Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
File: pOpmDdthAOfTLl02aJp3fKnK-hk.mft (raw, json)
Hash identifier: BJdnEU13/iNzpjQkBZ/o4Ql8TYP/gxOvWOmAxok72Dk=
Subject key identifier: 93:EB:8B:B6:A8:4D:DD:99:D1:30:37:49:6C:32:B3:62:B1:53:6B:A0
Authority key identifier: A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
Certificate issuer: /CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Certificate serial: 019F90FF029D885C9E463FEC8FA9B26B0D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
Manifest number: 033C
Signing time: Thu 23 Jul 2026 22:00:59 +0000
Manifest this update: Thu 23 Jul 2026 22:00:59 +0000
Manifest next update: Fri 24 Jul 2026 22:00:59 +0000
Files and hashes: 1: Kuamlf0SJKI-PWFPoz3C6in1jGI.roa (hash: W1juLnVZXFxvmAjMn2DB1U04vvF55AkBRyl1Tp1+qak=)
2: W4rXs973I72wlBGGxrG6cyihd0g.roa (hash: PEZb6rsbaDfrboLCp/JrfG/sBCA684zKkgy1FgXQxTo=)
3: pOpmDdthAOfTLl02aJp3fKnK-hk.crl (hash: okNNQXd6FgxONIj6QTZyiBqsTibkjuuOc2BMaVkOMvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:02:9d:88:5c:9e:46:3f:ec:8f:a9:b2:6b:0d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea660ddb6100e7d32e5d36689a777ca9cafa19
Validity
Not Before: Jul 23 22:00:59 2026 GMT
Not After : Jul 24 22:00:59 2026 GMT
Subject: CN=93eb8bb6a84ddd99d13037496c32b362b1536ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:35:7e:9d:ea:bd:d9:66:ce:aa:4a:d1:1a:
29:f3:5b:37:83:24:3e:fb:e8:fc:42:36:b5:cd:b5:
30:75:67:fb:13:d4:92:f6:29:81:08:01:3b:6c:36:
a3:52:93:2b:96:a9:ca:cc:d7:17:6c:b2:81:47:8c:
e3:7e:99:60:7f:1d:50:1a:84:df:36:e5:df:5e:16:
81:7f:ed:bb:9d:de:9a:89:73:07:7e:1a:1b:16:e1:
00:d5:28:0a:8d:1f:17:ff:68:69:5a:3f:d3:55:3f:
71:ae:f5:d3:2f:57:08:e1:e1:44:a0:49:5c:82:47:
1f:af:43:9c:16:4c:89:d3:8f:88:78:36:e0:55:91:
c2:85:5c:e7:94:c2:51:ae:18:cd:37:a1:9f:d8:cc:
70:28:a7:6c:39:28:29:03:f7:9e:d8:04:c8:2f:26:
f0:4f:76:68:7c:a7:a0:e6:37:36:9b:e5:c8:d0:a5:
c7:e0:68:10:7b:0d:13:23:23:5a:8a:2e:49:2b:50:
a5:7a:fa:c8:8a:a8:11:45:ae:05:ae:b9:33:b4:f6:
37:60:8b:f5:a5:e5:28:8b:f9:74:d2:f9:27:01:1a:
46:d0:9f:2a:37:ae:ba:54:02:8b:81:a5:1e:58:57:
15:eb:cf:49:91:60:84:f9:ba:3a:6f:c3:5d:b0:18:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EB:8B:B6:A8:4D:DD:99:D1:30:37:49:6C:32:B3:62:B1:53:6B:A0
X509v3 Authority Key Identifier:
