Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
File: OPnFTxkZPgZUgWP4lcOka5-L-7U.mft (raw, json)
Hash identifier: EwA8WrxNE7cBMoQN4XCMbLmuwfFPmkZ9lFx2XZ/0ux0=
Subject key identifier: CD:F5:34:85:75:05:05:EE:32:08:F4:6C:E4:7E:A5:08:E3:0C:80:19
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 019D26CCA9994F6F558AE35679F66297FE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 21:00:40 +0000
Manifest this update: Wed 25 Mar 2026 21:00:40 +0000
Manifest next update: Thu 26 Mar 2026 21:00:40 +0000
Files and hashes: 1: 42Rcnwutm1ywNZ_X0-W_swhKEEM.roa (hash: bi2ZbfhoxgNISP+fs+ffnhhXz6L36QQJYtK0dcQ3mCA=)
2: JnhXW-TDSlbtLU5yFnzY9cnU22U.roa (hash: aevLJ6Ysjd3/L9aPfY8G2yJYnOWM+TqoO6EPF30teKI=)
3: Js4E3rnoh4mQIPNOStdJD87IpLY.roa (hash: LdzJXP4bxTlrjQggVcdC0NIs9C0F1hOoFzJirHnHG24=)
4: OPnFTxkZPgZUgWP4lcOka5-L-7U.crl (hash: l2vci0Ns/W9OfmD42PMl3M1CZxerRL+HyF0tjkNsJQ4=)
5: TkwlaSAb-t_A_q6mMAipvEs0zSk.roa (hash: TpY0AjBJFQQt2MYHF/hCiOfKQkRoDC5zt7ciJI8H/SA=)
6: VX01x5qLEBJVUEQLizxf8saIq-w.roa (hash: LmJXGkg2jRoBx2SiSwnwALTU4Vgo3eK0WFHdZY6wGyA=)
7: fw0YP162WW2RmauK0r76hCJq7FI.asa (hash: gBQWVbDzHTXqbw6Lz9qGJDwJuoShYEIdho/K7qMK5b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:a9:99:4f:6f:55:8a:e3:56:79:f6:62:97:fe:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Mar 25 21:00:40 2026 GMT
Not After : Mar 26 21:00:40 2026 GMT
Subject: CN=cdf53485750505ee3208f46ce47ea508e30c8019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:4b:0c:98:56:c7:00:4f:3b:dc:1c:86:94:
d9:b2:db:88:49:fe:ca:b4:f6:b1:a6:42:a1:77:0b:
71:ec:aa:48:92:c5:fd:36:17:3a:8a:55:80:47:e2:
d6:c5:59:d5:db:db:c2:a6:8e:da:8e:5f:df:25:f4:
4c:cb:e6:77:b7:47:4b:ea:a8:7e:6b:37:5b:32:70:
95:c5:2b:97:3e:5a:78:1b:42:19:37:15:21:c0:59:
22:91:23:82:e4:61:bb:d1:16:10:8b:79:e5:f5:3d:
83:6e:21:a8:de:90:d6:50:d8:d3:48:7f:df:35:ff:
44:4d:27:97:78:ca:d3:e0:0e:35:6e:1e:0b:26:21:
b2:e8:92:41:04:90:01:91:8f:7e:67:f5:0e:6d:d0:
9d:c4:d9:73:17:93:56:55:f3:66:a1:0b:7e:4e:e2:
d4:79:d7:63:70:95:64:82:ef:3c:45:ed:aa:e8:f4:
76:cd:bf:79:d5:d3:b9:d0:35:e2:f3:61:5e:47:dc:
e8:f5:df:a0:27:a9:fb:1f:88:98:c7:c2:b9:cd:4d:
bf:74:b0:73:2e:e8:4c:2b:f3:4f:20:08:ac:ee:a6:
fa:5b:29:f6:e6:df:28:73:9d:04:07:b8:9d:49:3d:
2b:7c:ed:d2:4a:10:a3:60:2f:af:0f:36:99:d9:25:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F5:34:85:75:05:05:EE:32:08:F4:6C:E4:7E:A5:08:E3:0C:80:19
