Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
File: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft (raw, json)
Hash identifier: MSgRx1PP8uyAa/QisqbLNSTM26S1C3BfvvYiJ1VfvTI=
Subject key identifier: 3E:F3:71:66:17:78:1F:8F:95:4F:E0:FA:38:2E:92:A7:FE:D8:A7:B8
Authority key identifier: A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
Certificate issuer: /CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Certificate serial: 019D382E7320B1638CC9B889FA9B74A9F025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
Manifest number: 046A
Signing time: Sun 29 Mar 2026 06:01:01 +0000
Manifest this update: Sun 29 Mar 2026 06:01:01 +0000
Manifest next update: Mon 30 Mar 2026 06:01:01 +0000
Files and hashes: 1: SNrZr0YQQkVPerWsrOP1UeJuDXc.roa (hash: hBAiAyDFyC3xgXvGIjNpbEwJ1pYU7Ki/GLElCyuFn4c=)
2: opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl (hash: KvntwOS2fUOOtbrXLW2S0HP4y8o92bhpwGmtWASUNd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:73:20:b1:63:8c:c9:b8:89:fa:9b:74:a9:f0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2977c1e4e7013992d4c4d0f33ccd772fac8d93b
Validity
Not Before: Mar 29 06:01:01 2026 GMT
Not After : Mar 30 06:01:01 2026 GMT
Subject: CN=3ef3716617781f8f954fe0fa382e92a7fed8a7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:2e:c8:05:4a:c9:ef:79:e0:9b:a7:6a:6e:
fc:dc:97:3a:ea:eb:50:71:ca:d8:d8:29:7e:43:f6:
af:50:ad:2e:ab:08:dd:a2:a6:af:e2:fa:77:78:25:
08:cc:5c:31:ab:1b:5b:d0:19:fc:82:55:66:fe:fc:
68:4a:f0:a0:1a:db:5a:68:07:7c:a7:f8:b5:93:18:
3a:3b:18:78:e7:d8:76:c6:67:1e:5a:80:51:1b:c7:
f8:84:18:31:da:fc:e7:65:e9:c9:e4:17:59:50:ea:
6f:b3:bb:c1:0d:96:5c:36:71:b4:0f:72:74:22:31:
93:79:93:51:7a:86:f7:a6:db:20:27:11:09:8e:2c:
d5:28:dc:7d:4c:90:7d:64:56:ef:af:a4:9d:03:50:
27:6c:e3:04:96:f5:c6:9c:59:ca:03:19:53:0a:0f:
8b:55:3c:42:29:4a:5f:0b:c0:da:e3:f2:43:e6:72:
36:7b:98:f8:95:21:bf:32:4a:58:34:1e:07:69:70:
4d:7e:76:52:6c:2e:4d:f0:a6:db:31:73:3a:83:04:
67:a3:93:c5:5a:14:64:20:13:87:e3:3e:4f:3b:1a:
3d:5c:c7:31:2c:1f:fa:a2:35:77:f2:ad:92:81:b8:
c4:ea:c1:b3:2e:39:1a:c3:6e:55:35:56:6b:7c:b9:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:71:66:17:78:1F:8F:95:4F:E0:FA:38:2E:92:A7:FE:D8:A7:B8
X509v3 Authority Key Identifier:
keyid:A2:97:7C:1E:4E:70:13:99:2D:4C:4D:0F:33:CC:D7:72:FA:C8:D9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d072-32dd-432d-9ea2-263e466e4ad6/1/opd8Hk5wE5ktTE0PM8zXcvrI2Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5e:50:e7:e8:fc:c1:a8:ff:fe:0f:a1:32:98:a2:e9:89:b4:
ab:ec:29:ad:0c:01:21:a3:ef:b4:46:c2:40:65:08:28:07:cb:
92:fc:55:0f:3d:b9:c8:30:e8:55:bf:42:4a:a9:f5:81:cb:52:
b0:36:2e:2f:b3:66:f3:01:6b:07:69:a1:12:2a:f4:1d:c6:df:
20:17:09:e3:a7:cf:74:98:8f:99:bd:21:f5:62:7f:dc:89:f5:
95:e0:a8:7d:a1:f9:19:b7:e2:f9:1f:d5:69:b5:f9:44:e0:ed:
ca:0c:64:15:a4:22:bb:83:94:eb:54:e8:82:a6:16:16:ef:be:
1b:f0:01:49:ca:d5:01:1c:25:de:5f:38:8b:39:e5:57:b2:c7:
9d:32:32:78:21:7f:68:f0:1d:6f:0c:d3:33:0c:5c:f8:ae:a1:
66:b4:92:00:98:7f:47:7d:82:70:a1:fe:03:b7:c6:03:de:19:
8f:8d:16:d1:52:6a:eb:61:f8:e1:7c:14:90:b0:15:96:8a:ed:
11:2d:bd:11:40:f4:66:5d:26:07:18:b2:33:cc:de:17:b7:dc:
06:43:50:49:80:e6:60:d7:62:1d:d9:f9:4a:49:bd:44:b8:55:
f7:41:27:8c:f8:22:a0:44:3e:9d:bd:16:b0:84:82:8e:a5:0d:
78:1d:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:33 2026 by rpki-client