Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
File: opu5R2dQ7A4mIqUF5RUS729aW7Q.mft (raw, json)
Hash identifier: mensErnZJYZUZTkPvOUjn8edhNuGKgaQA5J6uJf5TWE=
Subject key identifier: DF:57:A0:6B:22:A4:29:50:B2:33:D5:C0:10:81:FF:0C:B8:24:04:04
Authority key identifier: A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
Certificate issuer: /CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Certificate serial: 01A0EE1D5DA63C40D11C173B0C5B95A6D462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
Manifest number: 026D
Signing time: Tue 29 Sep 2026 17:01:36 +0000
Manifest this update: Tue 29 Sep 2026 17:01:36 +0000
Manifest next update: Wed 30 Sep 2026 17:01:36 +0000
Files and hashes: 1: gSw2I7cSynhsa1v5yL1GK2liJV0.roa (hash: OgZIv5antAo192tWCR26SC8ruKYKpzX9vhQDQJpKYWw=)
2: j3tFGt__mjBy6A4laCBtTNakkR0.asa (hash: Ya4LiyF5bRj+tvHg5hNrH2HeLbopOCsjFcZajvf8SKE=)
3: opu5R2dQ7A4mIqUF5RUS729aW7Q.crl (hash: cFyqBSA6C5IelFnnu3CHBPSzmi+Un7m1DCDvrz1D0ts=)
4: x3mNd6D6usA5k_7l-emYO2TtcmI.roa (hash: kwiTjzAM2+mXC68INamqfljbqxN1Ud0ltCywsiZuaEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:5d:a6:3c:40:d1:1c:17:3b:0c:5b:95:a6:d4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Validity
Not Before: Sep 29 17:01:36 2026 GMT
Not After : Sep 30 17:01:36 2026 GMT
Subject: CN=df57a06b22a42950b233d5c01081ff0cb8240404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:d0:ff:3c:25:35:77:3b:e6:19:57:b7:cc:
5c:eb:42:e3:91:11:40:42:87:ee:f1:24:8f:ca:de:
42:a0:fd:79:8c:70:f2:a8:fd:8c:56:ef:08:15:dc:
00:e7:b4:b0:de:c2:1e:0c:5c:b6:42:b1:54:33:cb:
fc:cd:b7:d5:20:ee:18:cb:1d:ab:c1:0c:15:2b:02:
af:e4:87:a9:c1:56:74:9e:f2:6c:f4:f0:3c:60:97:
18:35:c4:d7:70:0c:d4:13:b3:af:88:09:95:1a:52:
74:e3:19:11:9a:70:bf:a6:e0:d0:9a:29:80:0d:ba:
62:07:d5:c7:43:1d:8d:60:d1:3f:29:9f:fe:d1:cc:
83:d8:e0:96:9a:3b:b1:7f:ba:2c:21:b6:12:a0:c6:
fa:5c:b3:05:2e:d8:36:72:de:4f:3f:32:0e:f6:c3:
2d:96:1e:97:05:b3:0b:fb:bf:7e:dd:39:13:69:de:
26:f0:d3:cf:aa:5e:85:15:91:c7:1c:79:5e:a7:a8:
4d:e3:c2:16:c2:a7:99:6b:9d:e7:7e:29:74:52:59:
8a:e4:2b:eb:42:ba:2c:77:89:15:7c:1c:e4:2d:0c:
06:f1:c5:8f:e6:2a:39:73:39:c0:51:9c:38:c8:54:
68:a5:35:c0:14:00:b1:ef:ce:1d:06:32:84:bd:33:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:A0:6B:22:A4:29:50:B2:33:D5:C0:10:81:FF:0C:B8:24:04:04
X509v3 Authority Key Identifier:
keyid:A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:67:c2:4a:f5:27:32:af:71:23:51:3a:de:99:b9:9c:6b:a1:
