Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: wNngd9xp5ztsOWQic4JOLt+6zEZqKvLjSan0oEF4AfI=
Subject key identifier: B0:3F:27:B7:D1:38:15:30:41:13:3B:D5:EB:AF:17:15:58:F4:6D:04
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 019E1DFE4E507CEA99522A380B5F550F6C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 21:01:05 +0000
Manifest this update: Tue 12 May 2026 21:01:05 +0000
Manifest next update: Wed 13 May 2026 21:01:05 +0000
Files and hashes: 1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=)
2: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (hash: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI=)
3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: rbNbpcy5o3IZGtEXcIjWjj7yAxQiz5dCeP1Rdxc4D7k=)
5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=)
6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=)
7: fw0YP162WW2RmauK0r76hCJq7FI.asa (hash: gBQWVbDzHTXqbw6Lz9qGJDwJuoShYEIdho/K7qMK5b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:4e:50:7c:ea:99:52:2a:38:0b:5f:55:0f:6c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: May 12 21:01:05 2026 GMT
Not After : May 13 21:01:05 2026 GMT
Subject: CN=b03f27b7d138153041133bd5ebaf171558f46d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:57:c7:73:37:5d:3d:ef:f0:1b:8b:76:03:
70:97:ec:f9:ac:e9:45:2b:07:22:d0:fe:a5:b2:5e:
e0:cb:53:f4:13:1c:91:aa:ac:05:a6:b3:1d:d4:63:
f5:4a:5d:96:e3:12:67:f8:74:d5:2a:dc:bd:12:9d:
77:da:6b:f4:f3:c7:e0:95:e3:ef:3b:05:22:b7:2b:
0a:c4:8a:60:d6:1f:14:4b:1a:b3:d1:cc:21:dc:01:
46:ea:3c:35:65:da:cb:7a:98:1b:30:0a:36:1b:2c:
e1:d2:43:09:55:d2:51:27:aa:a4:c5:b0:86:54:bc:
10:db:0d:81:84:1b:5c:ad:2a:e4:a6:f7:26:2b:77:
8a:6e:4e:49:0c:ca:09:f5:17:e3:95:0e:bd:2d:a5:
c4:d1:f9:29:f3:02:15:fd:62:1e:3d:33:b6:ee:58:
92:48:60:f9:25:4e:ed:8a:08:1e:5b:b1:e5:32:8f:
d3:b8:d4:ff:2e:8b:c7:03:87:ef:a1:ff:d2:6b:68:
96:a3:b6:8a:3a:00:15:5e:cf:f5:b2:46:6c:f5:f7:
58:0b:13:96:6e:20:7c:9b:32:af:96:87:fc:5e:c9:
96:3b:9a:09:60:8b:fd:9d:67:0b:ac:7f:fc:31:75:
eb:ba:e9:8c:77:8d:7c:d6:63:04:b9:82:2f:06:81:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3F:27:B7:D1:38:15:30:41:13:3B:D5:EB:AF:17:15:58:F4:6D:04
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:05:3e:68:05:5f:cd:59:83:2b:9e:cd:c7:77:76:4b:07:f7:
d8:2b:84:2b:e9:4e:1f:f2:68:ee:a1:70:c2:ce:9a:3f:be:d6:
00:1a:67:2a:19:2d:70:8b:97:7d:22:80:2e:06:3a:73:91:fd:
37:93:2e:aa:99:28:99:58:5b:2b:e9:0b:6f:de:aa:24:67:0d:
20:2e:f2:fb:45:df:99:75:f7:1b:e0:97:65:7c:a6:68:1e:f1:
39:42:29:2a:15:86:7d:0e:e4:62:84:5e:48:83:72:a5:7f:ab:
3a:32:5c:a7:d3:8a:36:65:19:a4:bf:16:14:24:4e:92:68:ab:
44:1b:43:40:76:11:59:5d:f8:fc:68:0e:b4:15:1d:91:4d:b6:
20:d1:d2:4e:f9:8a:b4:75:1a:60:ca:d2:91:49:98:00:99:52:
a6:47:f9:21:a7:9c:e9:30:5b:98:eb:81:c1:7c:15:05:b8:52:
af:90:26:4d:02:8a:ee:35:1d:3b:22:06:f5:8e:a8:51:e5:08:
b8:fb:df:dd:db:ff:53:6c:61:53:18:8e:7a:20:77:89:77:0e:
0a:75:e7:1b:45:17:a2:46:c0:5f:f7:3a:a5:74:db:cb:ad:af:
7f:1b:bc:bd:0b:e2:8a:25:23:14:98:57:dc:62:65:ce:0e:05:
ac:ee:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:44 2026 by rpki-client