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ea:c3:f8:74:97:28:15:3d:6b:70:5f:28:a5:5c:ef:48:ea:
ef:b0:eb:d5:6d:e2:cb:7c:f8:57:45:11:6d:c7:43:3e:d2:bf:
4f:18:72:ea:91:f3:b2:c3:bf:6a:a1:52:e9:7e:a5:68:6c:b5:
d2:91:2e:05:66:cf:be:01:7a:e3:cd:8a:a3:ba:e8:d0:a9:fe:
5b:33:f2:58:bf:d4:87:c4:4e:df:ad:d3:f1:4b:8d:39:13:bd:
d1:6e:88:c9:26:f1:c8:52:40:69:a0:30:86:a7:a5:c2:14:c0:
e9:6b:ec:1a:2f:8c:fd:05:6e:e3:69:81:08:95:79:ac:6e:12:
8a:de:3a:a1:4d:bd:43:06:0b:f1:c3:a8:e1:7c:88:19:96:3c:
fa:c6:39:bc:6c:62:f8:1a:2f:cb:da:9c:5a:fa:72:79:97:92:
e7:22:82:06:4d:dd:18:15:65:92:3f:aa:e0:25:04:ea:e2:a7:
59:05:93:63:89:f4:65:cf:76:56:09:a4:8f:e9:d7:82:fa:3f:
d8:c6:76:96:38:ff:c0:6f:b6:3a:0f:1c:d0:a4:a2:9d:40:22:
f5:65:77:4c:d6:24:08:5b:9b:ab:cf:8e:f0:80:09:a6:68:ee:
3f:8d:c5:51:57:2f:15:2e:5a:f4:f6:9d:1e:1e:82:a8:ae:07:
f2:12:cb:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzKmZT29ViuNWefZil/4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjljNTRmMTkxOTNlMDY1NDgxNjNmODk1YzNhNDZiOWY4
YmZiYjUwHhcNMjYwMzI1MjEwMDQwWhcNMjYwMzI2MjEwMDQwWjAzMTEwLwYDVQQD
EyhjZGY1MzQ4NTc1MDUwNWVlMzIwOGY0NmNlNDdlYTUwOGUzMGM4MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe1LDJhWxwBPO9wchpTZstuISf7K
tPaxpkKhdwtx7KpIksX9Nhc6ilWAR+LWxVnV29vCpo7ajl/fJfRMy+Z3t0dL6qh+
azdbMnCVxSuXPlp4G0IZNxUhwFkikSOC5GG70RYQi3nl9T2DbiGo3pDWUNjTSH/f
Nf9ETSeXeMrT4A41bh4LJiGy6JJBBJABkY9+Z/UObdCdxNlzF5NWVfNmoQt+TuLU
eddjcJVkgu88Re2q6PR2zb951dO50DXi82FeR9zo9d+gJ6n7H4iYx8K5zU2/dLBz
LuhMK/NPIAis7qb6Wyn25t8oc50EB7idST0rfO3SShCjYC+vDzaZ2SWPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM31NIV1BQXuMgj0bOR+pQjjDIAZMB8GA1UdIwQY
MBaAFDj5xU8ZGT4GVIFj+JXDpGufi/u1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMt
NzI0OTQ5YjQ2MGU5LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMGI2YmEtODY3NS00OTFjLTg1OTMtNzI0OTQ5YjQ2MGU5
LzEvT1BuRlR4a1pQZ1pVZ1dQNGxjT2thNS1MLTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOrD+HSX
KBU9a3BfKKVc70jq77Dr1W3iy3z4V0URbcdDPtK/Txhy6pHzssO/aqFS6X6laGy1
0pEuBWbPvgF6482Ko7ro0Kn+WzPyWL/Uh8RO363T8UuNORO90W6IySbxyFJAaaAw
hqelwhTA6WvsGi+M/QVu42mBCJV5rG4Sit46oU29QwYL8cOo4XyIGZY8+sY5vGxi
+Bovy9qcWvpyeZeS5yKCBk3dGBVlkj+q4CUE6uKnWQWTY4n0Zc92Vgmkj+nXgvo/
2MZ2ljj/wG+2Og8c0KSinUAi9WV3TNYkCFubq8+O8IAJpmjuP43FUVcvFS5a9Pad
Hh6CqK4H8hLLTg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:28 2026 by rpki-client