Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
File: Op8dKBTKebYZFWiagmFLkldaS1s.mft (raw, json)
Hash identifier: 9XLNDU+YtRvpihCfaJJ9U7G7IU9I8RXvosAFf4K2emU=
Subject key identifier: 49:77:9C:2A:A5:C7:8D:38:C8:FF:FE:7D:45:80:B2:26:37:05:4A:F8
Authority key identifier: 3A:9F:1D:28:14:CA:79:B6:19:15:68:9A:82:61:4B:92:57:5A:4B:5B
Certificate issuer: /CN=3a9f1d2814ca79b61915689a82614b92575a4b5b
Certificate serial: 01A1DEDEBEBD271E018E47CAD61D3061AD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
Manifest number: 0204
Signing time: Sun 15 Nov 2026 11:01:41 +0000
Manifest this update: Sun 15 Nov 2026 11:01:41 +0000
Manifest next update: Mon 16 Nov 2026 11:01:41 +0000
Files and hashes: 1: Op8dKBTKebYZFWiagmFLkldaS1s.crl (hash: OjX8lZlo0UFH2PDSeh0nIWoWlTV0rGVKxu+Yw8Nj8ZE=)
2: ZujPeFLEKXZUzVLUC2T-QFZI6OM.roa (hash: EtbDCHEn2THDzHpj6J6jSqVTS+eJbiX7R8y0kc6QTNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:be:bd:27:1e:01:8e:47:ca:d6:1d:30:61:ad:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a9f1d2814ca79b61915689a82614b92575a4b5b
Validity
Not Before: Nov 15 11:01:41 2026 GMT
Not After : Nov 16 11:01:41 2026 GMT
Subject: CN=49779c2aa5c78d38c8fffe7d4580b22637054af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:65:5e:39:fc:7a:d1:d5:75:7a:60:8e:27:
39:69:22:57:57:a4:6d:2d:3c:21:43:f1:20:28:53:
8c:ad:99:e2:69:e6:69:75:00:9b:1b:43:50:18:3b:
1c:2b:bf:f0:57:98:a6:f2:7d:64:52:2f:74:d2:71:
94:be:a9:4d:ad:36:5a:ae:2f:11:bb:82:63:3e:a9:
d3:04:e2:e8:ad:f2:3c:b0:bc:97:cf:46:6e:a6:05:
74:63:0a:7c:3d:9f:77:0f:1d:96:43:54:e9:9e:91:
0a:bc:7c:1d:f1:ab:df:86:db:60:49:c3:34:03:41:
f7:c1:83:90:52:38:03:66:92:75:ee:d2:0e:42:1b:
14:10:24:27:86:7e:66:ef:15:f9:cd:92:c5:0f:75:
9c:54:de:4e:8a:ac:b2:4a:74:67:20:4f:c2:fc:fd:
f7:80:86:a0:11:72:94:7e:8e:ee:3e:97:48:9a:5f:
eb:04:f1:64:64:d6:59:e6:c2:6a:a2:07:30:91:ad:
99:20:1e:43:3f:e9:c3:23:db:59:e1:89:af:67:1e:
e5:fe:b4:cb:06:07:a9:a5:d5:a6:d4:39:96:82:83:
bc:33:7c:a0:53:e4:26:cf:3f:7a:c4:5a:f4:00:cf:
fb:57:ac:6d:81:f7:2b:89:2f:cc:ef:4f:77:05:e8:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:77:9C:2A:A5:C7:8D:38:C8:FF:FE:7D:45:80:B2:26:37:05:4A:F8
X509v3 Authority Key Identifier:
keyid:3A:9F:1D:28:14:CA:79:B6:19:15:68:9A:82:61:4B:92:57:5A:4B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Op8dKBTKebYZFWiagmFLkldaS1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a083f-8374-4a40-a7a7-78f717247a99/1/Op8dKBTKebYZFWiagmFLkldaS1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:17:ae:e0:4b:03:61:43:0e:07:15:fc:e2:c1:f5:30:44:5c:
a4:58:5c:fc:ff:d1:ea:cb:9f:55:4b:43:3c:a6:95:c5:3b:a3:
e0:dc:83:4f:8b:74:ab:bd:c8:07:c0:fb:19:1b:03:e0:3a:44:
6c:d6:0f:49:a8:b5:48:f3:b6:4f:ac:f3:e6:4e:0a:83:7a:09:
7b:03:8b:af:e0:d8:8d:f4:ac:3c:c6:c9:0c:f9:ae:da:0b:38:
eb:b9:1c:a0:1a:a9:b7:9f:bf:14:bd:5f:26:80:1e:dd:92:da:
21:e4:1b:df:ee:2e:66:29:0e:31:5f:db:59:12:d1:eb:79:3d:
a2:75:51:61:dd:a7:ec:24:87:33:a5:55:09:36:8f:52:b6:ef:
94:15:0e:8c:5e:3f:9d:b3:39:6b:1a:49:d7:03:11:a2:54:3e:
25:fd:85:f5:94:8e:7e:a4:bf:4e:39:83:4f:36:ef:c4:6f:1e:
a4:6c:53:58:b8:3a:15:45:61:47:c3:aa:50:57:b2:71:ac:58:
a3:4f:2d:8e:4c:36:e4:10:0a:44:a4:88:28:fd:9e:6d:7b:9a:
76:0b:83:93:41:50:ed:be:18:24:e0:68:6c:ec:14:39:55:f2:
79:f1:fe:b9:47:eb:50:18:cd:86:85:6b:4f:5e:36:50:25:16:
25:bc:a3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:15:25 2026 by rpki-client