Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier: VcoEd5dvllfLK5o1ltoW6dW3aoEd9y+8yrrsjiicau8=
Subject key identifier: FE:DB:98:14:6D:06:C4:CA:FF:04:C0:4E:E8:F6:C6:73:1C:3B:A7:28
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial: 019D25BA9F776483FF82F1206C2810C68CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number: 07EA
Signing time: Wed 25 Mar 2026 16:01:20 +0000
Manifest this update: Wed 25 Mar 2026 16:01:20 +0000
Manifest next update: Thu 26 Mar 2026 16:01:20 +0000
Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: RoqVxJStlo5VQfES2iRUkwxZwZeLDe5Ji3MIelxPas4=)
2: OmwLJQSTnBEef8YiJyy3vHeNNZ0.roa (hash: nXRJF8GSGVftBJX0NpNorUWjicV35MGzGuSyOIxO7fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9f:77:64:83:ff:82:f1:20:6c:28:10:c6:8c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Validity
Not Before: Mar 25 16:01:20 2026 GMT
Not After : Mar 26 16:01:20 2026 GMT
Subject: CN=fedb98146d06c4caff04c04ee8f6c6731c3ba728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:5e:f4:ed:f4:9f:1f:84:f3:47:d5:0e:2c:
b7:a2:c9:fb:3a:07:41:48:56:01:1a:b6:b8:2f:d7:
48:02:c7:b3:38:60:f7:da:bd:5a:1d:98:5b:e4:5d:
d0:83:b5:8e:46:67:15:2a:52:9b:2a:e1:53:56:98:
9a:9f:d8:0b:48:18:8f:f3:f0:d0:ae:fe:79:ee:c5:
d9:13:be:76:9b:fd:04:22:39:14:55:f4:13:81:bf:
4b:99:d8:82:60:c8:75:90:d6:a9:c3:be:3f:88:a8:
fd:78:46:90:5d:e1:43:2d:8d:9c:04:ee:ef:32:51:
57:2b:64:93:d9:9d:1c:1e:29:6f:96:23:dc:19:3b:
e5:cb:da:0d:04:5f:4d:23:32:e8:0e:60:9f:da:09:
9c:1c:31:0f:16:89:66:d9:ee:8e:d9:f5:93:66:0b:
8a:8f:4b:99:e8:14:0f:ad:26:5d:53:88:6a:02:d2:
b7:27:11:94:e4:a5:40:a5:5f:13:39:a9:63:e5:43:
ef:0b:0e:b9:14:1c:49:c5:a9:44:c3:ea:fd:d2:45:
ef:3c:0d:cc:eb:46:65:20:a2:b6:f9:62:bd:25:b5:
2b:6b:11:c0:a9:2e:e2:34:a2:6f:af:38:83:64:bd:
71:72:a5:ce:2d:fe:2c:33:43:e1:a1:08:d6:65:4f:
4a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:98:14:6D:06:C4:CA:FF:04:C0:4E:E8:F6:C6:73:1C:3B:A7:28
X509v3 Authority Key Identifier:
keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:47:7b:fc:40:aa:7b:cf:47:a0:86:90:4d:c1:cb:46:6a:bb:
ed:b8:13:78:d4:9d:ba:a9:ce:a6:37:39:0f:ed:cd:53:b9:73:
de:ba:b9:20:da:b7:a6:f1:30:99:0b:aa:17:75:7f:8e:2f:b0:
31:10:5e:47:a7:5b:72:7e:24:b9:43:23:89:44:2c:f7:94:b1:
51:7a:82:82:f7:68:05:b1:a2:fb:91:21:a2:6d:3a:f6:be:0a:
67:92:c6:ef:27:be:dc:fa:df:93:39:f3:5a:e6:3e:fc:53:76:
a9:e8:6e:81:20:5a:ec:30:80:e6:a8:4f:f1:ac:0e:49:e6:d3:
df:36:f5:be:e6:7a:4a:e8:6e:b5:7b:1d:cd:fb:bf:3c:38:0c:
ca:39:d9:05:cb:98:64:67:c3:49:cf:fc:1b:7d:7a:43:3c:c1:
69:21:5e:c0:c8:57:69:07:fa:36:88:89:bb:30:05:88:3e:aa:
ee:f7:57:c5:63:c3:77:73:a7:e1:58:e0:ed:f9:40:b0:19:33:
fc:b0:e8:71:f2:67:67:3d:83:07:b8:db:53:c5:2f:df:ce:a7:
38:46:73:0e:97:7b:58:81:10:8b:bc:73:42:f6:28:f2:ff:6a:
5e:61:10:6a:39:e1:e5:17:03:67:2b:49:94:38:0e:de:1a:93:
b5:c8:53:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:58 2026 by rpki-client