Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: zuMVgnt+zN5S58qyWKqN0tWTfgwQJ/rXJzByaQwSULc=
Subject key identifier: A5:09:DE:ED:6C:90:B4:1C:C5:1C:EC:93:C3:21:45:17:51:15:1B:6F
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 01A10BB8E4F57DFED06B8D64C502E7069179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 1A8C
Signing time: Mon 05 Oct 2026 11:00:28 +0000
Manifest this update: Mon 05 Oct 2026 11:00:28 +0000
Manifest next update: Tue 06 Oct 2026 11:00:28 +0000
Files and hashes: 1: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: YWUT5qEOo9xWZtFSn3fFC58aw7fsUpLdwvGsG8G+2Qg=)
2: pm79H7mwduu7mnhDJctsn-uYWPE.roa (hash: ED5J8d3NpU/HwXaPFnumSsfSWb72ZAcfll3lZasNaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:b8:e4:f5:7d:fe:d0:6b:8d:64:c5:02:e7:06:91:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Oct 5 11:00:28 2026 GMT
Not After : Oct 6 11:00:28 2026 GMT
Subject: CN=a509deed6c90b41cc51cec93c321451751151b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:b1:d7:b0:ac:de:47:45:c0:c7:e6:d7:7c:
59:10:b0:25:ed:58:80:04:74:20:ca:64:e8:a6:fe:
b0:5e:f4:64:86:f4:30:d5:1f:2e:54:7a:d9:b0:e0:
c8:9e:65:20:79:0d:32:7b:46:19:d6:01:3e:f1:35:
f0:59:85:26:71:fd:eb:ee:81:66:10:71:ea:ea:b5:
ab:4f:50:87:d6:b2:a4:f7:be:3b:31:e3:21:e4:ba:
f7:42:c9:36:9f:b0:53:4a:b8:81:ba:2f:cb:04:01:
57:6e:84:86:3d:cd:62:a0:1f:bb:d2:d0:4c:aa:38:
e6:d1:51:02:e6:3c:6b:77:86:0d:40:ef:8f:ae:2e:
23:d6:19:2e:43:85:53:41:f6:54:cf:5c:70:f9:3f:
40:c8:dc:c4:4f:16:5d:c4:b8:36:23:fb:96:73:d2:
6c:9e:c8:1a:81:12:b2:90:25:70:88:fe:d8:1c:fc:
62:80:fc:85:55:ba:bf:70:4b:86:b1:52:72:fa:7e:
58:eb:51:d4:9f:1a:c6:be:f9:5f:21:a9:da:69:7d:
c5:40:d4:46:37:47:29:f5:37:64:b5:99:0f:17:b3:
24:db:cc:59:ab:9e:0b:c8:f8:10:9a:3c:2f:03:c8:
a7:1b:91:88:7c:34:06:80:85:21:7b:44:52:44:b4:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:DE:ED:6C:90:B4:1C:C5:1C:EC:93:C3:21:45:17:51:15:1B:6F
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5e:83:57:f7:80:a0:4a:4a:ca:a9:fc:00:b8:be:51:7c:b0:
4d:ff:0c:b6:f2:13:a4:2c:96:a7:5a:03:30:c0:16:6d:47:2d:
bb:31:b7:0a:af:77:7a:99:6b:7c:fc:56:f2:51:e6:43:a2:db:
c3:ee:09:e4:64:fc:ea:3e:4d:86:04:c3:6e:04:92:76:1a:a1:
6a:7d:5f:1f:58:f3:b9:23:36:00:c8:43:fb:b0:24:68:1b:55:
55:a2:e6:13:c5:16:70:be:d7:72:c8:58:65:12:db:73:ca:df:
ae:34:c7:3e:f4:15:52:2d:fd:b0:78:16:c0:c7:35:c4:6c:03:
5a:8a:e7:a7:0f:6a:14:5e:93:68:9a:15:55:5d:88:ac:d2:ea:
5c:8d:70:99:cb:59:9e:86:20:36:64:50:f4:7d:c8:fc:74:5e:
fa:6d:8d:8a:2a:75:17:71:c7:5f:97:2a:e7:35:a4:9d:43:f2:
94:8c:25:ad:a5:e7:4a:d2:8d:85:15:70:f1:97:31:d1:8b:9f:
3e:42:1c:db:03:cc:9c:43:50:b8:dd:94:ec:dc:5f:8b:97:32:
f5:58:84:82:ff:ac:ec:4d:79:20:7c:f6:a2:30:22:5d:78:03:
a7:b1:d5:d7:3e:1f:77:6d:04:9e:7c:34:f1:38:ea:3b:8a:05:
35:d8:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:45:21 2026 by rpki-client