Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: fj6F2L5KNQ/9QzHY18U2x7XB942qHjAtfcO9uANyQzg=
Subject key identifier: CB:AE:55:D0:41:02:7A:D0:80:C9:ED:66:B1:0D:D9:B8:B1:CE:76:BD
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 019E1F112A7ADB407906D57379EF1B6C5614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 09E4
Signing time: Wed 13 May 2026 02:01:19 +0000
Manifest this update: Wed 13 May 2026 02:01:19 +0000
Manifest next update: Thu 14 May 2026 02:01:19 +0000
Files and hashes: 1: BtxvHCilSqt_99RwN54PMNqlIS8.roa (hash: FhEZYVel7CDKvGsL+NRAOlWLOkmBn5nDe2CgOk2RwyA=)
2: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: fpqRqyPXpKcNU9+PVt+/u61kmOfQXAnDug5l5vDAClc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:2a:7a:db:40:79:06:d5:73:79:ef:1b:6c:56:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: May 13 02:01:19 2026 GMT
Not After : May 14 02:01:19 2026 GMT
Subject: CN=cbae55d041027ad080c9ed66b10dd9b8b1ce76bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:65:31:83:7f:a9:57:03:ab:d0:40:86:fc:2c:
91:5d:af:c8:6f:70:f8:79:81:bc:9b:5f:5b:ae:ec:
10:f7:82:e0:22:a4:25:de:d9:58:f6:d8:b5:32:b8:
69:e6:d9:55:c9:af:93:13:ef:db:bd:f9:ed:cc:c0:
a6:ad:da:5f:4c:50:e6:b2:d1:40:19:57:24:35:8d:
39:0e:cf:ac:96:96:62:93:e8:f9:c7:04:e9:ad:8d:
80:d2:04:fe:4e:2f:ef:10:e5:f6:9f:e6:ab:ca:f8:
80:b2:8d:59:e3:63:a2:a2:8e:ae:b5:44:ae:fe:c3:
61:7e:e5:fb:8a:4e:c4:38:23:07:27:db:7f:1c:65:
1d:ce:21:9f:db:44:82:88:c9:b4:11:b6:18:5d:e8:
9e:8d:89:ca:73:fa:5f:ba:4b:43:63:98:93:9a:e6:
26:9f:1d:5a:9f:70:93:a2:37:3c:38:61:0e:a7:16:
dc:11:2a:5d:4c:43:9c:c0:5f:ee:30:72:a9:ae:2b:
cb:54:7a:4b:58:01:62:a1:5b:d2:c1:0d:d7:f8:2f:
9f:ef:0f:41:14:6a:38:b0:ca:57:0d:b3:63:d9:7a:
fe:5a:5b:85:a0:38:45:65:aa:df:d3:03:ce:aa:c4:
e4:5a:39:3f:80:50:6b:6d:dd:45:4b:7b:ad:57:cc:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:55:D0:41:02:7A:D0:80:C9:ED:66:B1:0D:D9:B8:B1:CE:76:BD
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:67:57:7d:61:b0:c4:66:ca:e0:b6:4b:41:52:c3:5b:f1:1b:
e5:61:88:85:eb:9e:a4:a3:a8:fa:42:f0:1f:2d:52:86:37:c0:
d4:d4:38:88:86:a9:2f:2d:33:94:30:1e:75:44:50:78:2a:72:
db:97:94:1d:ba:93:f3:ce:89:65:57:dc:ec:df:f0:9b:06:6d:
3f:f3:67:cc:27:91:7c:c7:f5:9e:80:7f:d3:4f:e5:1f:04:64:
53:46:fa:22:eb:a3:86:ac:b5:cb:5f:a7:9a:c7:85:97:18:77:
90:9c:fc:6c:3d:24:45:26:66:c8:b8:ea:b1:ae:55:2d:c3:5b:
bc:6f:ca:4f:d0:fc:b3:9d:f5:82:a0:98:08:19:b4:dd:fd:27:
71:37:9f:92:51:5d:05:2e:f6:12:59:b7:f5:0f:77:d8:6e:3c:
75:33:74:14:78:61:24:3a:54:e9:60:f8:00:51:5a:4d:9a:9d:
f8:41:62:21:db:aa:4c:6b:20:f1:1e:4a:ff:41:82:20:8a:d6:
3e:f3:f5:e1:c4:5e:1a:91:5d:f1:d2:06:27:08:36:2c:34:6d:
c0:87:46:af:0b:6f:6a:7c:99:56:d6:c5:4b:3f:44:5e:4e:f6:
cf:d9:b8:7c:d2:ab:4d:92:a7:1e:87:d4:db:11:68:2d:06:41:
60:5b:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:47 2026 by rpki-client