Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: DSZDedjyFy2aviYkqE22wL7KwQ9D+jKEe1wwnSF/Xvw=
Subject key identifier: D4:ED:4C:E3:78:E3:99:B3:40:96:39:19:09:77:72:13:7A:4C:C8:B1
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 01A1DE03342F99D7481D0C26F72BCB36EE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 046D
Signing time: Sun 15 Nov 2026 07:01:54 +0000
Manifest this update: Sun 15 Nov 2026 07:01:54 +0000
Manifest next update: Mon 16 Nov 2026 07:01:54 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: e8nOg9XkQrXhJ+YXvsOZXgslC2sNmoIiFMj4mMuunNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:34:2f:99:d7:48:1d:0c:26:f7:2b:cb:36:ee:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Nov 15 07:01:54 2026 GMT
Not After : Nov 16 07:01:54 2026 GMT
Subject: CN=d4ed4ce378e399b340963919097772137a4cc8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:fd:b6:cd:ee:e6:40:ca:0b:c1:3a:2c:95:
8d:dd:66:55:1e:5a:58:a0:75:1d:b5:67:88:22:9d:
b0:42:fa:73:dc:fe:b0:d8:5e:2d:c8:5a:80:8d:fd:
90:73:b6:4b:9a:cf:fa:51:e1:ab:d6:f0:4f:1c:d4:
ac:27:59:eb:26:f4:48:d4:7c:86:db:7b:35:bd:8a:
1a:ab:b3:43:1c:88:c7:bb:77:f1:c8:e6:d6:aa:ee:
04:db:b2:7e:68:60:25:74:0f:8a:63:3e:8f:7e:c0:
b8:08:21:84:39:ff:fa:68:7f:2a:00:c9:24:5f:7b:
17:63:2d:8b:87:b5:e8:26:89:a5:71:d5:b8:b0:b7:
2c:11:c1:85:f9:4e:72:96:7c:50:ba:ab:5f:4f:24:
e2:c0:a4:d9:e1:e1:b7:92:54:56:0f:c5:ff:fe:84:
db:1a:20:36:2d:f5:a6:d9:0e:c9:b5:6d:60:0a:3f:
b4:b2:58:56:38:38:0f:b8:77:41:c2:7a:c0:94:cd:
55:93:0f:be:3f:15:97:90:1f:cf:ae:74:86:1f:bb:
05:09:a7:13:64:f5:37:a6:c4:da:e6:66:72:6c:ce:
0c:af:f8:fe:68:74:16:5f:50:a3:ce:b2:7c:22:63:
e8:88:9f:04:31:b8:ee:38:11:48:07:51:a3:74:04:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:ED:4C:E3:78:E3:99:B3:40:96:39:19:09:77:72:13:7A:4C:C8:B1
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a3:e0:49:2e:af:ac:68:23:a3:d7:5a:c0:f1:9d:e4:32:a9:
79:3f:db:28:fc:ae:d0:32:de:56:f1:a8:a2:b5:ed:31:7b:f1:
02:d2:0a:88:1d:e6:13:2b:1b:c1:f9:73:4e:e8:52:bc:cc:ab:
4b:63:b4:e9:4f:1e:33:3f:86:8c:8c:7f:95:d9:58:98:f0:b1:
a4:f4:cb:ab:d3:dd:c3:c5:53:8a:86:86:c4:b2:9f:e7:b1:54:
96:41:ca:26:aa:ce:6f:1a:19:31:39:9b:4e:fd:6e:18:3a:9a:
57:ad:ad:84:70:9c:64:26:1c:5f:7a:b0:0c:b7:4f:d2:6c:df:
8e:72:f3:5d:b3:4f:63:31:1e:37:a9:da:b2:c5:ce:8d:b3:c1:
ac:2c:ce:98:ac:95:65:f8:6a:a5:3e:22:96:08:63:3c:d2:7c:
05:d0:a1:81:0e:9b:62:5f:21:ca:0e:6b:ae:b2:84:6d:09:29:
79:9f:7f:db:2d:d8:53:3a:fa:ce:f7:63:82:2a:9c:e4:db:76:
eb:ff:e1:27:34:22:18:e2:de:a5:e3:ef:6f:38:eb:69:b2:0b:
6e:aa:02:6b:44:ef:6e:d0:0a:4b:cd:b4:ab:68:b0:9a:39:de:
2e:8f:47:f9:00:0b:33:91:63:24:54:46:5a:fd:0c:82:58:d5:
ee:f1:c2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:18:12 2026 by rpki-client