:61:a4:b5:f3:53:76:c5:3e:95:c2:ee:59:0b:e9:ba:39:4a:
1e:71:c5:ae:ee:87:1d:f2:cf:16:f3:08:82:2b:f0:94:85:40:
72:97:99:e1:89:cd:25:cb:cd:3e:b7:c0:b6:db:55:c1:21:58:
39:ce:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 18:37:20 2026 by rpki-client