Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
File: OpNtLymObP1WYEVz0e-eDoKZtSk.mft (raw, json)
Hash identifier: b+NzX8bH9WvgB/Nel188MqAU3UCMgMw5UZOZJk0vBEA=
Subject key identifier: 3F:17:9D:58:F8:B5:57:B9:B2:67:BF:BA:6A:BD:1A:62:B5:3A:4D:2C
Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Certificate issuer: /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Certificate serial: 01A15966AA0BE0A8A73D728FAE666606EB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
Manifest number: 1377
Signing time: Tue 20 Oct 2026 13:01:02 +0000
Manifest this update: Tue 20 Oct 2026 13:01:02 +0000
Manifest next update: Wed 21 Oct 2026 13:01:02 +0000
Files and hashes: 1: OpNtLymObP1WYEVz0e-eDoKZtSk.crl (hash: SgZiMJBFp58dU21E/sxs3wIq5NPki0nYuujOihz+aDc=)
2: e4qPjYtVZNjFgNgoQb6aifisJTs.roa (hash: 1M+oNLSG3cS6v1C1UyKbtqc0oXSkYgVWMgvB/761VUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:66:aa:0b:e0:a8:a7:3d:72:8f:ae:66:66:06:eb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Validity
Not Before: Oct 20 13:01:02 2026 GMT
Not After : Oct 21 13:01:02 2026 GMT
Subject: CN=3f179d58f8b557b9b267bfba6abd1a62b53a4d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:d5:84:74:b7:f2:82:8b:b5:4f:bc:1c:17:
79:0c:36:61:63:b7:22:cb:54:7a:01:0b:06:46:9d:
ca:ad:b6:f6:53:0a:53:d4:ca:1d:20:48:4d:d8:a3:
17:61:1e:2c:c3:df:b9:d8:59:2f:37:09:88:7d:46:
55:78:32:ed:aa:8a:8e:69:2f:f6:45:c1:bb:5f:28:
fb:b5:84:aa:53:d7:5f:54:f6:43:a7:9b:58:3a:d0:
2a:f0:0f:b3:c4:60:3f:30:bc:81:a6:5b:5c:64:32:
7a:45:fc:30:e4:1e:e7:f5:dc:87:0d:80:0e:e4:e8:
43:84:d8:32:f3:99:6b:d0:50:10:41:4c:d5:c2:9e:
3e:ae:52:fa:07:a6:66:7a:4f:a4:58:c3:83:0b:5e:
7a:e8:67:44:93:e0:c5:c1:da:55:98:6b:f6:0e:60:
74:8b:be:d0:06:06:e3:2b:6b:8a:c3:30:62:b8:96:
d7:db:91:cc:a2:52:6b:86:d9:e4:fe:51:32:d6:7a:
05:d4:c1:ef:80:cd:ea:20:ba:89:6c:3b:75:f0:a5:
77:94:b2:cd:bb:21:8c:2c:04:bb:e7:98:5e:c9:94:
fb:9d:e4:f3:4d:e7:3c:b7:14:83:31:79:31:a1:4f:
c9:ff:13:36:6a:3a:f3:4d:82:e9:4b:4e:05:4b:1e:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:17:9D:58:F8:B5:57:B9:B2:67:BF:BA:6A:BD:1A:62:B5:3A:4D:2C
X509v3 Authority Key Identifier:
keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ad:a4:80:47:69:2c:ad:47:c0:67:04:55:0a:d6:1c:9e:5f:
60:f3:78:b8:ef:5f:3b:66:1b:5b:c7:04:e9:3e:dd:ba:39:75:
36:3b:a9:0e:e5:98:ec:aa:c3:aa:85:56:fe:b5:1b:4b:a7:d8:
86:07:3b:eb:3d:f3:88:7d:92:49:9c:3d:1a:85:b3:96:f3:1e:
af:dd:77:bf:68:b8:ff:0c:51:60:40:fd:bf:cb:e5:63:29:f8:
7d:52:d9:92:4a:8d:1c:0e:b4:4a:5c:3c:c9:64:55:ec:55:f7:
63:32:5f:b8:8d:fc:96:db:cd:0a:f9:f7:58:45:75:22:79:83:
1f:6c:74:e4:97:ef:10:c0:77:87:32:1e:14:cf:24:4f:03:c7:
63:b4:3d:26:eb:62:72:df:05:b4:60:fb:e8:ca:cd:36:d4:da:
f5:25:3f:cb:85:09:75:a0:d2:83:41:53:9d:d1:86:ed:f2:1f:
25:cb:4a:9f:61:20:e9:fe:d9:05:fe:74:78:3d:50:62:3e:ce:
0f:44:6a:2b:1a:90:ad:e4:53:93:b8:03:44:54:0d:44:c9:79:
81:81:c7:4b:8e:f9:36:b9:f6:ad:d4:e0:a3:ac:4e:b6:d9:68:
5a:8d:dd:02:4c:93:fd:b3:b4:ea:33:82:2c:a1:d5:1d:30:25:
f3:51:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:43 2026 by rpki-client