Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
File: OpNtLymObP1WYEVz0e-eDoKZtSk.mft (raw, json)
Hash identifier: WSU3yCdnYrDVZwRiYNOIsmiXFXfD+Mv1oJBw9AiCOT0=
Subject key identifier: CE:44:03:3C:6B:20:CB:DE:63:8D:D9:20:80:BA:5F:42:21:4F:A6:EC
Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Certificate issuer: /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Certificate serial: 019F939259574A96AFCBB48FC5E4B4FF27A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
Manifest number: 128C
Signing time: Fri 24 Jul 2026 10:01:09 +0000
Manifest this update: Fri 24 Jul 2026 10:01:09 +0000
Manifest next update: Sat 25 Jul 2026 10:01:09 +0000
Files and hashes: 1: OpNtLymObP1WYEVz0e-eDoKZtSk.crl (hash: HHPmH7jQrfMZh4YTIyOve2HB2EO9OtueQtJMmD/h6MI=)
2: e4qPjYtVZNjFgNgoQb6aifisJTs.roa (hash: 1M+oNLSG3cS6v1C1UyKbtqc0oXSkYgVWMgvB/761VUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:59:57:4a:96:af:cb:b4:8f:c5:e4:b4:ff:27:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Validity
Not Before: Jul 24 10:01:09 2026 GMT
Not After : Jul 25 10:01:09 2026 GMT
Subject: CN=ce44033c6b20cbde638dd92080ba5f42214fa6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:a5:07:ff:16:1e:59:89:5e:51:ac:b4:1f:
01:ee:6f:cd:fb:38:2c:9f:f0:43:26:5f:0d:05:62:
16:d6:a2:ff:18:5e:9b:b4:c5:30:4f:74:5a:8a:8f:
2b:c3:fd:21:f5:65:f0:00:f2:99:92:e7:2b:f7:55:
af:30:49:30:22:1d:df:3a:bf:e1:02:fa:9f:0d:f5:
76:fb:e5:85:5b:77:16:fe:3d:62:eb:2b:09:e1:49:
56:30:da:98:c0:7c:b9:d0:87:ce:cc:54:f0:06:68:
3d:3f:82:c5:81:cc:2c:65:7a:ac:07:d0:3a:7f:56:
08:d1:66:5e:4e:e5:a2:1b:8b:b7:d0:4f:00:58:8f:
6b:9c:f3:da:05:ef:c8:3d:0d:f2:cb:ed:b5:86:e4:
ff:09:ff:b4:a5:60:c1:10:a0:be:fb:d7:c9:61:d8:
e7:66:fc:03:57:8c:48:76:23:63:28:39:56:2a:ac:
b6:f5:fb:fe:17:ea:4d:3c:b1:d5:ae:74:b9:47:a3:
3d:9a:df:2f:74:df:72:ea:d3:bb:df:8b:1e:4f:62:
ac:f7:d3:82:b1:ee:fb:60:78:6e:1f:68:32:b0:f9:
ef:ce:ce:44:84:da:55:4a:1b:23:15:81:2a:bf:aa:
44:07:98:5f:65:f1:05:1f:a0:bd:57:ca:03:e6:04:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:03:3C:6B:20:CB:DE:63:8D:D9:20:80:BA:5F:42:21:4F:A6:EC
X509v3 Authority Key Identifier:
keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:94:34:86:fe:01:53:21:d3:db:91:0f:28:91:af:eb:53:10:
48:07:99:18:e9:3f:f5:32:41:af:3e:a1:9c:2d:ff:6b:57:e5:
1e:53:1c:b4:83:2a:6b:d6:c7:56:65:5a:ab:4b:75:69:c1:c5:
64:07:4a:b6:ba:74:2c:14:a1:77:6a:8d:93:72:14:35:c9:cc:
46:ef:9c:94:a8:67:e6:9a:52:90:ca:6e:0f:bc:0e:4d:b1:f2:
41:13:72:5f:2a:0a:ab:7b:12:1f:e7:d4:6b:c4:90:07:98:1b:
de:41:90:d6:36:4d:7a:88:d0:fc:a8:f7:46:6d:54:44:03:ca:
bf:74:85:d5:9f:d9:91:8e:b7:89:8a:ce:1c:b7:fe:89:73:f9:
c8:18:2f:a9:ef:7f:05:3a:6a:2b:f8:3f:31:a3:b4:1b:c1:86:
8a:f0:09:59:92:88:11:97:31:ac:aa:4a:72:43:59:38:b6:69:
e7:43:3f:07:84:13:8e:71:b5:b8:6f:aa:35:33:01:31:02:0d:
a7:59:2c:a1:de:c4:11:8a:b8:77:e8:d7:4b:34:80:05:de:54:
92:ba:97:5e:18:7d:c4:4d:40:f8:c9:f5:41:79:64:c1:42:b3:
84:67:6d:ef:f6:39:f2:d6:17:b6:75:d5:d7:e0:82:d8:ca:16:
3b:44:33:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:15:56 2026 by rpki-client