Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
File: OpNtLymObP1WYEVz0e-eDoKZtSk.mft (raw, json)
Hash identifier: 98ZWkHbr3ReUZ4z7qXfaOYjxfeRE+dWVAjsWuqv7Py8=
Subject key identifier: 30:F6:CA:9D:A9:62:F3:7B:2B:F2:FB:F1:7C:EB:E6:94:87:78:08:88
Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Certificate issuer: /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Certificate serial: 01A0E399A34BC016F3D1235C9559B5AA6076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
Manifest number: 133A
Signing time: Sun 27 Sep 2026 16:01:31 +0000
Manifest this update: Sun 27 Sep 2026 16:01:31 +0000
Manifest next update: Mon 28 Sep 2026 16:01:31 +0000
Files and hashes: 1: OpNtLymObP1WYEVz0e-eDoKZtSk.crl (hash: m46Iw3TuuCCYcg7gb21BvoInmkg6q5lRF9lGfUqLuaU=)
2: e4qPjYtVZNjFgNgoQb6aifisJTs.roa (hash: 1M+oNLSG3cS6v1C1UyKbtqc0oXSkYgVWMgvB/761VUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:a3:4b:c0:16:f3:d1:23:5c:95:59:b5:aa:60:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Validity
Not Before: Sep 27 16:01:31 2026 GMT
Not After : Sep 28 16:01:31 2026 GMT
Subject: CN=30f6ca9da962f37b2bf2fbf17cebe69487780888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:08:7c:ae:71:f7:2d:ec:46:e4:25:13:ff:
5c:d2:e3:f3:a8:25:b9:71:a6:69:19:49:32:be:71:
9c:b4:3b:57:f2:da:4b:e4:63:33:93:d9:b3:c1:54:
43:03:2f:59:13:25:5f:13:39:69:db:3d:56:d9:12:
96:26:37:64:a9:12:60:f9:64:02:d1:d5:0a:68:ef:
a6:15:15:85:0c:94:e8:92:4b:41:4f:2c:e0:ec:1e:
34:99:ea:3c:c4:63:90:6a:24:34:4e:d5:18:c8:8b:
aa:3f:f0:c2:e2:d4:ea:2d:4e:5e:44:e2:04:ed:0e:
18:f2:d5:c5:73:1c:e9:05:c6:3d:af:f5:ce:7a:9f:
0f:97:ed:e6:8f:fa:32:49:c9:e5:56:2b:59:db:93:
ba:ec:7b:10:93:c8:a3:a4:f9:ea:ee:21:39:d3:fb:
a7:7a:56:36:e2:da:2a:56:08:5d:15:1a:0b:6b:93:
85:41:b0:38:c1:01:84:53:d3:99:ac:51:1b:a1:a3:
04:82:bb:08:42:14:9e:4b:9b:33:74:6c:2a:3e:43:
df:ed:69:be:d6:47:ff:32:59:ab:04:7d:f0:6d:5b:
a4:9f:e0:5d:d3:c8:d1:7e:79:24:88:f1:27:a1:5d:
ad:18:d6:6c:20:7d:2f:52:eb:da:95:35:ca:7a:f9:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F6:CA:9D:A9:62:F3:7B:2B:F2:FB:F1:7C:EB:E6:94:87:78:08:88
X509v3 Authority Key Identifier:
keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:16:19:8a:7a:44:85:fe:93:af:49:e8:8a:3c:d6:5c:33:ab:
c7:79:dc:f2:4c:78:d9:42:28:2f:32:cc:db:b1:5b:6a:88:8d:
42:09:3a:13:2d:06:a6:9f:32:be:d3:ed:36:33:9c:cd:a7:a7:
f3:d4:72:93:b2:9d:3a:47:53:c0:d7:e2:40:1b:3c:90:32:d8:
ef:ce:3b:a0:39:55:ab:0c:4b:0b:e8:50:77:16:f4:b2:2d:02:
f3:c7:43:54:a3:5f:54:cf:16:e3:f1:e9:59:3e:a4:62:e9:82:
e8:6a:f1:2a:4b:be:a4:7d:dd:1e:a4:2b:dd:db:1f:cf:f9:56:
3c:50:cd:c5:bb:2e:51:69:a6:4c:6a:8a:1b:e3:1c:83:98:0d:
d6:af:6a:16:b9:04:16:1f:3c:5c:88:fb:04:70:b9:25:b0:c6:
f0:51:42:5b:a8:48:57:8c:fc:bd:3c:69:23:d6:56:33:3b:8b:
22:98:62:a0:27:f9:e2:e0:c2:e2:6f:9d:5d:62:d8:af:5c:a4:
eb:f8:be:63:6f:80:14:87:7f:55:f6:6e:f0:ee:e0:86:85:8f:
e6:ba:66:dd:25:8d:fd:56:19:22:7f:05:32:1d:9f:3e:37:8d:
b1:20:95:b0:be:3c:11:fc:8b:cd:82:01:bc:61:5b:24:5a:c9:
48:d7:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:59:09 2026 by rpki-client