Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: KGFfUouJaZHYjVtJrQwSPfJJMGOv3LD5t7I1BMmQleQ=
Subject key identifier: 91:6C:69:A8:35:80:42:7E:79:8F:82:AB:E9:45:61:25:C4:F5:E5:CB
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 019F95B7BFECC2167102657F8E04D94059CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 20:01:15 +0000
Manifest this update: Fri 24 Jul 2026 20:01:15 +0000
Manifest next update: Sat 25 Jul 2026 20:01:15 +0000
Files and hashes: 1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: fgIcj5/387poG1PksKsy1VL6vHgtwdDQ6CPsCOmuPSg=)
3: jksHLXQsL8kIaSdyy1KKgItGkLM.roa (hash: SvVYKXT2yItHZ/QXEnN9YsWJ7pv9MmMOoAi6wKxSVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:bf:ec:c2:16:71:02:65:7f:8e:04:d9:40:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Jul 24 20:01:15 2026 GMT
Not After : Jul 25 20:01:15 2026 GMT
Subject: CN=916c69a83580427e798f82abe9456125c4f5e5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4f:05:34:b8:22:6f:23:0d:3c:b8:5c:3d:a4:
7b:8b:3e:ab:ae:5f:10:b0:87:73:94:54:52:ed:34:
ac:01:88:cb:5e:ba:d7:3d:8f:25:1c:f8:d1:ad:a4:
1a:bf:51:2e:a3:3a:fb:3e:d1:56:96:df:3b:7b:cd:
a0:43:9c:a0:8a:99:03:27:ed:a0:54:be:93:99:7f:
dc:7f:79:2e:77:60:03:9c:d6:4e:38:b0:ab:ec:31:
26:b9:aa:26:3d:ad:f4:e2:1d:97:f4:4c:24:f5:e9:
01:a1:93:d7:4e:e8:ec:63:e6:ce:79:78:bd:1a:81:
ad:30:98:17:bd:2a:c4:de:6a:1c:0d:96:45:7d:e8:
8c:87:f7:28:08:46:75:fd:00:34:6d:5a:41:4f:6a:
07:20:f1:1a:06:3b:e9:9a:14:8b:35:fe:22:a0:40:
4d:81:f7:70:c3:b5:0f:5f:58:d4:74:0f:3a:88:34:
a7:ae:32:18:dc:41:19:62:a2:5f:21:b4:55:42:bf:
77:a3:99:df:ac:85:01:08:ec:59:78:1f:91:3d:d6:
76:f1:8d:d1:2b:28:c1:ae:d9:73:ea:ac:99:4f:2c:
9b:17:47:50:8e:c9:3c:2f:65:29:e0:a3:a4:9d:30:
80:16:90:f6:10:dc:76:69:b0:05:ae:fb:62:69:e2:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:69:A8:35:80:42:7E:79:8F:82:AB:E9:45:61:25:C4:F5:E5:CB
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b3:0b:56:56:df:9a:17:fd:89:5f:4e:00:90:28:47:b2:02:
1e:5f:90:f7:24:4c:aa:00:77:2a:55:30:ab:42:cb:02:a0:21:
bc:da:ee:c3:54:08:e4:ee:40:74:ae:98:30:70:7a:1f:38:c1:
1b:82:d9:9c:5a:b7:3f:35:9a:50:02:de:b6:2d:a8:82:36:5d:
60:cc:2d:66:fe:16:7a:c8:33:62:bb:17:ed:04:11:eb:62:10:
f5:3f:71:16:9d:3d:23:38:89:7a:f5:dd:16:ef:d6:d5:aa:3f:
7f:34:f0:43:bd:7c:82:0d:f0:41:88:e4:7e:34:a1:2b:a5:3e:
f6:0a:6d:d1:1d:06:36:95:94:f8:a3:72:1d:cf:fb:e1:da:d5:
88:15:27:8b:9f:ec:b9:ac:03:4e:e5:78:84:36:ef:eb:e9:92:
26:1b:2b:d9:2a:de:84:dc:46:56:79:54:cb:2f:c4:31:3c:d3:
0a:d5:59:32:14:0e:cd:15:0f:ff:cc:8a:8f:59:36:ca:e9:91:
08:09:3d:d1:c3:86:48:c5:1a:fd:b9:c5:64:1b:02:ec:b5:ca:
bb:b7:d9:28:9d:e4:be:8c:fc:6d:06:a7:35:ff:3f:69:19:29:
7b:39:dc:5a:e8:1c:a1:06:d8:45:ef:33:cf:f5:24:76:01:a8:
75:e9:af:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:16:00 2026 by rpki-client