Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: wbOnnAmIn50FwLwiVCnP47jeE76iqtJ7GYiVFRkLBwI=
Subject key identifier: 67:04:BD:9D:F5:AE:E6:5E:9F:5F:A1:DB:BF:AE:72:1E:7D:28:02:9F
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 019D27DFA0E4058FFE5D60DA18ED4F7781D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 02:01:00 +0000
Manifest this update: Thu 26 Mar 2026 02:01:00 +0000
Manifest next update: Fri 27 Mar 2026 02:01:00 +0000
Files and hashes: 1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: muo0ryXw13uRuNptNZO1LN8FHey0JSLvBOgP8ZqpSu8=)
3: jksHLXQsL8kIaSdyy1KKgItGkLM.roa (hash: SvVYKXT2yItHZ/QXEnN9YsWJ7pv9MmMOoAi6wKxSVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a0:e4:05:8f:fe:5d:60:da:18:ed:4f:77:81:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Mar 26 02:01:00 2026 GMT
Not After : Mar 27 02:01:00 2026 GMT
Subject: CN=6704bd9df5aee65e9f5fa1dbbfae721e7d28029f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:19:23:02:dc:40:66:ef:f4:f9:84:c6:db:
30:59:3a:f5:81:1e:34:d5:a4:83:6d:49:c5:ec:c1:
98:de:75:26:8a:40:72:14:cc:4b:5e:47:66:aa:07:
48:82:ec:3c:a4:f9:6a:88:bd:57:7b:8e:de:eb:1f:
da:9d:f9:3d:ea:56:54:79:2b:bc:20:af:df:e0:49:
31:4d:79:dd:e8:0d:78:3c:d5:df:a7:86:4b:a7:3b:
fe:5e:8d:f6:f0:26:47:77:50:06:5b:70:a6:39:52:
3a:6e:0e:b1:19:44:38:a4:22:25:5e:2a:38:f9:7f:
88:77:5e:6e:61:23:fd:bd:58:3f:a2:16:ed:33:88:
65:4d:a4:5f:66:58:d3:3c:61:4c:dd:57:f3:8e:b5:
3b:04:11:39:97:a1:5e:83:ea:f0:23:0c:1a:ff:88:
f0:44:60:3c:8e:ce:5e:08:48:72:26:30:fd:58:80:
31:44:ca:1a:f7:5f:a8:4d:dd:bc:30:2c:31:50:7b:
2d:6d:df:59:6e:07:58:81:95:e3:ee:72:4b:40:3d:
1b:17:f9:2e:49:0b:70:39:76:2f:b2:7a:96:94:dd:
b7:5b:f4:3f:a9:4f:dd:c1:5a:46:42:8c:f9:24:d1:
fc:d4:c0:e1:d1:c0:ca:46:04:d3:29:d1:f9:75:c5:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:04:BD:9D:F5:AE:E6:5E:9F:5F:A1:DB:BF:AE:72:1E:7D:28:02:9F
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d6:b0:75:2c:c1:a4:66:00:d9:9e:f2:f1:07:3d:f9:fa:1c:
a9:93:92:f3:3c:3e:b0:f5:6b:d8:12:24:71:b5:1e:91:e9:44:
91:cb:24:39:18:6e:10:24:56:bd:1b:5f:54:95:88:2d:fc:1b:
9c:50:cb:c1:93:f2:41:c9:21:22:1a:26:13:3d:fc:83:80:77:
7a:ee:75:e2:9f:24:87:9c:1a:0e:75:63:7b:2d:b2:ee:42:0e:
e5:b7:72:6c:de:71:40:55:b2:72:32:95:d4:67:f4:2c:6a:f3:
c0:74:67:d6:93:cd:29:90:ee:48:1b:61:20:3b:36:30:8c:47:
bd:10:5d:f7:86:ac:3f:ee:be:f2:02:5e:77:b5:de:84:c0:d8:
e1:9f:5b:d1:0a:d7:1c:97:b1:88:94:2f:12:a5:a0:9f:e7:99:
c0:89:e9:fa:ca:65:9b:74:09:8a:bb:e5:89:dc:0f:76:e7:a2:
6c:1d:72:46:ab:68:09:9c:b4:aa:1d:2f:1a:40:21:5e:48:8c:
7a:0c:cc:39:98:d8:f4:74:6b:70:2a:2f:03:d5:8f:18:82:b3:
e5:e5:03:2f:ae:7c:a7:90:06:b0:72:e7:1f:23:5b:56:2a:f4:
ee:ef:35:3c:f7:14:c3:32:b4:9f:f7:72:10:95:e9:ad:b6:62:
5b:35:d5:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n36DkBY/+XWDaGO1Pd4HQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOTJmNWQ5MzY3NTJiYWYyZDBkZjcxMzI5OTQ5OWNlY2Zh
OWY0OGQwHhcNMjYwMzI2MDIwMTAwWhcNMjYwMzI3MDIwMTAwWjAzMTEwLwYDVQQD
Eyg2NzA0YmQ5ZGY1YWVlNjVlOWY1ZmExZGJiZmFlNzIxZTdkMjgwMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqMZIwLcQGbv9PmExtswWTr1gR40
1aSDbUnF7MGY3nUmikByFMxLXkdmqgdIguw8pPlqiL1Xe47e6x/anfk96lZUeSu8
IK/f4EkxTXnd6A14PNXfp4ZLpzv+Xo328CZHd1AGW3CmOVI6bg6xGUQ4pCIlXio4
+X+Id15uYSP9vVg/ohbtM4hlTaRfZljTPGFM3VfzjrU7BBE5l6Feg+rwIwwa/4jw
RGA8js5eCEhyJjD9WIAxRMoa91+oTd28MCwxUHstbd9ZbgdYgZXj7nJLQD0bF/ku
SQtwOXYvsnqWlN23W/Q/qU/dwVpGQoz5JNH81MDh0cDKRgTTKdH5dcV5ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcEvZ31ruZen1+h27+uch59KAKfMB8GA1UdIwQY
MBaAFDqS9dk2dSuvLQ33EymUmc7PqfSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTIt
MTY5NmIyNDZjZDUwLzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTItMTY5NmIyNDZjZDUw
LzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNawdSzB
pGYA2Z7y8Qc9+focqZOS8zw+sPVr2BIkcbUekelEkcskORhuECRWvRtfVJWILfwb
nFDLwZPyQckhIhomEz38g4B3eu514p8kh5waDnVjey2y7kIO5bdybN5xQFWycjKV
1Gf0LGrzwHRn1pPNKZDuSBthIDs2MIxHvRBd94asP+6+8gJed7XehMDY4Z9b0QrX
HJexiJQvEqWgn+eZwInp+splm3QJirvlidwPdueibB1yRqtoCZy0qh0vGkAhXkiM
egzMOZjY9HRrcCovA9WPGIKz5eUDL658p5AGsHLnHyNbVir07u81PPcUwzK0n/dy
EJXprbZiWzXVew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:25 2026 by rpki-client