Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: swGM1ZsgLwWYxBtuzDlS+kgJfMIsU0bZOVxg0LZ/6kI=
Subject key identifier: 13:FD:A3:D4:37:EA:95:07:55:1F:00:0A:56:66:E0:A4:6B:63:89:EF
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 019F9512CD44A63FE7922BF40F056B3B54BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 17:01:05 +0000
Manifest this update: Fri 24 Jul 2026 17:01:05 +0000
Manifest next update: Sat 25 Jul 2026 17:01:05 +0000
Files and hashes: 1: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: KG601lrOpTieOmNcsUpOEc+4dazbm3d0wjXfRygV5FU=)
2: pm79H7mwduu7mnhDJctsn-uYWPE.roa (hash: ED5J8d3NpU/HwXaPFnumSsfSWb72ZAcfll3lZasNaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:cd:44:a6:3f:e7:92:2b:f4:0f:05:6b:3b:54:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Jul 24 17:01:05 2026 GMT
Not After : Jul 25 17:01:05 2026 GMT
Subject: CN=13fda3d437ea9507551f000a5666e0a46b6389ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:42:5b:3f:dd:d2:a3:8c:7d:14:28:6c:67:
ed:46:e8:01:1c:5e:16:a9:f1:60:4b:38:7d:05:60:
76:8c:a7:68:d2:61:a2:b4:1e:0f:de:14:9f:e2:2a:
ce:cb:ab:b7:30:28:ea:73:a1:e7:9e:a9:c1:eb:1e:
92:34:c0:55:17:f7:16:40:e2:ce:39:57:a0:83:36:
b1:89:4c:32:54:36:64:d7:f6:ec:11:78:02:ee:96:
85:fe:16:81:78:46:9f:62:64:43:0a:1f:36:35:ab:
1a:e3:34:fc:0b:1a:13:07:e7:e0:a3:7c:eb:54:a8:
79:5a:b3:4b:e5:c8:3d:9a:e0:6b:04:82:ec:bb:6b:
4c:93:08:0b:bb:c5:cf:fe:5b:67:8e:3a:02:d7:77:
d1:d4:62:42:13:25:27:44:34:0e:68:2f:1f:ae:5f:
61:70:88:c2:ab:44:1c:66:af:67:2e:83:5c:54:e1:
5f:2c:48:a9:23:4c:4a:82:e3:88:f2:87:90:c5:22:
7c:81:03:28:3c:78:57:77:14:92:49:62:96:40:d5:
0b:d1:f5:b2:41:9d:d9:38:ce:93:35:e9:1c:a4:f2:
aa:ce:03:f3:34:fe:ae:1c:6f:8b:69:9f:c5:92:11:
5a:a3:d9:03:84:2d:be:9a:a2:b3:38:4c:5c:50:d1:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FD:A3:D4:37:EA:95:07:55:1F:00:0A:56:66:E0:A4:6B:63:89:EF
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:09:a7:99:1d:bd:6e:48:13:b0:a7:0c:83:71:63:22:75:67:
1e:3e:3a:d7:5a:2f:ae:d9:71:94:f7:9d:ad:d8:c6:9d:9c:51:
ea:d6:8b:dc:7b:7f:a0:71:c4:26:ad:e1:75:16:86:b4:05:6c:
b3:43:f0:55:32:bf:0f:70:a5:dd:67:6f:f8:81:4e:c2:55:3f:
00:13:9b:e7:98:e7:24:d7:18:de:01:3b:d2:08:b3:14:c9:6f:
09:b9:d3:ff:ea:39:61:8c:0c:e7:de:da:1f:54:39:63:0d:e5:
45:5c:ba:25:6e:43:cd:f1:60:b7:66:c6:a0:da:ea:0c:cd:dc:
a8:9a:79:46:a5:61:fd:6d:a7:27:3a:ab:fe:e0:0f:c2:72:8b:
78:cc:90:fa:08:d1:3a:04:27:43:8d:75:29:fc:64:9c:d0:1b:
34:d6:cf:bc:2a:95:fe:74:a6:26:47:fd:06:42:42:82:37:9d:
55:91:f2:b3:e5:8e:93:f6:e6:7f:8d:62:55:67:c0:37:45:b5:
31:6a:07:e1:1f:f1:a7:96:1b:05:a7:f6:5b:fc:a1:ae:b3:18:
6b:03:c1:ea:ae:6d:c4:f8:8e:67:b3:4b:f1:e8:5a:b4:47:5e:
c9:ee:3e:e0:62:7c:88:06:41:51:e6:d0:71:b0:fd:af:32:7f:
b1:e0:1e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:46:59 2026 by rpki-client