Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: 1HhjBwqLSUyYkdYxuDWhAQSUZLvbAvAirl7/WLqg0IQ=
Subject key identifier: 66:CD:C9:9F:D9:96:B8:70:12:E0:7F:6B:1F:35:D5:5F:B7:84:3C:BC
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 019D2A3B99110BB358148230BAA3128CD02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0F3D
Signing time: Thu 26 Mar 2026 13:00:42 +0000
Manifest this update: Thu 26 Mar 2026 13:00:42 +0000
Manifest next update: Fri 27 Mar 2026 13:00:42 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: mUuJGIzi0EzxF/DA2eLv//x3/3icAbbFS8iV9bFAwjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:99:11:0b:b3:58:14:82:30:ba:a3:12:8c:d0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: Mar 26 13:00:42 2026 GMT
Not After : Mar 27 13:00:42 2026 GMT
Subject: CN=66cdc99fd996b87012e07f6b1f35d55fb7843cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:63:d8:bb:ac:80:57:44:7d:b5:1c:b4:ee:
b3:e1:18:c3:35:ea:06:26:dc:05:47:ab:77:e9:a0:
92:cd:d8:2e:e4:24:7b:44:8a:66:ef:ad:7f:d6:98:
41:eb:f6:cf:37:88:e1:57:65:89:88:71:db:7e:89:
b3:73:db:b2:e8:56:44:be:0e:b6:b4:c5:2d:90:5b:
36:99:fe:eb:28:d4:a3:b5:6c:9e:e5:fa:ae:76:63:
33:22:75:7b:0e:15:70:63:57:de:47:1c:09:95:1e:
b8:e3:ac:15:c3:5a:5f:75:0b:a0:a7:a8:53:34:26:
40:4b:d2:ae:f9:5c:11:76:37:37:f1:e1:93:19:aa:
98:4c:2d:cf:40:a5:d0:87:d8:27:c8:8f:25:56:78:
5d:27:53:62:1c:8d:a1:d9:e8:8a:a5:d6:9b:ee:ed:
1e:b0:67:cd:99:25:65:1c:91:f6:dd:14:4f:7a:c1:
17:15:41:91:9f:68:22:cd:c5:8c:ce:bb:53:4a:02:
ff:ce:28:38:c0:34:a0:d5:51:60:53:4a:f9:d0:3e:
7d:ca:c2:d8:8c:9f:83:55:2f:39:27:93:fd:af:29:
7b:0a:a7:c2:2c:c3:22:13:3d:fb:44:44:b7:99:76:
9c:87:54:2c:83:53:31:0d:9d:65:74:ff:f3:75:da:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:C9:9F:D9:96:B8:70:12:E0:7F:6B:1F:35:D5:5F:B7:84:3C:BC
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a7:28:d4:11:ef:4a:54:98:b6:86:1e:48:34:67:cc:24:ae:
19:21:13:9a:7f:78:f5:a6:0f:67:46:03:2e:c0:d3:27:57:11:
21:6b:92:86:68:68:8d:fe:40:e6:78:c1:1b:93:60:7b:7f:5b:
57:01:3c:3a:34:cf:5a:39:71:c7:36:68:4d:0e:54:28:0a:2d:
26:92:50:57:be:07:73:ee:38:0d:4f:85:d3:c1:b4:3c:b6:60:
3b:51:ec:81:ce:39:d5:3b:e2:57:83:e3:ed:fb:e5:94:b8:82:
95:84:c8:0d:b5:91:ca:04:de:f6:5a:14:6f:33:fa:81:60:a9:
16:7d:67:e3:c2:1c:10:db:65:0a:4d:8d:1b:5e:82:0a:09:f2:
a2:e0:41:2c:de:19:b2:21:c9:97:8f:f6:29:c4:c4:84:3c:d9:
56:2b:2f:54:53:bd:fd:76:67:7f:80:85:e7:5f:57:9a:bf:a5:
89:f4:28:5b:58:b7:d9:32:cb:3a:15:46:3a:7f:4a:5f:21:f7:
ff:63:48:e8:05:c1:4e:4e:e7:92:b6:d9:a4:f9:a0:0f:80:c1:
40:a3:ef:aa:67:77:2b:2a:50:19:d7:41:41:c7:fd:f7:41:71:
0d:dd:a5:98:ac:0f:f1:4e:90:22:f8:c8:ff:3c:b8:c0:b3:59:
28:8e:79:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:47 2026 by rpki-client