c2:0a:00:2d:ed:19:dd:4c:fd:f6:47:55:7e:95:f0:1a:b2:1d:
9b:ae:ff:d6:91:67:41:59:2c:72:ba:c3:cf:29:23:0f:2f:29:
b8:0d:2a:ec:3a:92:2b:5f:ab:07:69:fb:9c:02:10:f1:2d:be:
42:c3:a1:52:89:d7:08:75:4d:fd:fa:68:7e:43:45:b0:2e:7b:
d6:ea:4c:22:8a:63:da:df:3a:62:25:38:f8:4a:87:20:29:aa:
11:47:51:41:91:a1:97:69:e9:c1:80:b2:15:d7:b5:f5:05:b6:
6c:db:cf:5a:54:d1:0e:7e:bb:ee:fb:72:de:b4:23:df:b0:e7:
d9:a4:dd:5b:5a:91:21:b7:f8:4c:d2:1e:b9:46:d7:6b:e4:0b:
69:20:4d:6d:0c:c1:e8:22:13:9e:90:0f:01:5c:17:79:c0:8b:
68:87:5c:f2:f0:e1:28:ac:2d:18:68:c9:26:61:97:b5:7c:40:
a3:90:6c:af:e2:fc:de:3f:2f:10:93:bd:ba:a6:6a:78:87:0a:
0b:54:b5:64:7f:79:aa:a9:80:15:f1:9e:27:cd:d7:35:f9:ac:
85:9d:ab:21:22:09:70:5b:eb:86:af:e6:a5:3f:b1:95:57:b2:
2d:d1:0a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuHV2mPEDRHBc7DFuVptRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOWJiOTQ3Njc1MGVjMGUyNjIyYTUwNWU1MTUxMmVmNmY1
YTViYjQwHhcNMjYwOTI5MTcwMTM2WhcNMjYwOTMwMTcwMTM2WjAzMTEwLwYDVQQD
EyhkZjU3YTA2YjIyYTQyOTUwYjIzM2Q1YzAxMDgxZmYwY2I4MjQwNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojHQ/zwlNXc75hlXt8xc60LjkRFA
Qofu8SSPyt5CoP15jHDyqP2MVu8IFdwA57Sw3sIeDFy2QrFUM8v8zbfVIO4Yyx2r
wQwVKwKv5IepwVZ0nvJs9PA8YJcYNcTXcAzUE7OviAmVGlJ04xkRmnC/puDQmimA
DbpiB9XHQx2NYNE/KZ/+0cyD2OCWmjuxf7osIbYSoMb6XLMFLtg2ct5PPzIO9sMt
lh6XBbML+79+3TkTad4m8NPPql6FFZHHHHlep6hN48IWwqeZa53nfil0UlmK5Cvr
Qrosd4kVfBzkLQwG8cWP5io5cznAUZw4yFRopTXAFACx784dBjKEvTMgZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9XoGsipClQsjPVwBCB/wy4JAQEMB8GA1UdIwQY
MBaAFKKbuUdnUOwOJiKlBeUVEu9vWlu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3B1NVIyZFE3QTRtSXFVRjVSVVM3MjlhVzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jMTE4MmUtZTM4Ny00YzgzLTk3MjYt
Y2FkOTUxMDIwNmFiLzEvb3B1NVIyZFE3QTRtSXFVRjVSVVM3MjlhVzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jMTE4MmUtZTM4Ny00YzgzLTk3MjYtY2FkOTUxMDIwNmFi
LzEvb3B1NVIyZFE3QTRtSXFVRjVSVVM3MjlhVzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWfCSvUn
Mq9xI1E63pm5nGuhwgoALe0Z3Uz99kdVfpXwGrIdm67/1pFnQVkscrrDzykjDy8p
uA0q7DqSK1+rB2n7nAIQ8S2+QsOhUonXCHVN/fpofkNFsC571upMIopj2t86YiU4
+EqHICmqEUdRQZGhl2npwYCyFde19QW2bNvPWlTRDn677vty3rQj37Dn2aTdW1qR
Ibf4TNIeuUbXa+QLaSBNbQzB6CITnpAPAVwXecCLaIdc8vDhKKwtGGjJJmGXtXxA
o5Bsr+L83j8vEJO9uqZqeIcKC1S1ZH95qqmAFfGeJ83XNfmshZ2rISIJcFvrhq/m
pT+xlVeyLdEKYg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 03:53:46 2026 by rpki-client