Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: kmLNcSOkxmqN9PztajJVhuAxNbCCi+iZynGy8/v36UQ=
Subject key identifier: A5:40:72:8E:2C:EC:EA:58:EB:9A:A8:40:3B:38:42:7F:C2:55:9B:CA
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01A15EC3A6C7A4FE77E29F2F1E4D6A7CD592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 1ABE
Signing time: Wed 21 Oct 2026 14:00:42 +0000
Manifest this update: Wed 21 Oct 2026 14:00:42 +0000
Manifest next update: Thu 22 Oct 2026 14:00:42 +0000
Files and hashes: 1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=)
2: 9KC7Z8jI5mX3o4gP5sp0g81ADV4.roa (hash: EmOefmxW6e2iV2QEck3zwiB/hG7rOCuItqzH3uRAT+U=)
3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: S15TKixhtQz2l9Pfs6GsSthNQEISPgv67HEEbXeHWQ0=)
5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=)
6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=)
7: kWJsfOPSFq_jhRUPK95fJnFQ6gQ.asa (hash: kjZzNLymA0q763NzFlPQRMaG1f9jPqoiNbS2FEJsFnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:c3:a6:c7:a4:fe:77:e2:9f:2f:1e:4d:6a:7c:d5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Oct 21 14:00:42 2026 GMT
Not After : Oct 22 14:00:42 2026 GMT
Subject: CN=a540728e2cecea58eb9aa8403b38427fc2559bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:f4:90:8a:ae:07:c1:a7:1a:e4:03:ca:95:
4a:aa:a6:9e:9d:eb:5d:96:e4:db:3a:28:ee:6d:71:
11:d6:91:77:44:9b:10:d7:4e:0f:0f:0d:dc:38:56:
33:92:04:ad:f6:ac:48:50:f9:d7:38:29:9e:99:36:
60:19:c9:68:c8:f6:a9:4e:e8:0f:7e:0e:d3:c0:01:
a2:58:fc:7f:d0:dc:37:56:fb:6e:01:41:9a:e1:3e:
5c:81:05:34:a3:80:74:58:bc:51:50:5a:27:36:40:
f2:6e:83:fe:8c:21:f8:09:07:65:f0:b0:e4:db:47:
73:1d:f1:34:3a:a7:a0:b6:7d:78:e5:66:d9:fb:f4:
6c:6b:b0:34:e5:2c:65:30:17:be:76:59:5d:d7:8b:
06:49:b6:c4:09:8b:03:eb:c9:e0:18:df:92:25:71:
d2:e6:bf:27:7c:a4:43:c2:93:f5:2b:49:99:8b:52:
a5:88:9d:ee:45:ce:a0:30:90:d1:40:b4:f2:22:01:
7b:3a:69:f9:aa:2a:72:06:fc:f9:81:de:cb:7d:3c:
a4:4f:dc:75:81:d1:2d:b7:7d:10:df:e7:71:83:20:
0a:f1:4f:c5:82:44:09:0b:9e:92:ef:64:0b:e3:d4:
3e:06:c1:28:af:3c:38:a6:35:a3:a4:c8:cd:79:9b:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:40:72:8E:2C:EC:EA:58:EB:9A:A8:40:3B:38:42:7F:C2:55:9B:CA
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fe:eb:45:f7:f4:46:49:51:30:55:20:d1:94:1a:8c:09:3c:
b0:c0:ba:49:ae:bb:85:1b:45:c2:49:75:d3:69:eb:38:38:f3:
9e:b2:8e:aa:94:87:19:61:50:25:20:08:18:e7:bd:c4:99:2e:
72:cf:78:91:98:54:7a:69:4d:2b:c0:b6:b3:8e:1b:79:e7:08:
33:74:c5:3e:b8:f0:c1:ac:80:1b:1b:71:54:a8:1a:40:d4:a8:
ee:c6:ab:5e:54:98:2f:24:0c:69:6a:5f:f2:73:64:61:c7:5a:
3f:71:6c:5c:29:ff:f7:1c:ca:43:6d:be:05:d7:0a:69:b1:a4:
0a:04:a6:13:d6:d2:b3:57:f6:35:55:a0:86:5c:ba:1c:53:02:
c0:68:be:5c:b9:77:80:7e:8e:b1:ff:7e:86:70:cb:20:bf:3c:
63:36:c0:da:12:ff:dc:8d:35:81:4c:16:ba:1f:16:91:c6:fb:
77:c7:13:f5:ac:d4:2a:d9:ca:ea:9a:49:c9:fc:c2:53:29:e4:
fc:8d:a9:e9:04:a0:09:23:d9:c6:8e:6e:7f:bd:99:e9:f4:51:
7f:d2:35:39:e2:28:fd:af:ba:c4:fc:63:69:06:b4:ed:d7:6e:
32:16:b5:39:87:78:ef:04:6e:f2:a0:8c:43:f6:a9:75:a8:71:
e9:4d:58:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFew6bHpP534p8vHk1qfNWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4
YmZiYjUwHhcNMjYxMDIxMTQwMDQyWhcNMjYxMDIyMTQwMDQyWjAzMTEwLwYDVQQD
EyhhNTQwNzI4ZTJjZWNlYTU4ZWI5YWE4NDAzYjM4NDI3ZmMyNTU5YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgH0kIquB8GnGuQDypVKqqaenetd
luTbOijubXER1pF3RJsQ104PDw3cOFYzkgSt9qxIUPnXOCmemTZgGcloyPapTugP
fg7TwAGiWPx/0Nw3VvtuAUGa4T5cgQU0o4B0WLxRUFonNkDyboP+jCH4CQdl8LDk
20dzHfE0Oqegtn145WbZ+/Rsa7A05SxlMBe+dlld14sGSbbECYsD68ngGN+SJXHS
5r8nfKRDwpP1K0mZi1KliJ3uRc6gMJDRQLTyIgF7Omn5qipyBvz5gd7LfTykT9x1
gdEtt30Q3+dxgyAK8U/FgkQJC56S72QL49Q+BsEorzw4pjWjpMjNeZvxwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVAco4s7OpY65qoQDs4Qn/CVZvKMB8GA1UdIwQY
MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt
NzI0OTQ5YjQ2MGU5LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5
LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/7rRff0
RklRMFUg0ZQajAk8sMC6Sa67hRtFwkl102nrODjznrKOqpSHGWFQJSAIGOe9xJku
cs94kZhUemlNK8C2s44beecIM3TFPrjwwayAGxtxVKgaQNSo7sarXlSYLyQMaWpf
8nNkYcdaP3FsXCn/9xzKQ22+BdcKabGkCgSmE9bSs1f2NVWghly6HFMCwGi+XLl3
gH6Osf9+hnDLIL88YzbA2hL/3I01gUwWuh8Wkcb7d8cT9azUKtnK6ppJyfzCUynk
/I2p6QSgCSPZxo5uf72Z6fRRf9I1OeIo/a+6xPxjaQa07dduMha1OYd47wRu8qCM
Q/apdahx6U1Y8A==
-----END CERTIFICATE-----
Generated at Wed Oct 21 19:46:24 2026 by rpki-client