Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: eccVV48VAxct71rqs8+IUE33ovSBpnV/mvGED1vf1j4=
Subject key identifier: A9:99:4A:9E:4F:CE:ED:05:26:2F:D5:1F:7D:96:3F:88:DB:96:86:2A
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 019D26CDA272966A172ACFDEEB0FE8613127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0E89
Signing time: Wed 25 Mar 2026 21:01:43 +0000
Manifest this update: Wed 25 Mar 2026 21:01:43 +0000
Manifest next update: Thu 26 Mar 2026 21:01:43 +0000
Files and hashes: 1: DhiVgaWvNmOXlh13NZD3ECCC-Jg.roa (hash: YxArlaNhHs1+rEEwwN6ySNTuQKxwubxKRItAAtcuCZs=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: RyH+euUIHLP3WpsXVnGYsdHxky7iBLSuZe2Z/FQz+dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:a2:72:96:6a:17:2a:cf:de:eb:0f:e8:61:31:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Mar 25 21:01:43 2026 GMT
Not After : Mar 26 21:01:43 2026 GMT
Subject: CN=a9994a9e4fceed05262fd51f7d963f88db96862a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:50:03:cc:40:36:64:b2:85:be:11:89:2b:
ab:31:f4:24:2e:df:85:4e:bf:ca:9f:b2:c3:11:26:
0b:ab:4d:23:dd:cc:18:da:bf:44:53:c8:9e:de:a6:
b4:f2:06:c2:43:81:c3:9b:26:36:2f:8d:0c:ee:dd:
80:69:24:8e:ec:2b:70:22:18:ea:58:be:96:07:37:
a6:2f:b0:d2:df:09:36:f8:f7:45:4d:33:f9:f3:f5:
09:59:7f:85:96:3b:6c:f4:dd:9e:69:fe:dc:f9:f2:
84:bc:4c:74:b5:5b:6d:19:3a:f5:0d:26:e0:ef:76:
b2:ee:04:c7:16:64:a4:d8:26:8c:fe:8c:86:d1:07:
a4:3c:20:d6:dd:6c:c5:5e:de:8e:57:aa:ad:be:e2:
4f:d6:5b:31:b5:5b:cb:cc:c6:1b:84:85:ab:2f:c2:
4c:6d:2a:ff:5a:d8:82:ad:0e:b9:ae:6f:38:da:81:
a1:3a:4b:1b:75:26:b0:c1:2b:00:f0:db:18:d4:b4:
c4:4c:2a:6c:ca:77:e2:f9:78:3d:1b:b4:12:a7:8e:
a4:2a:3d:4e:21:1a:cd:00:03:86:53:ac:ea:bb:29:
05:31:6d:8c:3f:38:28:bc:93:1f:42:f9:5d:82:63:
5e:c9:e8:a4:9b:b8:4b:7a:eb:0c:b2:88:94:04:9b:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:99:4A:9E:4F:CE:ED:05:26:2F:D5:1F:7D:96:3F:88:DB:96:86:2A
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a8:a1:61:86:a3:d9:50:bd:f8:90:15:6d:41:c6:9e:36:2f:
58:c9:6a:f2:16:68:bd:1b:ca:df:4c:28:bf:9d:f3:8f:e6:56:
7c:e3:73:bd:88:1f:43:2f:f1:1c:db:6f:73:b8:3d:88:d5:a5:
ae:0a:a3:85:4e:6e:bd:78:6b:de:cb:ac:17:16:26:28:ce:73:
2c:0c:3a:87:a5:65:bc:b3:a7:b7:03:d2:a8:e2:3e:84:ed:9a:
bd:1a:50:5d:90:cd:c9:7a:ac:ac:d5:5e:41:68:95:3a:cd:78:
20:7f:94:08:69:ab:01:aa:42:98:8a:ed:24:c5:90:87:b3:ee:
34:3b:ea:49:a7:12:a5:58:9a:a7:13:d5:2a:ac:5c:f7:a6:35:
e3:9d:09:fd:22:b5:ee:be:fa:8d:ca:42:77:3a:a6:f4:2a:79:
29:9e:2d:3f:a8:ee:c4:3d:e3:2a:f2:1c:2d:45:a2:be:e1:82:
74:5e:52:31:7b:9a:39:f2:5e:bb:b7:9a:95:8a:00:79:d6:70:
d2:b4:18:7a:21:ae:77:40:f6:55:a8:87:c9:76:6f:d4:2f:ea:
8d:0e:92:33:44:8d:b3:15:a1:15:28:f0:de:81:b2:8a:f7:86:
4d:07:97:4b:42:5a:11:d0:42:c6:17:ed:61:62:04:78:32:9c:
96:9c:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:49 2026 by rpki-client