Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: LLSU18Lw0ihIkEuoquPZXFgw89tpKMlr7wPV/FbT5xg=
Subject key identifier: 9E:77:E0:11:6E:27:91:B4:7D:9B:74:40:EC:1B:A3:30:E4:13:00:99
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 01A1412792B74DF0BEFE3B38F377FA830094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 1AAD
Signing time: Thu 15 Oct 2026 20:01:14 +0000
Manifest this update: Thu 15 Oct 2026 20:01:14 +0000
Manifest next update: Fri 16 Oct 2026 20:01:14 +0000
Files and hashes: 1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: yAjVM0/kG2hVmFKcL8EQ3u7kPBeGnRZs2GDawTdvybI=)
3: el1QJ8EZEOroSio5mjAT6cdENeQ.roa (hash: Rq2+3JsrgLjDqBXH9XO5ReXrknj46T6QViW1jQC5N00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:27:92:b7:4d:f0:be:fe:3b:38:f3:77:fa:83:00:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Oct 15 20:01:14 2026 GMT
Not After : Oct 16 20:01:14 2026 GMT
Subject: CN=9e77e0116e2791b47d9b7440ec1ba330e4130099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:07:23:a1:db:46:f8:95:52:3e:cf:2f:f7:
4b:9d:c8:d1:21:51:c4:93:e9:31:b4:e7:9e:a9:d3:
24:c4:b7:1f:3d:63:fc:f9:f8:17:ef:0a:58:e6:e4:
ba:82:4d:24:59:90:14:9b:51:76:08:6d:5d:6d:4c:
92:c1:06:7f:86:23:3c:69:0c:f6:0c:a9:bf:90:45:
8e:b2:89:41:b3:92:7f:7e:0f:5d:e4:c9:b6:8e:ed:
f5:e3:a4:3d:c4:74:e5:82:d6:e7:b6:49:91:2d:11:
fd:4d:3d:ea:a5:75:13:4f:7d:e4:0f:f5:eb:9b:6c:
81:fa:8f:c8:3f:e7:78:7f:0f:bc:d4:72:1f:7b:25:
25:9a:06:da:b8:c2:39:43:ae:f6:dd:a5:ae:a6:6a:
47:4f:a0:42:f9:64:13:1c:ac:f8:05:f3:1b:ca:d4:
34:96:31:c1:7d:fe:ac:58:1f:8a:de:41:ea:21:6a:
8b:fa:29:a3:79:00:60:28:47:3c:68:e7:ac:83:a7:
e3:45:5e:fe:72:6d:c1:fa:f5:d9:91:6a:57:6f:f2:
ed:30:02:ab:1a:05:ce:b5:18:b2:eb:ee:8f:66:f9:
11:22:0e:ad:70:33:9d:cf:c8:58:0c:25:b7:84:77:
5b:3b:7f:7f:2a:58:92:27:de:7a:fb:f7:1b:fe:b3:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:77:E0:11:6E:27:91:B4:7D:9B:74:40:EC:1B:A3:30:E4:13:00:99
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:45:c8:33:43:c3:9d:0f:e5:8b:de:ac:c1:6d:51:43:ed:e2:
6a:9d:05:a0:52:47:b2:2d:c0:68:5c:5b:ac:0c:fb:51:2f:90:
60:4a:08:1a:99:c1:f0:18:04:0a:b0:ed:55:f8:75:ee:d1:4e:
c3:f6:ff:ca:20:f6:bf:3e:b1:36:1f:73:2b:e8:f8:a1:53:92:
17:4a:74:3c:05:df:73:33:cd:b4:01:51:bf:d0:e0:18:cf:dc:
bc:9b:5b:47:54:85:65:52:e8:76:0b:ad:ff:9e:f2:1f:2d:65:
d8:23:2e:a4:10:7f:7f:c6:fa:0c:eb:c5:0c:84:c7:3c:99:99:
70:b0:26:96:2f:2b:b5:57:3a:0d:db:4a:7a:9a:e9:d5:28:78:
17:9f:67:03:37:d6:8b:75:b4:cb:33:74:cf:05:a5:a8:57:60:
dd:63:57:e6:ce:a0:7a:fd:4b:c8:91:ac:d1:12:87:d5:bb:26:
d8:28:38:de:e1:fc:b3:25:7e:36:ad:a0:44:47:c7:7a:a6:0a:
05:de:e5:8f:7c:9f:1a:45:f9:90:27:61:ca:82:c2:2c:10:5b:
2b:3e:1c:bb:3b:e7:d5:d4:20:16:86:92:ad:87:47:11:e9:7a:
95:df:f6:21:9e:90:7a:d1:e7:6e:ba:cb:5e:26:4c:18:5e:a8:
50:02:ca:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 05:40:55 2026 by rpki-client