Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: UDLjB+drDZDYRiJsujcz0i+I+tLmv3+vhqHcIRNn50U=
Subject key identifier: 7A:F5:1C:38:70:DA:89:3B:69:94:31:E1:04:64:9F:BA:9D:FC:86:8B
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 019D273AFCBA8C78F7E8961218DD81AD6C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: 4mDsZJyltZm5SrkerLpseuaqwrS+l4BxVHkIUbfMrLU=)
2: pm79H7mwduu7mnhDJctsn-uYWPE.roa (hash: ED5J8d3NpU/HwXaPFnumSsfSWb72ZAcfll3lZasNaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fc:ba:8c:78:f7:e8:96:12:18:dd:81:ad:6c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=7af51c3870da893b699431e104649fba9dfc868b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:48:c3:9b:d1:98:19:8e:3f:e1:e5:c5:26:
d9:6e:4a:8f:21:11:28:93:48:9e:21:86:db:d3:ee:
d1:49:bd:3b:ca:b4:d0:01:38:2c:64:7b:4f:08:9a:
39:f4:f9:17:34:86:12:38:47:78:67:18:59:fe:bf:
17:68:7d:15:9e:79:2d:7d:ef:4e:36:92:af:38:e4:
96:62:1c:12:b8:15:f8:40:50:02:96:db:b9:12:75:
72:35:40:85:79:6c:b8:e1:00:a3:7d:ca:7e:46:dc:
4c:2a:0f:d3:0e:2e:73:b2:af:e5:5f:0b:a1:5a:ab:
f5:af:e1:9e:14:9d:2c:fe:f1:e7:b5:18:b6:7f:ca:
b9:46:a6:8d:cc:2b:94:a7:76:72:01:4d:15:cd:49:
95:0a:ec:f3:59:8d:36:c6:7e:24:2a:2d:f7:14:10:
da:45:48:c2:de:81:ef:79:d0:c8:2a:1b:25:4b:0b:
b4:e7:6e:80:0e:e5:fc:0e:b5:d0:5e:c8:71:e3:8b:
95:9f:26:c2:f1:50:29:8c:6e:2d:41:06:70:0f:4c:
44:d8:66:6f:3c:36:31:30:65:04:a4:bf:6c:59:7e:
f7:26:f5:cd:6c:c4:97:83:3a:db:c4:a3:f7:74:49:
bc:62:c6:df:7c:60:ac:57:38:09:b6:23:10:53:37:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F5:1C:38:70:DA:89:3B:69:94:31:E1:04:64:9F:BA:9D:FC:86:8B
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4c:97:21:dc:5c:fd:ce:52:ff:7f:35:dc:f1:62:0f:02:7e:
87:2a:14:04:ad:17:3c:e1:bf:ce:89:bb:a6:85:a4:43:9b:dc:
5e:ee:e4:4d:bb:63:de:94:20:9b:c7:26:db:75:07:f0:14:52:
48:d4:33:c5:46:4a:cb:1e:39:4b:59:c2:fd:96:bf:87:79:a2:
7f:da:7d:fc:b7:c4:3e:91:25:74:06:12:ee:f9:66:d8:f3:8b:
16:2a:e2:ab:1d:10:3e:bc:34:be:d4:78:5f:11:ef:18:ae:00:
e2:8c:b6:36:21:1c:9c:12:3b:14:ea:11:cf:28:9a:55:3b:af:
b5:61:f4:8f:71:4e:3e:55:15:4f:35:9f:3c:26:25:5c:44:52:
40:b9:26:17:7b:14:ca:bb:71:d8:ae:e1:05:31:f0:d9:18:28:
b1:ea:56:38:44:aa:f2:6e:bb:ab:ec:3f:9a:3c:d5:b4:d6:4d:
d9:77:00:36:9a:82:6c:c9:17:1b:dc:9e:e7:9e:45:d7:14:29:
13:37:e2:a6:f9:98:d8:84:21:1c:a5:9a:24:78:dd:61:c7:a9:
c0:88:1d:a0:a1:e1:93:f4:93:8e:3e:01:2b:59:71:bf:37:e4:
a8:e0:1b:e3:01:8a:21:7d:d3:08:37:ef:f9:b8:6e:d7:d0:5d:
ca:71:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:18 2026 by rpki-client