Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: 55FQY78oFpje7SaWB2pAJKFbm52ECgFhCvegvsyxcSI=
Subject key identifier: A4:A6:67:55:CB:54:0A:D4:A0:9A:28:BA:A3:F8:3B:8F:0B:CC:A1:9F
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 0199FB7C7A423642118660958064E1DFB06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:02 +0000
Manifest this update: Sun 19 Oct 2025 08:01:02 +0000
Manifest next update: Mon 20 Oct 2025 08:01:02 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: TY7j9IEO5xvLQawitSrI8ufb7FTOvpRqaKzb4TZGrbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7a:42:36:42:11:86:60:95:80:64:e1:df:b0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Oct 19 08:01:02 2025 GMT
Not After : Oct 20 08:01:02 2025 GMT
Subject: CN=a4a66755cb540ad4a09a28baa3f83b8f0bcca19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:98:fc:a8:2f:10:1b:2d:ba:9b:ff:0f:a5:40:
9c:62:5b:1c:4e:61:19:38:2e:31:1a:94:fd:58:50:
be:36:5e:0e:24:6d:f1:f7:33:a9:f1:c1:27:1f:dd:
ad:d5:4b:e2:96:99:63:99:83:e0:df:a6:f8:6f:96:
54:ad:06:c5:ab:ac:91:5f:f7:f5:0c:20:f8:b8:58:
13:38:15:15:ad:06:0d:30:4e:01:a8:26:fe:b9:96:
e5:8d:bc:b9:2d:53:c1:05:a5:c9:f0:c6:47:78:e9:
d7:f6:b3:b9:73:f7:13:bc:ad:cc:d6:db:fe:54:f2:
51:e5:e0:30:82:2b:e7:c3:63:ea:e3:ad:cc:62:69:
7e:5c:d3:20:92:8a:73:40:a6:68:52:16:e0:22:7c:
11:ea:ea:4c:8d:96:4b:da:b1:3c:5f:c8:24:9f:34:
dd:49:4b:ba:46:f2:63:86:18:a9:df:b4:47:5e:c5:
2e:f2:0d:74:56:77:d4:2a:01:03:ba:1e:e0:59:2b:
ea:51:b5:ad:01:5b:36:2d:25:cc:c9:71:1c:41:ad:
89:66:2d:29:e4:de:c0:a2:a1:04:70:a0:25:1f:98:
c0:02:0f:9d:de:73:dc:a7:2c:79:98:ee:bc:4d:c8:
4d:fa:67:ed:59:e4:d3:cf:24:b1:3c:72:33:84:76:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A6:67:55:CB:54:0A:D4:A0:9A:28:BA:A3:F8:3B:8F:0B:CC:A1:9F
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6f:30:65:4d:51:61:10:7c:d3:8a:e9:ff:f8:f9:6f:5a:1d:
73:83:2b:90:1e:6b:3e:4b:a3:43:07:d7:da:f6:1d:40:2b:73:
96:65:bf:ef:be:a6:86:7e:a9:ba:25:46:a9:64:81:e0:48:0a:
1d:9c:07:7a:0c:47:3d:34:25:a6:bb:b4:fe:81:9b:65:25:79:
73:a4:e6:27:92:6e:d5:3e:24:2f:a9:24:4a:f8:91:8b:9c:75:
23:db:1c:cb:a2:8c:80:03:f9:c4:48:dc:ff:7f:ae:bf:17:42:
78:d4:54:d3:23:38:ee:96:48:72:cf:bd:6f:58:f3:82:be:94:
65:a6:27:7d:f8:98:fc:00:c1:df:44:6a:91:82:5f:6c:0b:f1:
b2:2e:ff:69:26:09:c9:3c:c1:ca:d5:d7:d5:0e:5d:4e:c7:51:
28:91:1d:a6:4e:19:63:cd:22:c3:e3:21:fa:d0:2a:ef:25:80:
59:82:49:2e:46:a0:72:19:62:35:24:82:ef:aa:ab:5e:f6:74:
9e:da:22:c7:b8:21:c7:9a:9f:65:67:d1:04:10:0b:e6:16:39:
44:94:80:20:6a:bd:60:ec:36:58:a0:37:3d:f1:ff:71:9e:01:
d0:0b:ad:c4:4e:4e:0b:fc:73:a1:35:cb:85:ab:23:6c:6c:21:
c8:0f:c8:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fHpCNkIRhmCVgGTh37BqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOTE2NTI3ZmQ5MWU5YjNjZjhlMDYyYmNlMDZkZjVjYmQ0
YzRiMWEwHhcNMjUxMDE5MDgwMTAyWhcNMjUxMDIwMDgwMTAyWjAzMTEwLwYDVQQD
EyhhNGE2Njc1NWNiNTQwYWQ0YTA5YTI4YmFhM2Y4M2I4ZjBiY2NhMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Jj8qC8QGy26m/8PpUCcYlscTmEZ
OC4xGpT9WFC+Nl4OJG3x9zOp8cEnH92t1UvilpljmYPg36b4b5ZUrQbFq6yRX/f1
DCD4uFgTOBUVrQYNME4BqCb+uZbljby5LVPBBaXJ8MZHeOnX9rO5c/cTvK3M1tv+
VPJR5eAwgivnw2Pq463MYml+XNMgkopzQKZoUhbgInwR6upMjZZL2rE8X8gknzTd
SUu6RvJjhhip37RHXsUu8g10VnfUKgEDuh7gWSvqUbWtAVs2LSXMyXEcQa2JZi0p
5N7AoqEEcKAlH5jAAg+d3nPcpyx5mO68TchN+mftWeTTzySxPHIzhHaHkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSmZ1XLVArUoJoouqP4O48LzKGfMB8GA1UdIwQY
MBaAFKKRZSf9kemzz44GK84G31y9TEsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjct
ZTBkYzE4ZTg4MjI5LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmM1MzktNjIxZS00NDYwLWEwNjctZTBkYzE4ZTg4MjI5
LzEvb3BGbEpfMlI2YlBQamdZcnpnYmZYTDFNU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwG8wZU1R
YRB804rp//j5b1odc4MrkB5rPkujQwfX2vYdQCtzlmW/776mhn6puiVGqWSB4EgK
HZwHegxHPTQlpru0/oGbZSV5c6TmJ5Ju1T4kL6kkSviRi5x1I9scy6KMgAP5xEjc
/3+uvxdCeNRU0yM47pZIcs+9b1jzgr6UZaYnffiY/ADB30RqkYJfbAvxsi7/aSYJ
yTzBytXX1Q5dTsdRKJEdpk4ZY80iw+Mh+tAq7yWAWYJJLkagchliNSSC76qrXvZ0
ntoix7ghx5qfZWfRBBAL5hY5RJSAIGq9YOw2WKA3PfH/cZ4B0AutxE5OC/xzoTXL
hasjbGwhyA/Irw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:48 2025 by rpki-client