keyid:A4:EA:66:0D:DB:61:00:E7:D3:2E:5D:36:68:9A:77:7C:A9:CA:FA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOpmDdthAOfTLl02aJp3fKnK-hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e20aa0-338e-4f33-86ea-6f622fd18d30/1/pOpmDdthAOfTLl02aJp3fKnK-hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8e:84:b3:f8:5b:71:a2:eb:1d:6e:1c:bd:9a:64:c6:af:39:
b1:5e:d9:6d:b0:84:ef:44:8a:2c:6a:ec:52:be:65:6f:87:53:
b5:95:d2:e9:aa:23:64:b1:ea:20:c0:84:23:c9:b1:15:25:6e:
7e:78:7d:c7:7f:22:67:b4:14:88:26:3d:ea:cc:ca:42:b2:9c:
46:a3:e9:ec:88:1b:e1:80:95:5f:48:4a:dc:0f:a6:43:1b:77:
62:b2:cc:95:69:84:27:a8:9c:ab:7e:d6:f8:0b:10:29:c6:7c:
f5:a8:2b:94:06:7a:80:5c:7b:76:c1:34:ce:71:89:af:37:8e:
a6:82:51:25:f2:23:b6:35:f5:aa:72:9b:ee:8c:1e:a1:9f:56:
79:e1:2a:cd:a4:3e:c6:0b:01:30:5c:56:0e:87:dd:53:65:45:
e5:26:f0:73:83:b7:d7:42:6d:f3:f2:29:1d:d1:1a:5d:58:de:
6a:4a:30:89:59:b2:b2:79:47:79:57:0e:a4:c6:39:c3:de:80:
d7:e6:4d:9a:3b:c3:24:0d:03:e4:4f:83:74:b6:71:f4:43:5e:
b2:f4:e2:bb:cc:bf:ce:8c:c0:11:2f:1c:4a:fa:20:71:aa:09:
d7:4f:2b:86:31:1c:fd:e7:bb:24:5c:78:f1:f7:8c:66:26:05:
50:d7:8a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/wKdiFyeRj/sj6myaw0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWE2NjBkZGI2MTAwZTdkMzJlNWQzNjY4OWE3NzdjYTlj
YWZhMTkwHhcNMjYwNzIzMjIwMDU5WhcNMjYwNzI0MjIwMDU5WjAzMTEwLwYDVQQD
Eyg5M2ViOGJiNmE4NGRkZDk5ZDEzMDM3NDk2YzMyYjM2MmIxNTM2YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53o1fp3qvdlmzqpK0Rop81s3gyQ+
++j8Qja1zbUwdWf7E9SS9imBCAE7bDajUpMrlqnKzNcXbLKBR4zjfplgfx1QGoTf
NuXfXhaBf+27nd6aiXMHfhobFuEA1SgKjR8X/2hpWj/TVT9xrvXTL1cI4eFEoElc
gkcfr0OcFkyJ04+IeDbgVZHChVznlMJRrhjNN6Gf2MxwKKdsOSgpA/ee2ATILybw
T3ZofKeg5jc2m+XI0KXH4GgQew0TIyNaii5JK1ClevrIiqgRRa4FrrkztPY3YIv1
peUoi/l00vknARpG0J8qN666VAKLgaUeWFcV689JkWCE+bo6b8NdsBhKiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPri7aoTd2Z0TA3SWwys2KxU2ugMB8GA1UdIwQY
MBaAFKTqZg3bYQDn0y5dNmiad3ypyvoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMjBhYTAtMzM4ZS00ZjMzLTg2ZWEt
NmY2MjJmZDE4ZDMwLzEvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lMjBhYTAtMzM4ZS00ZjMzLTg2ZWEtNmY2MjJmZDE4ZDMw
LzEvcE9wbURkdGhBT2ZUTGwwMmFKcDNmS25LLWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI6Es/hb
caLrHW4cvZpkxq85sV7ZbbCE70SKLGrsUr5lb4dTtZXS6aojZLHqIMCEI8mxFSVu
fnh9x38iZ7QUiCY96szKQrKcRqPp7Igb4YCVX0hK3A+mQxt3YrLMlWmEJ6icq37W
+AsQKcZ89agrlAZ6gFx7dsE0znGJrzeOpoJRJfIjtjX1qnKb7oweoZ9WeeEqzaQ+
xgsBMFxWDofdU2VF5Sbwc4O310Jt8/IpHdEaXVjeakowiVmysnlHeVcOpMY5w96A
1+ZNmjvDJA0D5E+DdLZx9ENesvTiu8y/zozAES8cSvogcaoJ108rhjEc/ee7JFx4
8feMZiYFUNeKnQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:43 2026 by rpki-client