Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
File: opu5R2dQ7A4mIqUF5RUS729aW7Q.mft (raw, json)
Hash identifier: Zxv8UFGoB9bD/qXei55lsJMiSJFROlphUwGsUap8LpI=
Subject key identifier: EE:35:66:94:39:60:66:15:A2:C3:EC:19:FA:BC:59:57:3F:21:BB:84
Authority key identifier: A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
Certificate issuer: /CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Certificate serial: 019D24DF16677A4FF8A1976EF1C72735ABD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
Manifest number: 77
Signing time: Wed 25 Mar 2026 12:01:33 +0000
Manifest this update: Wed 25 Mar 2026 12:01:33 +0000
Manifest next update: Thu 26 Mar 2026 12:01:33 +0000
Files and hashes: 1: gSw2I7cSynhsa1v5yL1GK2liJV0.roa (hash: OgZIv5antAo192tWCR26SC8ruKYKpzX9vhQDQJpKYWw=)
2: j3tFGt__mjBy6A4laCBtTNakkR0.asa (hash: Ya4LiyF5bRj+tvHg5hNrH2HeLbopOCsjFcZajvf8SKE=)
3: opu5R2dQ7A4mIqUF5RUS729aW7Q.crl (hash: 0KUrs4kbEP/CaOY8xmBz6Lq9xbkZHv8iHZ4mcxfwwzQ=)
4: x3mNd6D6usA5k_7l-emYO2TtcmI.roa (hash: kwiTjzAM2+mXC68INamqfljbqxN1Ud0ltCywsiZuaEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:df:16:67:7a:4f:f8:a1:97:6e:f1:c7:27:35:ab:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29bb9476750ec0e2622a505e51512ef6f5a5bb4
Validity
Not Before: Mar 25 12:01:33 2026 GMT
Not After : Mar 26 12:01:33 2026 GMT
Subject: CN=ee35669439606615a2c3ec19fabc59573f21bb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:4f:72:ce:6f:31:6f:b9:8f:cc:6d:8d:52:
ad:7a:fe:1f:13:fb:fd:2b:38:27:33:12:40:ae:db:
fd:3f:b2:df:7f:6c:ab:7b:6a:c4:65:ec:83:d5:c4:
60:d8:84:ae:9d:d3:bb:58:08:2d:42:b2:dc:72:5a:
19:62:0d:f2:ce:0b:84:47:b7:75:87:42:9c:f7:d8:
e0:7f:19:a2:b6:8c:b1:94:ae:9c:38:66:a5:14:91:
ee:41:54:c2:35:69:33:35:3d:3f:85:c5:01:d8:6e:
90:d9:69:66:02:19:d1:0d:a0:70:c8:a4:b0:46:02:
13:63:2f:ba:f2:b2:c8:6f:b2:e8:2b:64:73:d0:09:
24:01:c9:80:2e:5e:82:e7:90:2d:f6:07:20:0f:3f:
ed:b7:1c:50:f0:37:69:0b:6b:bb:84:0a:00:0b:da:
f3:d4:9c:f0:5b:b8:c2:a2:37:dd:84:65:2a:52:b6:
e4:82:34:49:b1:f5:ed:69:27:0b:c6:2c:fe:39:63:
8e:30:c0:c7:1e:0d:eb:d1:f3:05:c9:9b:b5:7e:eb:
0b:dd:4f:c4:4d:c5:7e:cc:be:07:b5:65:d6:97:01:
67:e2:d8:00:68:00:98:01:e9:98:7d:6f:c8:79:23:
e8:c8:ba:b7:4d:4e:c8:dc:03:3e:46:e9:23:f9:51:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:66:94:39:60:66:15:A2:C3:EC:19:FA:BC:59:57:3F:21:BB:84
X509v3 Authority Key Identifier:
keyid:A2:9B:B9:47:67:50:EC:0E:26:22:A5:05:E5:15:12:EF:6F:5A:5B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opu5R2dQ7A4mIqUF5RUS729aW7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c1182e-e387-4c83-9726-cad9510206ab/1/opu5R2dQ7A4mIqUF5RUS729aW7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ea:f3:67:17:e5:c2:0c:4c:cd:95:65:a0:a4:28:f9:58:a3:
7f:79:e9:74:07:33:3f:ef:e2:09:47:9b:5b:9d:4f:9f:40:6c:
2d:e9:3c:76:49:6f:ab:45:37:08:18:14:ff:e9:80:4d:c5:13:
02:1d:d6:9f:94:77:00:97:ba:fe:cc:2a:e6:22:e4:54:61:24:
c9:01:d8:a1:47:07:57:18:8b:2e:49:6d:c9:bc:4a:a7:98:76:
62:45:1c:d8:bd:e6:46:7a:2c:8a:bc:10:de:58:03:34:6b:d4:
2f:3a:f6:54:b9:1d:cf:13:c6:5e:0b:c9:12:30:43:fe:ab:9c:
63:f8:28:de:06:6a:40:4f:f8:a8:f3:96:44:c3:cc:38:6c:19:
20:de:d0:1f:01:04:c1:23:92:41:a8:93:66:4f:af:12:41:97:
f1:49:17:b0:9a:6d:c3:42:b0:08:e5:b4:3b:43:5f:54:3c:9e:
03:80:dc:8b:b7:6c:ad:0f:39:91:2c:a4:71:6b:e3:07:74:b9:
14:d8:66:f8:2d:5e:9e:9e:21:d1:00:a2:74:a5:13:96:99:4a:
2e:f6:38:82:a8:79:71:fc:bd:7b:63:55:83:73:89:e7:05:69:
b9:f2:54:84:c6:4b:8c:d9:71:44:b3:8b:77:3b:48:d4:02:72:
28:26:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:51 2026 by rpki-client