Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
File: OpNtLymObP1WYEVz0e-eDoKZtSk.mft (raw, json)
Hash identifier: SEXDCZL2M6jZfedpq7jnyGIYkXc8XeQsty3JrseC/58=
Subject key identifier: 05:98:56:00:F9:6B:78:6E:D6:1D:E3:22:01:63:14:A1:65:50:01:F7
Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Certificate issuer: /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Certificate serial: 01A15778F7FFAA2664EAA81C06993EF3BFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
Manifest number: 1376
Signing time: Tue 20 Oct 2026 04:01:47 +0000
Manifest this update: Tue 20 Oct 2026 04:01:47 +0000
Manifest next update: Wed 21 Oct 2026 04:01:47 +0000
Files and hashes: 1: OpNtLymObP1WYEVz0e-eDoKZtSk.crl (hash: sfz4Fvs4KObFmTT9WocY9GYv6A4T4uF5fgwJ7CMXEAo=)
2: e4qPjYtVZNjFgNgoQb6aifisJTs.roa (hash: 1M+oNLSG3cS6v1C1UyKbtqc0oXSkYgVWMgvB/761VUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:78:f7:ff:aa:26:64:ea:a8:1c:06:99:3e:f3:bf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Validity
Not Before: Oct 20 04:01:47 2026 GMT
Not After : Oct 21 04:01:47 2026 GMT
Subject: CN=05985600f96b786ed61de322016314a1655001f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:2a:1b:2c:57:dd:ba:45:f6:56:ab:ec:51:
62:cf:9a:69:ca:36:73:bf:89:37:07:a6:41:b9:cb:
07:6d:09:59:e8:5c:b0:9d:bf:23:e6:24:f3:1b:c2:
25:1e:c0:8c:00:ca:55:ef:7b:e8:18:19:2c:6c:62:
83:ec:35:6a:cc:ed:2d:cc:ff:0a:b6:ac:25:24:d5:
7c:32:89:53:5b:ba:d1:7c:e1:60:37:4f:3f:8a:7c:
0d:4b:b9:6c:32:05:52:09:50:ce:5f:5f:85:1c:62:
62:3a:4b:68:03:0b:87:26:55:f7:e0:94:59:73:19:
c7:46:89:ed:92:de:35:c2:5d:27:3e:8e:31:61:71:
97:67:f0:ba:aa:73:be:16:60:8a:07:56:20:ba:5d:
39:dd:f9:e8:4e:cc:25:1f:c7:1b:40:e6:45:f2:b8:
57:dc:7b:0f:72:ac:77:b1:02:91:9d:ba:07:05:ac:
91:d8:8f:57:07:b4:0e:7d:9e:68:61:28:6f:b1:64:
d6:8c:2b:0b:09:e4:76:ce:dd:93:c4:f5:3e:fe:2a:
76:f4:39:19:7f:b9:a6:d5:c8:d3:fa:c1:02:5f:e3:
b0:e6:e1:ee:50:2e:17:87:59:9b:cb:4a:0d:39:ee:
53:75:5b:79:56:bd:37:bc:c2:a5:a0:29:e0:34:27:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:98:56:00:F9:6B:78:6E:D6:1D:E3:22:01:63:14:A1:65:50:01:F7
X509v3 Authority Key Identifier:
keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c8:80:1c:de:39:e2:3a:69:00:ff:7d:de:ad:71:6f:2d:d8:
91:15:a8:b2:ec:6c:f8:23:ef:c1:0a:10:8d:1a:ef:23:e2:ee:
e4:b2:54:11:a8:eb:5a:6a:c3:72:04:de:78:5f:ba:44:22:97:
86:fe:b9:51:53:92:50:4b:ea:94:9a:94:ae:44:c4:f4:e6:2b:
36:af:c3:d6:37:03:9e:90:e8:0f:ae:9c:de:0c:9f:ed:eb:a4:
f7:ff:13:76:b9:5e:ac:79:37:5a:3f:d5:33:83:31:0d:e1:78:
44:b1:00:67:ef:0c:19:9c:12:0d:25:e6:6a:93:75:01:9e:f2:
f1:f3:37:99:9d:a4:41:5b:4b:66:16:c3:ba:4a:0d:36:c2:7a:
22:18:e7:41:86:70:f8:c8:2c:a6:c3:55:a1:25:a6:54:9f:09:
fc:c8:31:90:e1:de:4d:84:69:ac:d8:3a:c9:0d:df:55:7f:93:
dc:d2:e6:0b:69:4c:b6:42:ad:2c:83:2d:96:7c:93:c3:2a:2f:
54:b3:6a:ce:6c:22:d2:21:c3:13:fa:d0:0a:c1:56:27:31:60:
ef:71:60:70:b0:d1:0e:dc:1c:de:78:de:54:d8:d5:d3:5c:35:
e7:5a:73:77:e2:44:2a:ba:30:4d:68:4b:d8:6f:8b:eb:6b:81:
c6:12:a0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:42:35 2026 by rpki-client