Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
File: Op8dKBTKebYZFWiagmFLkldaS1s.mft (raw, json)
Hash identifier: xQ8lwm9u0m3GF8pds1bsN2iK/84tNrikf2ZlOYU2Gac=
Subject key identifier: B9:92:24:AE:63:BB:09:99:87:53:AE:A3:3C:88:D6:3D:61:A1:0B:37
Authority key identifier: 3A:9F:1D:28:14:CA:79:B6:19:15:68:9A:82:61:4B:92:57:5A:4B:5B
Certificate issuer: /CN=3a9f1d2814ca79b61915689a82614b92575a4b5b
Certificate serial: 01A058C4AF7A70A32D71AE2C46BF612ACCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
Manifest number: 013A
Signing time: Mon 31 Aug 2026 17:01:20 +0000
Manifest this update: Mon 31 Aug 2026 17:01:20 +0000
Manifest next update: Tue 01 Sep 2026 17:01:20 +0000
Files and hashes: 1: Op8dKBTKebYZFWiagmFLkldaS1s.crl (hash: LLfs8wCnFvOvtSY/9xsXh1FMM0xmp+n7dOIBfT+PGE0=)
2: ZujPeFLEKXZUzVLUC2T-QFZI6OM.roa (hash: EtbDCHEn2THDzHpj6J6jSqVTS+eJbiX7R8y0kc6QTNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:c4:af:7a:70:a3:2d:71:ae:2c:46:bf:61:2a:cc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a9f1d2814ca79b61915689a82614b92575a4b5b
Validity
Not Before: Aug 31 17:01:20 2026 GMT
Not After : Sep 1 17:01:20 2026 GMT
Subject: CN=b99224ae63bb09998753aea33c88d63d61a10b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:74:67:dd:45:8e:7e:bd:26:5d:b3:48:c1:
33:41:c8:e3:01:37:ad:0c:e0:5d:ed:96:29:c6:04:
f4:5a:b8:23:ff:a7:f9:3a:aa:31:38:a1:2f:49:e7:
b3:7d:7d:a8:ac:11:27:d0:48:06:30:e3:3b:d0:51:
10:26:13:c5:ed:3d:e5:2d:01:4f:f9:a3:f5:1e:1b:
5c:bb:0b:08:95:74:39:2e:46:c9:2b:2e:87:49:09:
02:eb:6b:b5:ee:65:34:1a:5a:70:68:9a:43:b0:15:
a2:33:3b:07:55:36:59:08:38:35:30:c2:52:42:c4:
f9:ed:1d:d0:c0:fc:e6:fd:ce:fd:10:33:97:5f:2d:
36:61:ba:ed:79:a8:5e:60:24:f0:9c:51:30:cd:02:
b3:d4:ef:9b:39:be:9e:a6:7c:c4:95:e1:71:58:46:
0f:cc:a0:a5:62:77:53:4d:f3:10:8e:32:c6:98:41:
98:60:50:e4:67:67:d9:ec:8e:89:bd:9c:5f:76:af:
22:d4:ad:de:39:1e:5a:cd:b0:cc:f9:50:60:d5:f2:
c6:5f:84:a2:1a:f3:89:cb:08:9d:5e:2d:d3:67:7c:
27:61:54:af:5a:b8:39:66:4a:e8:6a:e8:d2:7d:3d:
86:d2:fc:d6:94:f6:bb:41:ad:d2:72:3d:65:63:c1:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:92:24:AE:63:BB:09:99:87:53:AE:A3:3C:88:D6:3D:61:A1:0B:37
X509v3 Authority Key Identifier:
keyid:3A:9F:1D:28:14:CA:79:B6:19:15:68:9A:82:61:4B:92:57:5A:4B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:05:cc:b8:45:29:6c:4a:39:80:b8:36:b2:db:82:81:3c:21:
0c:6e:34:d1:4b:79:83:36:88:4e:b5:85:af:93:9b:a1:3d:27:
db:d2:3b:93:c8:13:e4:39:e0:8f:8b:c9:65:20:da:2d:ea:72:
ab:06:c2:2d:6b:1f:81:fa:cf:02:21:ce:00:b5:a9:61:c2:9e:
e9:9e:77:07:51:6c:e7:8f:38:7a:65:0b:51:39:1e:7b:dc:84:
c8:57:0d:17:a3:4c:af:1b:f0:ca:08:eb:ab:d0:96:6d:f3:ce:
c7:00:d0:1f:44:33:3e:c3:9c:8a:54:fc:2f:68:66:c4:0e:63:
48:e4:3b:e5:3c:0a:2b:cd:20:0e:a7:b2:c2:b1:a0:59:9d:06:
5c:c5:9c:05:c6:ab:88:71:74:d7:f4:fb:eb:47:e8:56:be:57:
e0:b7:69:3e:49:3f:58:d6:4c:67:d5:fc:e6:c0:5b:c5:21:25:
fd:d8:21:67:cc:49:f7:c9:39:fe:70:4b:9f:de:49:20:c0:dc:
ab:61:87:92:32:3f:b7:e8:6d:91:74:cb:b8:c2:2b:f1:98:4f:
5c:bb:81:45:cb:90:e8:dd:fb:54:28:25:73:8e:9e:ca:47:ec:
a3:07:e4:3e:59:67:87:ea:47:67:aa:84:02:5f:a6:7c:b5:52:
b4:e0:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:32 2026 by rpki-client