Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
File: OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft (raw, json)
Hash identifier: hyWjjQkGQYGP1MKfnisswm9g76jCurdMU0yE85KZIJk=
Subject key identifier: B0:78:6F:69:CF:13:C0:CF:F4:2A:72:1C:B9:13:D5:8F:DA:A3:3F:F8
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 019D2AA91D38BDCA654CE21CE063C8821264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 15:00:19 +0000
Manifest this update: Thu 26 Mar 2026 15:00:19 +0000
Manifest next update: Fri 27 Mar 2026 15:00:19 +0000
Files and hashes: 1: LnaW5765Yz17Jsu6jhp4pcS4phE.roa (hash: IQeYGnlewk42LV1orLSIQiV+CC/nS8IwBcXiQsT3VkU=)
2: OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl (hash: z9gm/lbET+lxqZmbJWDNIyKCYCVGOh3nbQ1vxYhDLhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:1d:38:bd:ca:65:4c:e2:1c:e0:63:c8:82:12:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: Mar 26 15:00:19 2026 GMT
Not After : Mar 27 15:00:19 2026 GMT
Subject: CN=b0786f69cf13c0cff42a721cb913d58fdaa33ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:09:57:53:71:26:7f:d3:16:d8:42:c5:69:
85:1a:d4:10:43:75:61:0d:28:8e:7a:61:05:0b:54:
51:a6:5b:ea:94:69:82:33:e9:50:0c:81:b9:88:10:
df:92:19:7c:06:52:6a:e7:9a:0e:a9:d2:d2:38:83:
d0:eb:13:2d:ec:cb:a5:48:61:8b:56:e6:e7:59:e8:
02:dc:4f:bc:b4:27:dc:86:ae:c7:76:d4:b7:1b:04:
2a:84:47:81:48:2c:82:06:fa:83:ee:43:eb:6b:db:
95:ae:46:2b:21:7d:e8:33:e6:cd:84:df:d9:f9:11:
7a:90:d5:99:a1:46:98:9e:f6:1a:20:7f:64:51:22:
5a:46:36:1f:13:88:33:6d:61:50:00:80:f7:da:75:
06:e7:8a:3c:1d:c9:de:7e:3e:64:42:be:cc:af:6b:
c8:d5:cb:07:7f:bc:27:7f:3b:5b:8b:36:38:b0:84:
bd:53:44:81:1d:d5:5d:6b:0e:6e:84:af:74:21:c7:
85:b0:68:1a:ad:dd:45:c7:d7:ad:67:cb:79:20:6f:
50:21:69:97:c1:fa:c1:b8:0c:93:f1:4f:47:0d:eb:
9f:58:05:de:f0:7a:b7:9d:a4:bd:4f:a5:26:7f:72:
df:db:f4:bf:f9:f9:d7:2f:31:50:c5:83:3b:3a:94:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:78:6F:69:CF:13:C0:CF:F4:2A:72:1C:B9:13:D5:8F:DA:A3:3F:F8
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c3:c2:53:c9:75:be:1a:90:04:a7:eb:c8:b4:7f:3a:f1:9e:
d5:52:1e:42:f2:b0:01:2d:1d:55:9f:08:5a:6d:56:90:49:7b:
4a:45:39:fb:ce:72:3e:95:49:df:70:e9:41:d8:ac:e8:5e:47:
51:14:56:28:73:61:a8:06:32:e8:0e:7f:a3:14:02:41:04:6f:
84:a7:2b:5b:3d:1b:fd:28:b1:97:12:fa:f0:94:76:25:f9:d4:
a5:8e:26:45:09:3c:7a:5a:d8:08:c5:fa:d5:fd:93:4d:70:57:
41:0f:b5:0c:dd:08:8e:1a:ad:ae:e9:a4:15:76:10:e9:67:1f:
c6:11:21:91:2a:c6:47:6d:37:50:12:25:96:a1:53:1d:ff:62:
26:45:cc:97:93:95:39:b2:d1:5b:54:aa:da:43:14:3a:90:ae:
f2:72:43:a5:a5:6a:19:de:06:77:64:22:57:eb:52:aa:d5:92:
7b:d7:79:6a:a4:dd:f7:8d:0b:b9:7a:39:32:0a:7a:b0:4c:52:
7d:13:dc:35:db:19:e9:0c:db:02:b1:45:f5:38:3b:ac:46:2c:
5b:9d:b9:08:d8:e0:a1:95:fe:54:b8:30:21:1e:ba:66:d4:8e:
4f:60:be:75:2b:bc:90:a1:5a:36:f3:1f:5c:fd:17:a9:93:ab:
df:c1:10:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:38 2026 by rpki-client