Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: jB6pCV/FmsamezGfGeZx5tNWwVGr5gAw5fAuTeGt9IA=
Subject key identifier: B7:A0:6E:8F:91:C5:D7:B6:B7:BD:FA:2B:5C:82:5F:69:F1:39:46:3A
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 019F946DECECCB71D6A32FE75870CFF5E198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 19CF
Signing time: Fri 24 Jul 2026 14:00:59 +0000
Manifest this update: Fri 24 Jul 2026 14:00:59 +0000
Manifest next update: Sat 25 Jul 2026 14:00:59 +0000
Files and hashes: 1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=)
2: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (hash: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI=)
3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: XlDLhoC7kwbPXt/FM8gXzteHaapVV+GOAx74MhHPHYQ=)
5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=)
6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=)
7: kWJsfOPSFq_jhRUPK95fJnFQ6gQ.asa (hash: kjZzNLymA0q763NzFlPQRMaG1f9jPqoiNbS2FEJsFnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:ec:ec:cb:71:d6:a3:2f:e7:58:70:cf:f5:e1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jul 24 14:00:59 2026 GMT
Not After : Jul 25 14:00:59 2026 GMT
Subject: CN=b7a06e8f91c5d7b6b7bdfa2b5c825f69f139463a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:2f:fa:ca:f1:40:5c:c5:29:26:36:c6:5a:
b1:72:38:1c:a9:88:27:96:1c:7b:38:0a:2a:31:7b:
03:44:59:22:0f:1c:11:61:d8:21:20:2a:a8:0b:f6:
45:65:c4:1d:45:4b:00:6e:ab:4b:36:87:74:10:9e:
21:69:08:bf:d7:39:8c:65:ae:52:e5:dc:40:9e:fe:
36:a2:18:df:26:bf:38:0c:8a:10:8c:16:14:02:9a:
b6:5e:dd:4b:c2:dd:c9:a5:19:3a:6f:4e:e2:28:a0:
ba:0f:1e:65:e5:22:a2:22:0f:42:8b:19:a6:a7:ab:
3b:60:d7:d2:6b:11:06:45:8d:96:c7:fa:1e:59:70:
29:f1:3b:ff:30:31:8e:a9:ac:0c:7a:d9:6f:56:12:
8a:65:4c:ea:64:c2:b8:f0:ee:52:e5:b6:8c:f6:9e:
20:1c:22:03:54:0e:c6:b4:c1:b1:3a:3b:5f:ff:62:
92:57:55:1a:f3:c5:40:76:c5:25:78:f4:11:42:31:
0b:0e:30:61:fb:ec:82:45:01:35:ca:1e:79:ca:37:
13:c9:c0:e4:70:7e:26:31:90:1b:cf:e0:be:3a:46:
b4:c4:7e:1f:08:7c:76:5b:52:a3:3f:97:6a:b1:3e:
7c:22:1f:4d:1c:c6:cc:db:ff:9d:b2:ee:2b:81:c9:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:6E:8F:91:C5:D7:B6:B7:BD:FA:2B:5C:82:5F:69:F1:39:46:3A
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fc:89:9e:6a:19:91:8b:a8:c6:a8:fa:93:38:4c:c8:1a:24:
6c:74:5e:26:80:f2:da:9d:2d:4e:71:4e:3d:f0:de:bc:1f:05:
42:24:26:b9:4d:1c:d5:a0:fc:26:9f:95:9c:e1:0e:e5:b3:c6:
64:5e:4e:0e:dc:16:1b:95:9f:53:a7:3a:85:56:0f:36:11:67:
8c:5b:81:4b:4e:02:8f:f3:fa:78:74:e0:05:ec:77:41:4b:d8:
1f:c5:b1:9e:03:7e:fe:29:50:69:0b:4a:1e:51:31:3e:9a:95:
28:67:15:cd:55:bb:bf:56:b1:93:d0:18:2d:a2:ec:b3:54:51:
b5:c7:86:25:0c:3b:4a:f9:4d:07:07:80:09:81:58:c2:ae:dd:
29:6c:6d:8b:90:03:17:6b:05:6c:af:c0:d7:a3:3a:a4:8e:10:
82:56:76:aa:38:93:00:fc:ab:20:f9:bb:82:e3:0e:46:05:1c:
c0:9e:b4:75:f3:90:93:21:eb:1e:ea:00:ec:f5:42:ff:0f:ce:
99:de:7d:96:a1:63:71:51:0f:e7:16:17:7b:65:b4:00:35:67:
15:78:35:60:68:d8:fc:16:6d:6e:54:3c:1a:ae:21:d3:a4:7d:
96:49:2a:4f:eb:16:d6:94:fa:6f:21:03:c1:ec:b0:0a:9a:d9:
a3:f0:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:46 2026 by rpki-client