Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: ANCJDVhsjpstGN2m2+4xMnf9w6uA4SphZOmFwodjda4=
Subject key identifier: 33:37:2A:D5:E6:16:33:BA:4C:5B:54:24:E1:75:A8:49:E8:89:D5:5A
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 019E1DC7339C4596E957C81C8FD93A3982A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 0DC5
Signing time: Tue 12 May 2026 20:00:54 +0000
Manifest this update: Tue 12 May 2026 20:00:54 +0000
Manifest next update: Wed 13 May 2026 20:00:54 +0000
Files and hashes: 1: UvulvKNPlQ3DW7OFO84K_Dsu4xs.roa (hash: sbA5hsgIPFLxYaMguAK/fWfL4FZLjCI5T2S6fCZgzls=)
2: oAm1gK3PlSJ8uZpz6kuGG8_RDis.roa (hash: qyWcJhPl+RateZRWaHU5ZN6wmeIFgslBGIm52luDwjg=)
3: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: 34AhY7N9CiLljeAGsr3hwYfAXa3qqfD7eYnsAfhr4Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:33:9c:45:96:e9:57:c8:1c:8f:d9:3a:39:82:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: May 12 20:00:54 2026 GMT
Not After : May 13 20:00:54 2026 GMT
Subject: CN=33372ad5e61633ba4c5b5424e175a849e889d55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:c6:e1:12:73:fe:bc:48:8d:bd:d0:30:71:
40:57:b2:dd:56:9a:d3:da:9d:03:17:e6:69:5f:3b:
07:33:c2:75:1e:43:7c:1f:40:24:a0:df:75:6e:32:
a9:27:fb:39:31:91:03:3b:4b:43:5a:72:bb:18:54:
67:ca:6b:76:63:34:d8:18:c5:2c:c7:be:5f:88:73:
0f:fe:a9:e1:13:7f:65:a6:ac:e9:ae:b0:16:7a:13:
89:14:44:5f:da:23:f6:9a:07:19:93:40:0c:e8:38:
fc:4c:4a:df:f4:0e:55:be:c3:68:ea:69:34:a7:5e:
30:db:90:53:a4:04:f6:e3:a0:e2:b5:1a:35:46:27:
4c:3a:4f:de:6f:e5:56:3e:fb:e8:8c:d1:bf:0b:6b:
60:6d:86:64:d5:dd:a8:21:29:81:4e:b2:da:b3:b7:
5f:44:0d:eb:3e:52:71:1e:86:6f:d3:35:3f:aa:a5:
49:7f:04:c3:03:bf:1d:67:26:e7:ae:57:e1:78:fc:
33:15:3c:b7:b2:08:ac:46:77:99:48:19:91:4f:6e:
ac:78:b7:68:92:43:d7:ed:fb:89:f6:a2:01:5f:88:
a0:98:39:4f:2e:df:c1:50:be:d8:9e:9e:65:45:d7:
e0:9a:ae:07:11:b1:ba:89:82:60:1f:95:a4:a4:9d:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:2A:D5:E6:16:33:BA:4C:5B:54:24:E1:75:A8:49:E8:89:D5:5A
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ee:21:72:cd:b5:2b:30:1f:4a:a7:3e:5f:98:e8:8c:49:47:
71:17:f0:ba:42:dc:b7:84:9b:9a:37:1c:e7:6c:cf:4f:1d:64:
22:54:d7:bc:13:09:0f:71:a6:95:8f:b5:eb:59:47:99:e4:de:
ae:5e:fc:cf:86:d3:09:45:34:41:51:6e:9f:9a:a7:96:75:75:
ab:66:c9:ee:fe:2d:dd:82:64:7c:0f:2f:83:c5:72:df:78:6e:
19:35:5a:e8:5c:11:89:19:d9:7b:8c:c8:6e:a7:10:1b:51:12:
92:bc:ec:e1:46:32:77:42:e9:58:32:e7:c7:9f:d8:5f:9b:f6:
ae:61:9b:99:3c:66:03:a0:b2:9b:5b:54:e1:65:02:01:c8:fa:
07:a1:1d:e9:16:a7:79:86:5d:49:ca:42:60:19:02:c9:9c:00:
f9:18:7d:2c:c3:e7:62:14:13:ac:a4:3c:d1:12:cb:0a:49:51:
98:37:60:37:88:b3:df:7b:82:30:5e:0b:2a:6c:19:74:3f:6d:
bf:4f:d7:17:59:5a:ce:89:46:89:8a:68:13:10:4e:45:97:11:
b0:5e:5d:6b:87:96:92:29:13:55:e3:1f:70:4c:96:64:a1:86:
18:5d:91:2e:2e:c1:ad:1e:ae:53:91:56:6c:0f:67:b1:b7:5a:
4a:0b:28:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:37:03 2026 by rpki-client