Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: hogqbngqC3yoc2VKA4b07o8WbMWGuCU7Phyrtt/5I3A=
Subject key identifier: E3:DA:DA:30:65:4E:87:15:2E:24:C7:9D:D0:FA:DA:F1:7B:69:38:1F
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 01A0D6B9A7834E99236869CEF6AF1F46DB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 0F2E
Signing time: Fri 25 Sep 2026 04:01:26 +0000
Manifest this update: Fri 25 Sep 2026 04:01:26 +0000
Manifest next update: Sat 26 Sep 2026 04:01:26 +0000
Files and hashes: 1: OOTmSDz9ct7BasuGsC3EgT-bcQY.roa (hash: onBcNIZoRGO8OodD7K7EyDioCxf28CvQsMXqlTs+2wo=)
2: UvulvKNPlQ3DW7OFO84K_Dsu4xs.roa (hash: sbA5hsgIPFLxYaMguAK/fWfL4FZLjCI5T2S6fCZgzls=)
3: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: FYR0X5JNr31Ogu0JR55rmM6jMPOwSLx7HfXVfI1IWrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:a7:83:4e:99:23:68:69:ce:f6:af:1f:46:db:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Sep 25 04:01:26 2026 GMT
Not After : Sep 26 04:01:26 2026 GMT
Subject: CN=e3dada30654e87152e24c79dd0fadaf17b69381f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:20:00:39:32:58:76:ae:6b:91:21:02:32:
61:6a:24:02:1e:21:1e:c6:99:4d:ab:de:15:f0:8a:
c9:7f:3f:ff:48:ff:46:aa:ce:b4:c2:94:2f:c7:f3:
8f:0c:1d:cb:bd:38:d2:d4:c5:ab:79:dd:b7:0a:18:
8c:02:90:2a:36:86:bd:e2:a3:a1:e9:94:bf:77:a0:
e5:ef:68:45:48:e5:bd:65:05:d0:ed:e0:15:97:e9:
a2:91:ab:1b:9c:49:dd:14:29:1e:16:38:22:fe:b7:
75:84:c9:45:d9:56:22:68:dc:e2:e0:8d:7b:85:96:
1b:43:cb:d2:32:95:11:6c:31:37:84:cb:cd:48:3c:
74:b5:22:0e:45:ab:36:b5:15:06:64:1f:b7:06:57:
00:73:c9:40:db:b7:e9:dd:98:5e:0e:2a:fe:2f:c1:
32:4c:96:d4:44:a9:f9:4b:82:41:d7:57:ec:ae:4d:
5b:10:4a:56:06:2d:c1:cc:e8:4d:3c:d9:ec:79:68:
f8:a9:d7:b6:6e:ed:e6:a7:4b:d4:45:8e:db:06:7b:
1c:7b:5e:22:f9:c0:8a:13:f6:e4:d6:08:3d:6e:8d:
77:2d:c7:8c:cd:75:33:40:22:43:f3:aa:cc:eb:d3:
8c:c7:de:69:90:12:4d:09:13:f2:35:d2:bc:ee:6d:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:DA:30:65:4E:87:15:2E:24:C7:9D:D0:FA:DA:F1:7B:69:38:1F
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:73:9f:50:9f:cc:46:0b:8d:79:99:d5:cc:a2:79:ea:21:fd:
75:36:4f:95:24:75:d6:80:66:37:39:e7:7d:f2:a9:17:49:be:
ab:64:5c:3f:2d:71:9d:24:6d:f4:f3:07:79:5e:ac:40:66:ba:
5b:13:a8:92:23:7c:6a:fc:72:99:2c:a3:e2:90:95:4f:34:e1:
2f:89:7f:95:01:8f:e2:d8:39:5f:ab:d1:af:96:cc:2b:d7:c3:
5c:1b:9b:62:62:b4:2a:50:c0:64:cf:8d:16:3e:df:51:43:bb:
e5:76:39:8d:cd:46:1d:79:5e:be:8b:d7:b5:91:8a:0f:c9:00:
c9:2d:4c:53:c0:4c:4c:08:37:c4:c0:ff:b6:b5:4b:3b:0a:ca:
aa:9d:4c:5a:09:c8:8b:57:50:a5:50:8b:85:c8:44:82:b1:3d:
04:49:90:ba:fc:52:ce:bd:22:2f:ae:1e:91:7c:66:48:84:b8:
99:dd:24:bc:98:b4:01:13:ed:a6:56:c6:cd:e0:94:c9:a4:31:
34:b0:e1:3e:1f:ef:68:1c:fa:d0:be:17:02:5c:46:74:7f:42:
99:21:ac:b1:72:bc:21:2b:36:96:45:8f:ba:19:cc:fa:36:8b:
a1:b3:6a:bc:b0:a6:09:ba:f8:c8:e4:ac:ff:66:0c:45:88:e2:
1c:6a:4e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWuaeDTpkjaGnO9q8fRttlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGEyOWM2MTM4ZTJkOTNkNTRhMzYzMjhiOTRjYjFmOGEz
ODJhNmIwHhcNMjYwOTI1MDQwMTI2WhcNMjYwOTI2MDQwMTI2WjAzMTEwLwYDVQQD
EyhlM2RhZGEzMDY1NGU4NzE1MmUyNGM3OWRkMGZhZGFmMTdiNjkzODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/EgADkyWHaua5EhAjJhaiQCHiEe
xplNq94V8IrJfz//SP9Gqs60wpQvx/OPDB3LvTjS1MWred23ChiMApAqNoa94qOh
6ZS/d6Dl72hFSOW9ZQXQ7eAVl+mikasbnEndFCkeFjgi/rd1hMlF2VYiaNzi4I17
hZYbQ8vSMpURbDE3hMvNSDx0tSIORas2tRUGZB+3BlcAc8lA27fp3ZheDir+L8Ey
TJbURKn5S4JB11fsrk1bEEpWBi3BzOhNPNnseWj4qde2bu3mp0vURY7bBnsce14i
+cCKE/bk1gg9bo13LceMzXUzQCJD86rM69OMx95pkBJNCRPyNdK87m2yZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPa2jBlTocVLiTHndD62vF7aTgfMB8GA1UdIwQY
MBaAFK5KKcYTji2T1Uo2MouUyx+KOCprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQt
MTM0MDFkMWYyMmQyLzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQtMTM0MDFkMWYyMmQy
LzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXOfUJ/M
RguNeZnVzKJ56iH9dTZPlSR11oBmNznnffKpF0m+q2RcPy1xnSRt9PMHeV6sQGa6
WxOokiN8avxymSyj4pCVTzThL4l/lQGP4tg5X6vRr5bMK9fDXBubYmK0KlDAZM+N
Fj7fUUO75XY5jc1GHXlevovXtZGKD8kAyS1MU8BMTAg3xMD/trVLOwrKqp1MWgnI
i1dQpVCLhchEgrE9BEmQuvxSzr0iL64ekXxmSIS4md0kvJi0ARPtplbGzeCUyaQx
NLDhPh/vaBz60L4XAlxGdH9CmSGssXK8ISs2lkWPuhnM+jaLobNqvLCmCbr4yOSs
/2YMRYjiHGpOVw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:55:42 2026 by rpki-client