Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: qJPYS/Pmqml0QyDECKkjGyr3+gGE4zSc/1a/DhNltow=
Subject key identifier: AB:21:DC:DF:F3:E3:E7:09:2E:44:6D:93:AB:91:B2:35:92:C9:05:F3
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 019D3376001C2D21E9FEA06781D19F9BD84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 096A
Signing time: Sat 28 Mar 2026 08:01:04 +0000
Manifest this update: Sat 28 Mar 2026 08:01:04 +0000
Manifest next update: Sun 29 Mar 2026 08:01:04 +0000
Files and hashes: 1: BtxvHCilSqt_99RwN54PMNqlIS8.roa (hash: FhEZYVel7CDKvGsL+NRAOlWLOkmBn5nDe2CgOk2RwyA=)
2: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: kfThC3FKaXHvrPmXOQYIVim0hXMs++v6a08diZsw4Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:00:1c:2d:21:e9:fe:a0:67:81:d1:9f:9b:d8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Mar 28 08:01:04 2026 GMT
Not After : Mar 29 08:01:04 2026 GMT
Subject: CN=ab21dcdff3e3e7092e446d93ab91b23592c905f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:36:d7:66:78:9e:a3:f0:00:51:29:dc:6a:31:
61:a3:9c:07:00:ba:6b:e5:5a:31:9a:4e:55:c3:cb:
b7:92:d0:a5:2c:d9:10:d3:02:b4:9f:c7:f6:fc:ba:
0e:3b:f0:a8:77:74:a6:42:28:d7:f6:71:b2:54:ca:
86:2b:6e:b0:10:30:99:8f:8a:c5:c0:6f:8d:0f:06:
c5:09:1d:e1:94:29:c7:c1:5e:a5:76:f8:17:2c:c2:
d9:2d:2b:a1:1d:f4:15:e2:db:6f:7f:39:96:64:74:
72:ed:e9:83:0a:ff:f6:12:ad:07:9d:50:f9:55:55:
cb:7e:78:fc:2e:d4:dd:c0:87:da:bf:89:0a:a1:79:
c6:18:ad:99:f6:f2:dd:46:92:ef:4c:9f:89:15:c6:
5d:80:51:0c:ba:23:c4:fd:f2:19:19:4c:32:d2:3d:
22:30:76:db:b6:44:4d:d4:44:73:f0:1f:c4:74:59:
63:bd:63:a9:86:fc:86:6c:35:7c:56:dd:1c:42:7f:
6f:5c:3a:97:36:7b:98:8e:3e:23:8a:2c:d8:e3:b6:
17:a7:6e:ca:7e:2b:20:64:39:33:45:b7:48:87:88:
9b:21:e3:0f:71:ae:9c:0e:fa:3f:aa:05:27:97:55:
93:ab:ca:5e:7c:df:f1:b2:02:1e:ba:66:7c:ce:16:
e7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:21:DC:DF:F3:E3:E7:09:2E:44:6D:93:AB:91:B2:35:92:C9:05:F3
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e0:7b:6c:0e:57:20:ee:25:5a:82:7f:0d:79:87:26:37:f7:
89:51:f0:c4:42:31:dc:20:46:d3:66:cd:f5:bf:6a:a1:b3:13:
8c:62:04:9b:19:16:ad:43:30:ea:a3:65:f7:f4:d6:ae:9e:fa:
29:8a:80:2e:07:01:bc:27:dc:07:e1:9a:16:fc:0a:76:ad:4c:
f9:d7:8d:07:56:18:39:5c:56:72:50:51:cb:59:1e:1c:6c:0c:
bb:47:15:78:0e:4d:09:ef:e6:49:2d:02:d5:c5:9f:bc:e9:f1:
4f:ab:1d:19:0b:c5:b6:df:b7:f6:3c:1a:89:46:6a:91:6c:44:
a8:28:1c:24:fd:c8:d4:85:ab:57:86:ec:8f:a0:7f:de:25:55:
2f:11:0e:25:f6:c8:d3:b5:88:d9:33:a2:31:e7:cf:47:24:f3:
51:58:a5:56:27:68:9b:ab:7f:3e:47:d5:f9:7b:32:55:30:b5:
e5:12:cd:e4:76:38:a8:b4:a6:80:2b:d3:76:c0:dc:77:d2:c8:
65:05:0a:e2:83:59:05:54:b4:da:9b:c2:e2:b0:7c:25:b8:10:
cf:7b:5d:2f:19:96:be:45:3f:09:79:3d:90:18:59:74:24:77:
95:44:3c:cc:10:6d:49:96:3f:c8:47:c2:4d:78:0b:90:63:c2:
ba:ff:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:43 2026 by rpki-client