Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: DfVAgx+DihIzuD44ixeVKcWftkR/qwA/sFJXWZ53sIg=
Subject key identifier: C2:95:CF:A8:7A:62:07:58:A0:D6:A0:26:EF:9C:CF:33:FE:1D:1D:4F
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 019D28BB200B25476593833E3663B5BB4CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 06:00:45 +0000
Manifest this update: Thu 26 Mar 2026 06:00:45 +0000
Manifest next update: Fri 27 Mar 2026 06:00:45 +0000
Files and hashes: 1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=)
2: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (hash: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI=)
3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: Ucepzcy2DLIKadHNXw0SOL77pmhf/g1AKL1KejJJeKE=)
5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=)
6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=)
7: fw0YP162WW2RmauK0r76hCJq7FI.asa (hash: gBQWVbDzHTXqbw6Lz9qGJDwJuoShYEIdho/K7qMK5b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:20:0b:25:47:65:93:83:3e:36:63:b5:bb:4c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Mar 26 06:00:45 2026 GMT
Not After : Mar 27 06:00:45 2026 GMT
Subject: CN=c295cfa87a620758a0d6a026ef9ccf33fe1d1d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:1e:09:d0:56:6c:ff:84:b1:08:03:19:f0:
86:99:b7:f1:81:78:32:3a:1e:6c:d2:2c:fd:0a:89:
8e:02:b7:af:03:a9:13:3c:8e:3c:9d:23:67:30:43:
89:5c:7a:7b:d4:17:e8:f9:f5:44:e7:8f:3d:dc:15:
dc:52:18:ac:9b:bf:ed:a8:88:b0:3c:70:fd:4c:6a:
b6:fe:e1:a8:a5:f7:98:d8:a6:dc:e5:05:90:14:52:
58:d3:41:0b:bb:87:10:d7:df:21:71:4a:10:44:0f:
6c:2f:3a:64:83:a1:d7:85:f9:99:62:2f:6a:f5:b5:
dc:50:4e:c5:a9:c5:d0:3c:5f:77:a8:b4:11:c5:48:
ae:16:da:b0:ed:42:08:19:5e:24:0d:06:d6:b5:42:
9b:3e:bf:73:15:50:33:30:ee:4f:ba:4b:e3:d1:5f:
e4:62:1a:3b:db:52:dd:20:1b:a9:3a:8b:57:b4:ae:
e7:b9:51:e7:b8:a7:89:4a:25:67:8b:70:41:98:07:
b8:2c:04:f3:48:7d:f5:63:b8:64:07:ef:02:cc:6e:
21:d7:32:5e:1e:8f:b5:ad:94:08:79:fe:c2:eb:18:
eb:93:c5:b5:30:50:26:b5:c0:ed:d8:14:61:6f:ba:
c2:39:94:66:88:bd:cb:57:91:5f:e6:c2:bb:2d:4b:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:95:CF:A8:7A:62:07:58:A0:D6:A0:26:EF:9C:CF:33:FE:1D:1D:4F
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f8:87:f5:ef:04:a4:3f:cc:33:52:32:11:00:f0:0c:f2:94:
d8:4a:ff:c1:db:5e:42:57:00:3e:ca:87:19:b8:e7:d9:4a:e8:
67:d1:3e:a2:c7:87:ff:58:c6:1c:fb:22:59:cd:0d:48:77:7a:
8e:76:ee:3d:8e:de:01:64:a4:c9:c9:c0:05:50:07:ad:43:d0:
59:ec:d3:73:59:5b:8f:f1:e9:ea:5b:59:a4:e2:c2:f9:bb:eb:
6f:43:69:20:a5:d7:80:52:be:d8:33:c0:a0:84:80:0f:ba:02:
ee:04:1a:a0:c2:16:5d:8b:79:05:df:04:59:86:64:eb:df:10:
e8:b0:6b:d8:92:c0:9a:ed:bf:1a:d6:56:9a:b5:a5:f3:f1:73:
e7:d9:4d:11:8d:df:66:b9:c9:fc:ae:6e:41:a8:b8:78:55:b1:
b2:14:6f:2c:fe:97:b3:08:b0:1d:d5:1b:c7:c6:d9:a8:5a:be:
82:e6:be:6b:3f:37:30:35:5b:f4:be:bb:87:c2:f5:75:c8:ab:
bc:9f:4e:f3:9e:e8:32:a2:9a:b1:d3:d3:ac:10:85:f9:c3:2f:
6a:74:b9:25:6d:25:1e:cc:35:2f:80:cc:f3:41:b4:31:0d:d4:
1a:cd:4d:60:f6:31:7e:b4:e9:32:12:73:09:2d:99:de:12:bf:
68:aa:0d:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouyALJUdlk4M+NmO1u0znMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4
YmZiYjUwHhcNMjYwMzI2MDYwMDQ1WhcNMjYwMzI3MDYwMDQ1WjAzMTEwLwYDVQQD
EyhjMjk1Y2ZhODdhNjIwNzU4YTBkNmEwMjZlZjljY2YzM2ZlMWQxZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuseCdBWbP+EsQgDGfCGmbfxgXgy
Oh5s0iz9ComOArevA6kTPI48nSNnMEOJXHp71Bfo+fVE54893BXcUhism7/tqIiw
PHD9TGq2/uGopfeY2Kbc5QWQFFJY00ELu4cQ198hcUoQRA9sLzpkg6HXhfmZYi9q
9bXcUE7FqcXQPF93qLQRxUiuFtqw7UIIGV4kDQbWtUKbPr9zFVAzMO5Pukvj0V/k
Yho721LdIBupOotXtK7nuVHnuKeJSiVni3BBmAe4LATzSH31Y7hkB+8CzG4h1zJe
Ho+1rZQIef7C6xjrk8W1MFAmtcDt2BRhb7rCOZRmiL3LV5Ff5sK7LUvDCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKVz6h6YgdYoNagJu+czzP+HR1PMB8GA1UdIwQY
MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt
NzI0OTQ5YjQ2MGU5LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5
LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPiH9e8E
pD/MM1IyEQDwDPKU2Er/wdteQlcAPsqHGbjn2UroZ9E+oseH/1jGHPsiWc0NSHd6
jnbuPY7eAWSkycnABVAHrUPQWezTc1lbj/Hp6ltZpOLC+bvrb0NpIKXXgFK+2DPA
oISAD7oC7gQaoMIWXYt5Bd8EWYZk698Q6LBr2JLAmu2/GtZWmrWl8/Fz59lNEY3f
ZrnJ/K5uQai4eFWxshRvLP6XswiwHdUbx8bZqFq+gua+az83MDVb9L67h8L1dcir
vJ9O857oMqKasdPTrBCF+cMvanS5JW0lHsw1L4DM80G0MQ3UGs1NYPYxfrTpMhJz
CS2Z3hK/aKoNuw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:34 2026 by rpki-client