Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: e6PxPIKIrRxGot7n1a/gsv2WVgAE0mdaOVy3svszzq4=
Subject key identifier: 42:63:90:21:5F:2E:27:13:E3:7A:70:57:62:4D:80:CC:54:A3:03:0D
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01A0028206EE503A2B6A67AA3E810E0CF41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 1A08
Signing time: Fri 14 Aug 2026 23:01:10 +0000
Manifest this update: Fri 14 Aug 2026 23:01:10 +0000
Manifest next update: Sat 15 Aug 2026 23:01:10 +0000
Files and hashes: 1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=)
2: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (hash: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI=)
3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: 0nDcX5+X+0vLNloDep8InPRMyv2P+REq1+fYaui0eOM=)
5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=)
6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=)
7: kWJsfOPSFq_jhRUPK95fJnFQ6gQ.asa (hash: kjZzNLymA0q763NzFlPQRMaG1f9jPqoiNbS2FEJsFnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:06:ee:50:3a:2b:6a:67:aa:3e:81:0e:0c:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Aug 14 23:01:10 2026 GMT
Not After : Aug 15 23:01:10 2026 GMT
Subject: CN=426390215f2e2713e37a7057624d80cc54a3030d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:35:0b:dd:14:f8:ee:e0:c6:21:c7:04:84:
88:26:6c:aa:c7:0f:99:b5:ff:98:84:cd:63:3d:55:
01:8c:7e:be:01:0a:36:85:b2:5c:e6:a2:71:80:79:
73:e7:a0:10:eb:db:39:3f:d9:f2:7a:3c:57:b8:15:
c4:d0:52:47:e6:5c:cb:4e:e0:4b:0f:67:75:71:85:
c3:28:61:31:8f:64:79:95:1f:95:46:5b:1f:25:d0:
f2:4d:c0:54:cc:f0:b7:05:2b:36:02:4f:15:cf:a6:
1a:dc:aa:a3:af:c2:9f:9e:b3:ff:a4:3b:d2:56:a7:
4d:58:a6:36:9d:04:21:6a:37:9d:fd:fe:db:01:9b:
cb:92:b9:24:38:aa:14:7d:4f:02:6b:ab:ec:e0:1e:
a1:89:6a:29:8e:cd:d4:8a:52:35:51:f2:cc:ec:15:
bf:0c:05:99:6d:9e:1e:da:2a:17:b4:99:63:16:87:
77:6a:c7:1e:68:f8:ca:b9:83:83:0d:e2:e4:c7:9f:
4f:7e:13:e3:24:31:4f:f7:8c:59:34:b0:6b:fc:e5:
06:d0:e0:9b:52:70:96:fa:f9:a2:10:fc:37:83:57:
24:85:b3:9f:ac:98:d8:f0:2d:76:de:f4:ad:3c:cd:
52:5f:ff:3e:76:1e:e6:b8:b0:32:36:ad:7b:0f:6c:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:63:90:21:5F:2E:27:13:E3:7A:70:57:62:4D:80:CC:54:A3:03:0D
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:58:af:3e:a2:19:36:d8:8e:0f:f1:c7:18:5e:ec:c3:7d:68:
10:04:7f:46:be:84:09:87:1f:9b:de:ae:dd:bf:6c:7e:d1:c8:
6d:34:17:2a:33:38:03:15:26:25:8f:b3:4f:74:df:58:c9:9e:
41:0d:57:77:24:db:43:14:ca:a7:af:94:19:be:f4:27:15:6c:
53:fd:de:c6:cb:a8:bf:f8:a2:c1:67:f6:e1:80:66:73:e0:41:
19:b8:53:b8:7c:34:90:ad:0b:93:1e:f9:58:47:9a:e9:16:4b:
b3:30:11:b5:0f:c0:29:7a:bb:06:8b:dd:bf:ca:4b:a4:3b:61:
9a:27:f3:ba:37:09:9a:90:15:25:72:9d:a3:d6:37:3d:75:71:
52:82:23:21:9b:01:31:28:a6:90:45:67:fc:c6:e6:42:f3:ff:
5c:35:f1:5b:01:61:52:c8:88:52:30:74:d4:15:c7:3d:17:33:
6c:09:5e:49:dd:69:12:66:16:67:8d:dc:0e:6f:7f:39:1f:8d:
17:20:ac:c8:e7:eb:04:83:b9:dc:51:4d:40:18:b7:b1:fc:81:
92:6a:3a:51:e7:59:c4:81:1e:ad:49:5d:3b:32:80:be:7c:3d:
fd:85:e4:45:d3:4a:70:78:32:a6:fc:d2:92:cd:80:ca:51:e8:
fe:37:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:43 2026 by rpki-client