Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: HkA7oswe5rgUK9Y/b1IcuBShCx6bkSgLOtv4mSvgSxk=
Subject key identifier: 63:87:D2:9A:D8:ED:D8:5E:41:11:1E:BA:4F:28:64:33:75:7D:84:14
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 01A1431661D0342EEFFC95E83BA73EB4E113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 1AAE
Signing time: Fri 16 Oct 2026 05:01:42 +0000
Manifest this update: Fri 16 Oct 2026 05:01:42 +0000
Manifest next update: Sat 17 Oct 2026 05:01:42 +0000
Files and hashes: 1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: yyzaQ91JDVkdd6eGeGULImzS4n05DtzBmN7nOyoo8KI=)
3: el1QJ8EZEOroSio5mjAT6cdENeQ.roa (hash: Rq2+3JsrgLjDqBXH9XO5ReXrknj46T6QViW1jQC5N00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:16:61:d0:34:2e:ef:fc:95:e8:3b:a7:3e:b4:e1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Oct 16 05:01:42 2026 GMT
Not After : Oct 17 05:01:42 2026 GMT
Subject: CN=6387d29ad8edd85e41111eba4f286433757d8414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:58:8d:8d:b3:0a:bd:d5:6c:4e:52:34:f0:
14:1d:8f:36:f9:b1:82:e5:8f:61:29:91:ea:ff:cc:
92:2c:a7:7e:32:0a:b1:c2:4e:e6:af:57:e1:9e:fa:
5d:6f:ef:1d:d4:01:89:c5:b7:6e:e4:6a:94:f9:aa:
39:f6:29:a0:ec:39:ac:9d:6b:57:45:9c:8e:5e:d2:
83:29:59:11:59:20:98:be:f7:05:a2:b5:f8:bd:ea:
f7:30:cd:67:5a:1a:97:05:b5:e0:88:8e:53:fe:fa:
3f:42:13:88:26:19:c7:de:39:39:41:e8:62:5d:5c:
7e:b3:ae:0e:8c:14:5d:f8:f3:73:54:40:71:66:a4:
67:c4:d9:0a:d6:9f:87:48:40:c0:65:dd:0a:ff:f4:
a8:c9:29:21:bb:0d:28:b1:a0:e5:5b:b2:f8:73:8b:
59:54:33:17:77:5f:b1:be:06:65:f6:1e:65:79:d4:
b1:07:e2:bb:2b:41:50:a4:70:db:c4:85:41:f0:08:
52:bb:56:f1:c9:ee:d6:fb:ab:8e:52:ee:3c:30:ca:
d0:23:bc:ac:02:78:39:82:9b:d1:f9:0f:be:b8:40:
0e:ca:72:ad:7b:dc:73:fb:3b:af:76:ec:f0:ee:91:
82:63:8d:21:cc:e1:cc:fb:01:41:42:46:18:43:ac:
72:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:D2:9A:D8:ED:D8:5E:41:11:1E:BA:4F:28:64:33:75:7D:84:14
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d7:ac:f3:90:50:09:c3:f5:48:4c:2f:93:f9:31:a9:ff:fd:
f5:86:e6:5f:36:92:bb:7d:4e:74:4c:86:4c:74:97:f4:67:96:
28:ce:34:14:53:7e:e4:bf:f8:93:3e:ce:bf:23:27:c7:e7:78:
53:70:bc:a6:17:3a:28:ad:fd:3e:be:74:82:58:b1:84:10:b5:
41:49:14:b5:17:aa:ff:3f:4e:7b:1b:1f:d8:fe:18:0c:55:96:
54:9c:94:58:f3:70:8d:cc:84:de:72:62:98:bb:e2:dc:ba:b4:
04:42:44:24:7c:2a:f2:0c:77:e0:f4:86:20:16:07:82:94:be:
ed:b5:28:9d:a3:67:2a:da:19:53:96:88:c6:79:99:94:72:8c:
17:0b:b5:f9:86:0f:1b:a2:33:41:87:0a:fb:6a:12:73:1e:ea:
31:06:e1:70:0c:ef:29:ec:8c:b4:87:07:29:a5:43:3e:f7:ab:
0c:80:8b:34:14:84:6d:b1:fb:54:ac:25:eb:49:09:64:b1:a9:
08:98:a3:a6:52:e7:b0:a5:6c:dd:7f:91:82:26:9d:5d:f5:62:
7d:8a:3f:fa:40:b6:bb:cf:49:2f:b1:ee:0a:c5:aa:c8:37:52:
d3:51:ef:ee:c1:ff:f1:68:e0:72:b9:dd:07:1b:d9:89:19:84:
f7:07:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 10:08:17 2026 by rpki-client