Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json)
Hash identifier: 2rvXtpY/ka0ni/Th10jW6XVeSwhNN1fvPCfbO/IjkRg=
Subject key identifier: 52:0F:6C:F8:18:19:AE:84:84:9F:A9:C2:BD:2A:76:EE:23:52:57:10
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 019E1D904C83B16E1BE31186A7ED4148F8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
Manifest number: 1927
Signing time: Tue 12 May 2026 19:00:56 +0000
Manifest this update: Tue 12 May 2026 19:00:56 +0000
Manifest next update: Wed 13 May 2026 19:00:56 +0000
Files and hashes: 1: FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa (hash: 7YUc6wfgN+sYhdx1cpmGPpDGVuugRkWqHt6/wHp1CDk=)
2: HkwuJu9io020PbxRWDFjsBLDBY0.roa (hash: 54qGpDCHJR33ZIOHfgUlFjHcaUi+BAqkWs7Zaq0wwz8=)
3: I5rk1e-Hzys6bZ34Mf2djbHcYi8.roa (hash: 68VlGtBqjjMcBNNmfnX4SS0mmlFBjW9D5LF+wH6+/Ac=)
4: L-To8dTceN5xxbEJ2QWl3_lVx0Y.roa (hash: VwojFWUhMCERU0Ki7bA5wqTbNgVL6QvW7R1KnsktuYI=)
5: RUdkYB7gYtQia_NavoRTMoG3pvE.roa (hash: T6PW2Xl5c1A8FrzU6sJtHxxL5BTjblBQGY54ZziHyw0=)
6: VQsDH7SGd5hal_nlNR8i5lyIdTU.asa (hash: CUgzrAYaMR8T7BZPdashoUewG1Aed1T1TxeGji8a5Ac=)
7: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: w1e/x09xlIGCeZKPD+eMNTFyCjYf4uPCYOOmqSjXgrE=)
8: sypz3alt6kD9RUIKSoriU5Cgg9c.roa (hash: Q5XVGAYpXK3W0dy+5n1dt4ArQn0bSHlxksL+5uZfIdA=)
9: tDIPyCeJ6lwABqJN9BvBHe0hGng.roa (hash: Ct8rOWY/RQns6Y0hISopyHYEG2NvtwUoOdKLUr3Niy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:4c:83:b1:6e:1b:e3:11:86:a7:ed:41:48:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: May 12 19:00:56 2026 GMT
Not After : May 13 19:00:56 2026 GMT
Subject: CN=520f6cf81819ae84849fa9c2bd2a76ee23525710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:ac:4f:70:b9:0b:5d:05:d4:30:f1:9a:9c:
6b:10:85:09:e3:f0:b2:6e:f9:a3:62:da:52:fe:79:
3d:63:84:76:7b:64:23:e0:3d:83:e3:46:77:52:45:
fc:96:0e:fb:e8:e8:2b:d4:51:09:21:ff:7b:4b:9b:
2a:67:ac:18:da:4a:c6:91:8d:1a:f0:7e:3d:23:9f:
21:a0:fe:20:1e:7a:a2:fa:91:40:e2:63:66:83:33:
14:00:2e:13:c1:39:40:d0:ff:91:e1:ae:a6:d3:3d:
46:a8:4d:49:26:79:b7:19:25:89:b6:e0:8a:1a:97:
4c:8a:85:54:79:7e:7d:0c:ce:b5:e5:d7:c6:ec:42:
6b:2d:3d:c4:e2:99:c4:6f:4b:8a:c5:de:69:52:37:
e2:38:d9:7f:9d:98:ab:24:c5:37:ac:a7:49:c3:31:
c9:40:25:93:9a:f0:eb:3f:57:9b:b9:12:c8:24:a8:
20:39:fe:bf:45:c8:de:19:4b:8f:11:42:40:c4:b2:
a0:0c:de:6d:42:e0:d2:f2:57:3e:ec:7a:6e:c5:88:
b0:af:9a:a2:13:03:01:b8:6f:e4:2d:ae:7a:06:54:
f1:0a:ec:43:9d:ff:b5:04:ca:88:1d:51:80:ab:2f:
a8:30:91:3e:df:fe:4a:0b:42:63:ac:f2:9d:72:a9:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0F:6C:F8:18:19:AE:84:84:9F:A9:C2:BD:2A:76:EE:23:52:57:10
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:73:52:44:63:6c:d9:a8:21:16:3f:23:5f:36:c5:9b:e5:5e:
6b:a1:d3:5d:61:60:41:e2:6f:d5:f6:3e:41:59:d2:f5:b8:a2:
42:ee:9e:06:b2:6b:5f:d8:94:c3:78:9a:6b:4b:ca:48:0d:fa:
e5:e7:d0:90:32:5e:60:31:e5:62:1e:e0:a9:10:5a:7f:b1:f4:
4b:68:6d:33:91:d7:08:74:d9:3c:30:79:d9:39:4d:77:d9:22:
78:59:12:57:11:77:e0:69:64:d2:59:74:93:05:8e:8e:b3:48:
a0:0d:8a:5a:5b:91:4b:0a:11:b8:94:40:f3:b8:44:1c:b0:0d:
dd:34:09:05:9f:06:dc:04:80:d2:cd:92:c3:22:e3:4d:6c:33:
4f:e8:77:0e:54:34:98:fa:29:49:a1:ba:7b:7b:ef:eb:97:29:
98:5e:12:a6:ad:43:15:79:19:54:f4:b8:87:12:f6:56:35:24:
d1:0f:0a:bb:c0:bf:c1:e6:c9:62:7c:c6:b9:e3:75:df:74:c9:
34:d3:d6:b3:3b:c1:42:d8:cb:15:88:0d:e7:6e:f8:ce:05:a0:
38:94:5e:79:1d:a4:2a:c3:c2:8a:43:e7:da:5c:71:7b:12:b7:
43:93:1b:e7:fb:26:f9:e1:f0:7a:bc:59:34:83:b8:f2:33:f7:
cb:6d:b3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:27 2026 by rpki-client