Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: dWs9xsSH3MLDbzZcamBuMEZ7LlSV9viODvBjSW/7jls=
Subject key identifier: 97:1B:DB:7A:49:21:9E:34:B9:1E:9C:6E:F3:59:D9:D7:FA:54:1D:95
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 019F946DBBA02E4E8778DCC3119CC6066393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 0E87
Signing time: Fri 24 Jul 2026 14:00:47 +0000
Manifest this update: Fri 24 Jul 2026 14:00:47 +0000
Manifest next update: Sat 25 Jul 2026 14:00:47 +0000
Files and hashes: 1: UvulvKNPlQ3DW7OFO84K_Dsu4xs.roa (hash: sbA5hsgIPFLxYaMguAK/fWfL4FZLjCI5T2S6fCZgzls=)
2: oAm1gK3PlSJ8uZpz6kuGG8_RDis.roa (hash: qyWcJhPl+RateZRWaHU5ZN6wmeIFgslBGIm52luDwjg=)
3: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: NiKmDvvmFheN17ClH/QVUzjF27/oytE/j3Utg5knlxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:bb:a0:2e:4e:87:78:dc:c3:11:9c:c6:06:63:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Jul 24 14:00:47 2026 GMT
Not After : Jul 25 14:00:47 2026 GMT
Subject: CN=971bdb7a49219e34b91e9c6ef359d9d7fa541d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:0d:8c:cb:e4:ca:c8:63:fd:26:94:a4:5d:
7c:bb:18:2e:60:6f:81:21:5f:52:60:c3:07:89:94:
c4:a2:3f:25:e4:9c:77:ca:be:ee:3f:2b:d3:5b:a3:
4b:99:23:8e:66:12:6c:7e:39:61:54:3c:9d:2c:6a:
fd:ac:bf:9a:2e:c3:91:51:b4:eb:e5:9d:20:5a:02:
9f:33:bf:1e:ae:ed:5b:78:ea:08:f2:61:17:2f:7f:
53:97:b8:7f:6d:37:7b:5e:de:21:81:36:c3:1d:06:
31:71:6b:13:dd:ee:96:17:f4:5a:aa:1a:2d:be:b9:
f7:19:59:72:38:74:7c:78:1a:0b:3a:b4:aa:a1:9c:
dc:ae:19:2f:86:a7:00:62:2d:dd:01:63:3f:d0:e1:
21:1f:89:2c:d4:d8:29:e7:58:cb:d1:62:2d:cd:8d:
dc:63:14:81:a0:85:09:cd:e0:7f:07:9a:2d:a4:21:
e8:bb:8a:52:24:2a:ab:f6:a8:b7:a9:29:51:f8:38:
4f:03:bd:0a:94:f7:62:8a:09:a6:0a:e5:1f:a3:01:
9d:91:96:e7:a5:95:33:10:9b:e2:8a:45:9d:db:9c:
a6:ff:e7:28:f4:16:f3:92:be:2c:ab:33:57:e9:5d:
b0:62:b0:50:30:6e:76:5b:b9:28:18:d8:56:d5:6d:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1B:DB:7A:49:21:9E:34:B9:1E:9C:6E:F3:59:D9:D7:FA:54:1D:95
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:66:05:b1:df:f8:17:5b:71:b1:66:bd:a0:70:b3:e3:a7:2e:
a2:68:e3:b7:1e:e7:04:99:da:e7:27:f8:03:15:95:22:6c:87:
ed:a1:64:da:8b:17:58:99:bd:63:06:4d:94:53:aa:a5:a7:72:
a8:14:2e:45:f0:dd:68:d7:d4:7f:4f:f9:6d:c1:fd:b9:eb:10:
d1:01:fd:0f:3b:34:d7:44:b3:18:c1:f9:d1:19:fb:fa:27:f9:
d5:12:d8:e5:d4:62:d7:12:24:1e:de:24:d8:0e:fe:be:eb:90:
dd:aa:64:bd:8a:b3:cb:f7:17:62:1e:d7:f7:5a:ef:01:98:53:
d0:49:c4:cb:e0:ea:f8:c0:20:51:81:b8:57:6a:62:5c:3b:61:
e0:3e:4e:a6:81:87:17:be:0a:72:12:4c:3b:be:23:23:5f:c0:
e2:3f:4e:b0:94:0c:32:67:0a:47:8b:1f:2e:94:bc:78:45:cf:
ae:13:40:30:ab:53:98:7d:60:c0:eb:ef:80:0e:1f:67:63:26:
84:35:4e:e7:89:20:85:1c:5c:73:26:cc:38:0e:d6:b6:fa:d1:
1e:f3:09:3d:3f:e5:6f:30:c1:b6:8c:ed:e5:16:06:0c:b0:a5:
52:bd:1f:78:da:53:4b:8c:03:94:c3:a1:cc:ce:9b:58:30:7e:
f9:d5:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:31 2026 by rpki-client