Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
File: dlOpinSeVpdEoe3iyUDy5DPEQIo.mft (raw, json)
Hash identifier: XnCjiFUEFVHSM5luMtNYpsCeC+CzBh0Y2bMoEegK+pU=
Subject key identifier: 65:42:37:09:0F:E3:63:16:30:FC:85:20:72:79:3C:CA:0F:1A:E8:69
Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
Certificate issuer: /CN=7653a98a749e569744a1ede2c940f2e433c4408a
Certificate serial: 019F92483C014F74FAC11B7AA818827DA3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
Manifest number: 0D58
Signing time: Fri 24 Jul 2026 04:00:35 +0000
Manifest this update: Fri 24 Jul 2026 04:00:35 +0000
Manifest next update: Sat 25 Jul 2026 04:00:35 +0000
Files and hashes: 1: RsF6wJG_DVoKQM6B-sCzW6WCDW0.roa (hash: qws597tbqP0XDfiuU1TMHHh3nxH1S6tAU3H9xRP9fH8=)
2: dlOpinSeVpdEoe3iyUDy5DPEQIo.crl (hash: P/dy6Y8WylWmMDbiEs9gT6QHDwB/Pmp7Ul8KaW0tFnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:3c:01:4f:74:fa:c1:1b:7a:a8:18:82:7d:a3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a
Validity
Not Before: Jul 24 04:00:35 2026 GMT
Not After : Jul 25 04:00:35 2026 GMT
Subject: CN=654237090fe3631630fc852072793cca0f1ae869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:61:69:7a:84:f2:33:52:e7:4c:b4:00:dd:
02:e2:9a:a0:d3:7d:d7:e6:39:a4:09:d1:2a:f4:b7:
4a:12:4b:4c:7b:79:dc:bc:1e:ae:d2:ac:0b:fd:0c:
05:39:e3:cc:ab:b2:5f:02:64:21:d6:ae:64:1f:cc:
ee:ff:ff:78:dc:58:69:31:59:15:61:d8:a7:4a:28:
f3:ad:c6:3b:b2:21:ec:87:e3:c9:55:c4:e0:c0:a4:
f9:70:19:6c:7e:58:dd:24:2d:7c:b2:5c:62:87:d9:
ca:1f:46:d6:82:42:6a:5b:70:b1:c1:cb:6f:e9:94:
0c:5b:2e:b9:3a:fa:19:7a:dd:b6:52:27:56:83:28:
8d:bb:a8:29:9a:88:0d:8c:15:22:10:40:a9:c1:eb:
4c:20:dd:51:a1:8b:3a:e6:e3:6c:cf:07:9c:8f:26:
29:f1:3f:9d:ea:4d:e8:cb:5e:d9:69:87:81:d5:09:
50:e3:6f:6e:36:8d:c5:9e:ad:c9:2d:ef:91:3e:a8:
69:b0:db:35:f6:ea:04:40:19:ce:6a:2d:a1:83:91:
35:ac:ac:62:d8:63:ef:5d:0b:7c:d1:07:1d:b8:c2:
cb:ae:5d:cb:8a:ff:02:5a:f6:53:7a:77:27:88:72:
bc:b8:fe:58:77:a7:84:f1:89:d0:f7:e9:5d:c4:32:
04:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:42:37:09:0F:E3:63:16:30:FC:85:20:72:79:3C:CA:0F:1A:E8:69
X509v3 Authority Key Identifier:
keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5b:6e:3b:27:28:f5:14:32:81:27:f6:9c:a3:07:8f:17:07:
17:a9:d1:29:1b:eb:02:f5:b3:f9:aa:3e:fc:8f:a0:04:e1:0d:
c0:76:ff:92:6f:a2:ca:67:23:bc:c1:db:5e:2e:7a:7d:a3:2f:
fc:d3:54:49:40:b1:42:dd:b7:3f:12:ff:c1:66:ca:53:eb:73:
6a:49:6a:c3:37:8e:47:fd:b4:7b:59:cf:dc:a4:75:32:93:cb:
57:fa:b0:be:14:b1:fb:8f:84:92:24:a8:59:85:4f:97:c6:43:
39:06:58:a2:fc:0d:89:6d:a9:9c:e9:a0:d5:42:09:a3:99:f9:
a1:c8:c5:a6:56:6e:b0:ef:a6:03:f2:af:aa:b1:80:78:de:03:
b9:ad:4e:a9:17:14:cf:eb:77:0b:4b:c4:f4:fb:ff:c1:6a:90:
d7:c0:55:02:e2:39:8c:9b:36:2a:56:1d:65:ce:25:f9:fb:b3:
9e:7b:12:85:f3:5d:0a:9f:39:e4:db:06:90:f2:1f:b6:7e:a0:
04:35:bb:8d:bc:a2:a5:1d:8e:c3:bd:3f:62:3b:f7:1d:83:47:
3a:be:ca:cd:b2:81:5b:d4:eb:9a:85:e7:63:93:ae:f1:4c:1a:
8f:10:10:a5:2c:32:3c:4e:8c:9f:94:ed:5f:ca:77:49:d8:40:
8f:6d:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:27 2026 by rpki-client