Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: UAIokcClWWXPrMU/L7ZbSzmCEk+4aiRmSReSiUdI1jI=
Subject key identifier: 90:EB:F1:03:26:D9:6B:52:48:56:12:E9:52:BE:33:EC:A9:4C:99:B7
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 019D26CD02151974F17501D2A24D9DD43187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: th0b0Y9Po77yvy2BLGP14icKsj6wx/K791l5vSYbPZw=)
2: xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa (hash: ZJ+YcdwxYrTOk2uKzIqFnqUJ/TPq1N6JkOSkhw/1KeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:02:15:19:74:f1:75:01:d2:a2:4d:9d:d4:31:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=90ebf10326d96b52485612e952be33eca94c99b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:42:8b:3f:ce:b3:3f:87:ab:2e:82:e8:bb:
73:cf:84:1b:13:db:19:2d:3f:df:bd:f1:b5:f6:1f:
ac:8c:6e:5f:f5:cb:5b:45:af:72:27:af:61:d7:ea:
ae:05:59:20:45:af:36:69:42:55:90:4f:2f:4b:82:
f6:1b:97:79:66:d7:0a:5b:74:c2:94:61:7c:ac:7c:
e2:e5:2c:83:ba:61:60:ac:83:69:3d:df:58:5d:66:
db:b2:56:28:54:eb:f5:6d:b1:18:e5:5b:33:5a:3f:
be:26:f4:8f:52:3a:f6:f6:19:de:ca:7a:fe:c1:5c:
c5:25:de:d9:58:c4:80:0c:38:d2:02:a6:54:b3:a1:
37:c9:03:0f:f2:5d:50:1c:c9:59:7b:ac:12:b8:98:
5a:5a:b8:f6:e4:1f:ac:c5:14:c0:e1:ce:1c:76:11:
cf:86:9d:91:d9:0c:9d:42:94:e9:cf:d6:5a:9d:80:
25:e8:40:f7:5f:bc:13:b6:08:65:fe:3d:86:8a:46:
13:6c:4c:11:8a:71:a4:b9:bd:b3:4d:78:cf:65:b7:
d2:2d:aa:8f:2a:24:56:c0:37:6c:d1:92:dd:4f:d3:
17:1c:e9:ee:ca:93:fa:49:5d:ab:1a:ed:f6:40:a7:
35:34:38:7f:20:f1:dc:cd:0c:d6:ad:01:5d:76:cf:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:F1:03:26:D9:6B:52:48:56:12:E9:52:BE:33:EC:A9:4C:99:B7
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9b:52:0d:ec:e1:a0:8b:02:7d:e6:32:31:fc:b5:71:f5:18:
fb:ae:96:69:8a:3d:4f:19:15:ec:5c:02:4c:8e:3f:e6:60:72:
e1:bd:17:b8:0e:5b:87:87:1e:e1:09:3e:70:3b:fc:8f:6d:f1:
83:5a:25:0c:75:01:19:ae:20:e5:cd:98:ee:88:b4:00:0b:a7:
e1:2d:0d:90:f1:14:2f:2f:0e:78:33:7a:10:69:06:c1:5a:50:
7a:25:cb:1e:ee:34:19:22:20:e1:d0:17:06:62:d2:06:96:b6:
49:76:79:a6:79:7e:b1:b5:a2:8b:0f:96:c9:4d:cd:fb:78:00:
b0:a6:f7:e3:fd:12:56:47:66:ef:37:ff:4f:e3:b6:4b:22:85:
fd:a5:81:0c:d3:0e:5d:26:dd:5e:5e:04:6f:27:78:8d:f6:37:
c1:4f:79:e1:ba:7b:07:a8:28:17:5f:ad:82:72:bf:98:ae:ba:
82:9e:7f:94:61:13:5a:8c:bf:76:a0:d3:f7:2d:d6:64:22:47:
8c:34:92:6e:e0:25:a2:4d:15:8d:3c:6a:08:48:8a:25:12:73:
ff:ef:01:88:3a:55:60:ba:84:c7:5b:d1:94:ce:c0:7d:0f:e1:
b7:7d:bc:bf:10:37:7e:1c:28:7f:2f:80:60:6c:d3:62:fc:02:
c5:05:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:41 2026 by rpki-client