Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: mMacBmIIoJxYBXJ2s8fCSWk1RqUas1EAlZQi5fvYH/A=
Subject key identifier: 4B:FE:E8:F5:AE:44:37:CB:2C:6B:74:7E:07:AE:99:D9:05:75:C6:5A
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 019D269610935E33D4477A65483AB0EBDFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 0D45
Signing time: Wed 25 Mar 2026 20:01:01 +0000
Manifest this update: Wed 25 Mar 2026 20:01:01 +0000
Manifest next update: Thu 26 Mar 2026 20:01:01 +0000
Files and hashes: 1: UvulvKNPlQ3DW7OFO84K_Dsu4xs.roa (hash: sbA5hsgIPFLxYaMguAK/fWfL4FZLjCI5T2S6fCZgzls=)
2: oAm1gK3PlSJ8uZpz6kuGG8_RDis.roa (hash: qyWcJhPl+RateZRWaHU5ZN6wmeIFgslBGIm52luDwjg=)
3: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: mObCVxJPlK4GZbMW0tojchnG9sWKDtFlrvMANt+1Sug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:10:93:5e:33:d4:47:7a:65:48:3a:b0:eb:df:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Mar 25 20:01:01 2026 GMT
Not After : Mar 26 20:01:01 2026 GMT
Subject: CN=4bfee8f5ae4437cb2c6b747e07ae99d90575c65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:3f:8c:6e:8b:a6:d6:75:c7:c2:b9:bc:cc:
75:87:d6:e6:a0:18:94:dc:f2:5f:8b:51:79:6e:27:
db:f3:bd:05:e5:37:d9:33:53:06:60:78:61:3f:4b:
ea:8a:82:fe:19:96:4c:d3:fe:c0:5c:c9:63:e1:12:
fc:85:2f:10:6d:bc:32:43:77:64:e1:c5:75:88:62:
22:43:3f:e0:19:56:2e:32:96:13:81:6e:cf:0c:67:
00:e4:90:dd:9b:44:20:6d:94:40:33:57:ec:c6:cd:
10:48:9f:de:48:49:29:63:59:f1:06:17:f5:20:40:
ba:67:39:f1:f1:ad:b4:82:cd:0b:21:20:7d:fd:0b:
5f:72:c2:74:d0:4c:18:5e:df:f4:0e:e1:98:90:20:
21:07:d5:2f:99:64:5c:71:72:01:72:e9:29:7f:4c:
ef:91:0e:72:bf:70:33:53:95:10:3c:ee:3a:1a:ea:
b8:6b:4c:89:9d:c4:26:d8:02:f5:d2:a0:a4:17:9e:
f4:ea:8d:14:cd:9c:f3:5d:8e:14:2c:02:50:9b:28:
b0:6d:42:ae:d3:c2:ef:31:64:76:9c:a1:97:7f:fb:
4d:a2:e7:b4:19:03:82:21:95:48:65:55:a0:49:a1:
b9:c4:f4:ab:dd:98:d4:8a:af:6e:a0:42:cb:a7:30:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FE:E8:F5:AE:44:37:CB:2C:6B:74:7E:07:AE:99:D9:05:75:C6:5A
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:85:b7:ae:0e:77:10:65:5d:e8:f5:e1:c5:bd:14:1b:04:bd:
67:16:b2:25:74:1b:6c:ac:37:88:87:9d:46:56:bd:57:02:53:
70:b8:da:3e:d6:53:1a:59:31:ac:9a:77:a7:b5:8b:41:31:97:
fb:8f:20:73:ed:17:3a:01:46:b3:77:3e:8b:52:bf:87:ef:da:
91:e7:dc:1f:c9:1f:3f:32:17:27:16:80:39:1d:fe:f7:21:66:
fd:d2:5f:2c:c9:6c:d2:12:61:9e:4b:b6:35:5f:86:49:47:ad:
32:77:30:8c:fb:bf:24:d1:a9:5c:8f:e9:26:68:25:83:88:de:
1b:d1:23:6c:dc:2b:1c:d7:ed:18:4a:ce:11:83:5d:75:f0:ee:
c6:83:96:21:71:1d:54:c9:15:67:2e:2a:b0:a5:d9:9b:79:2d:
98:5a:fe:42:45:b4:fe:c7:06:29:69:b1:06:49:19:19:18:96:
95:2c:30:7a:fc:a4:3e:e0:94:e0:88:2d:76:b7:e0:ca:85:3d:
da:f4:52:6c:b1:97:ba:0d:45:6d:fb:c7:10:48:cc:e0:18:b5:
96:26:92:e7:9a:85:c9:d9:a0:ad:8c:03:92:95:54:6d:4c:ca:
b4:a3:2d:cf:91:e8:d5:7a:f0:d0:3a:85:37:53:fb:17:d5:83:
87:52:84:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:38 2026 by rpki-client