Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: DywRJViwFwXNoqLMA0JSFcB2LRp3vTW6GVV/GMvzKZY=
Subject key identifier: 28:C2:9F:BB:89:40:AF:E0:3F:36:20:21:21:FC:3F:47:FB:95:77:EF
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 01A0E0CFA7769147ED247B2F51C1BFE07A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 03:01:40 +0000
Manifest this update: Sun 27 Sep 2026 03:01:40 +0000
Manifest next update: Mon 28 Sep 2026 03:01:40 +0000
Files and hashes: 1: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: 7Is8YVZv9e1ZhIYDeRJhg3V7//C5SQ74Zo1a5WbeWkg=)
2: xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa (hash: ZJ+YcdwxYrTOk2uKzIqFnqUJ/TPq1N6JkOSkhw/1KeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:a7:76:91:47:ed:24:7b:2f:51:c1:bf:e0:7a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Sep 27 03:01:40 2026 GMT
Not After : Sep 28 03:01:40 2026 GMT
Subject: CN=28c29fbb8940afe03f36202121fc3f47fb9577ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:56:ad:43:5c:2c:b6:dc:ad:81:ba:f0:29:
85:bb:aa:03:6e:e3:1f:a0:e7:b8:16:a9:ed:67:53:
e2:56:e6:d6:4f:42:1a:02:66:3e:a9:dd:0c:21:be:
3e:ea:c2:89:3d:b3:1d:23:47:91:3a:f9:dc:ae:6f:
7f:6f:5a:36:80:9a:cb:45:45:7c:65:b5:71:21:3a:
1a:e6:56:bd:a8:50:3c:8a:d6:f8:c6:38:69:1c:f5:
87:ae:d9:7b:a1:59:84:47:34:1c:da:b4:5a:5e:65:
89:a1:c7:04:7d:db:35:21:7d:31:f4:cd:67:b7:78:
68:3d:c4:6d:5e:c0:de:6e:0e:b2:80:8b:48:32:8e:
a5:42:fe:dc:d2:dc:0d:a5:a8:3a:ba:51:01:78:65:
f3:74:14:31:45:fc:b7:10:1f:53:68:5e:84:e2:46:
28:d8:03:a1:ea:75:16:71:16:4b:ad:e3:06:f0:59:
6b:c4:41:c7:fc:ec:a5:63:3a:c2:bd:16:a6:cc:49:
89:5e:90:35:68:51:74:d8:9f:9b:9a:36:27:05:f5:
70:82:51:9e:fe:05:a8:fb:b4:f5:cc:d3:ba:05:55:
aa:9f:52:ac:de:51:62:4d:09:4e:d7:8f:21:23:76:
66:2e:29:d7:fa:0f:41:eb:43:1a:47:79:89:29:a0:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C2:9F:BB:89:40:AF:E0:3F:36:20:21:21:FC:3F:47:FB:95:77:EF
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:84:46:96:5d:25:fb:dc:d1:bd:69:3d:1b:99:e4:7f:2a:75:
b5:57:3a:2a:95:f7:48:8b:9d:01:33:03:eb:44:24:ec:aa:f7:
7a:ad:d9:ed:fd:fa:2e:e6:ff:4c:a3:bc:02:35:3d:e1:c7:50:
e1:ff:80:b2:90:86:f0:17:0a:0c:f1:25:47:21:8a:a4:db:7e:
b2:b3:13:d4:d3:77:b5:6e:9e:99:1c:da:c1:cd:80:5e:78:8f:
73:52:81:11:e5:a6:31:0f:53:3a:11:5d:4d:8c:8d:25:40:ac:
d6:b2:c2:ba:df:7d:21:54:ca:b1:d2:8f:82:38:a0:ef:03:b5:
60:8d:6d:99:13:90:07:e1:3f:c1:1d:ef:21:f0:8d:0d:89:5d:
bd:be:5a:79:ad:ff:8b:4b:48:a1:37:f9:a6:77:df:f9:68:e4:
33:da:87:8f:7d:0d:67:1f:f4:b0:87:45:85:69:db:de:1b:7d:
4d:68:e9:17:52:6c:59:13:d9:d7:2e:84:be:1b:35:50:9a:db:
9b:ac:88:0d:ac:c2:4e:3a:8a:12:c9:31:27:fe:69:a6:bf:9e:
26:cd:2e:b0:f9:b6:07:53:3c:e1:6a:98:ed:ef:21:57:ec:26:
57:39:e5:a3:18:82:f1:3f:da:53:ca:56:04:88:7c:25:1d:88:
47:df:43:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgz6d2kUftJHsvUcG/4Ho1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz
YmVhMWQwHhcNMjYwOTI3MDMwMTQwWhcNMjYwOTI4MDMwMTQwWjAzMTEwLwYDVQQD
EygyOGMyOWZiYjg5NDBhZmUwM2YzNjIwMjEyMWZjM2Y0N2ZiOTU3N2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuFWrUNcLLbcrYG68CmFu6oDbuMf
oOe4FqntZ1PiVubWT0IaAmY+qd0MIb4+6sKJPbMdI0eROvncrm9/b1o2gJrLRUV8
ZbVxIToa5la9qFA8itb4xjhpHPWHrtl7oVmERzQc2rRaXmWJoccEfds1IX0x9M1n
t3hoPcRtXsDebg6ygItIMo6lQv7c0twNpag6ulEBeGXzdBQxRfy3EB9TaF6E4kYo
2AOh6nUWcRZLreMG8FlrxEHH/OylYzrCvRamzEmJXpA1aFF02J+bmjYnBfVwglGe
/gWo+7T1zNO6BVWqn1Ks3lFiTQlO148hI3ZmLinX+g9B60MaR3mJKaCUUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjCn7uJQK/gPzYgISH8P0f7lXfvMB8GA1UdIwQY
MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt
N2NhOWI4ZTkxYWM3LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3
LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoRGll0l
+9zRvWk9G5nkfyp1tVc6KpX3SIudATMD60Qk7Kr3eq3Z7f36Lub/TKO8AjU94cdQ
4f+AspCG8BcKDPElRyGKpNt+srMT1NN3tW6emRzawc2AXniPc1KBEeWmMQ9TOhFd
TYyNJUCs1rLCut99IVTKsdKPgjig7wO1YI1tmROQB+E/wR3vIfCNDYldvb5aea3/
i0tIoTf5pnff+WjkM9qHj30NZx/0sIdFhWnb3ht9TWjpF1JsWRPZ1y6Evhs1UJrb
m6yIDazCTjqKEskxJ/5ppr+eJs0usPm2B1M84WqY7e8hV+wmVznloxiC8T/aU8pW
BIh8JR2IR99DYw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:49:13 2026 by rpki-client