Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: Yi9TBFT73rvKaJS66dV7SDdE7e55n4bT4XrOgXULY4A=
Subject key identifier: E4:B9:34:D8:13:D0:4A:AF:E3:3E:EF:55:76:C1:08:6C:B3:8B:40:C3
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 019D2AE0C34C35FB59906306E2E6EF8C4115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 1420
Signing time: Thu 26 Mar 2026 16:01:06 +0000
Manifest this update: Thu 26 Mar 2026 16:01:06 +0000
Manifest next update: Fri 27 Mar 2026 16:01:06 +0000
Files and hashes: 1: FgwbtcgDS6AsP8OMVO21C0j4_jg.roa (hash: iHrPCB0hDYR1pARGaZ09Zax2FMU3N5cpbZlNW/6HTA8=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: BgmYfQKASrIvWIbwy6/wZRf8/1806btL2R2oCA7+qhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:c3:4c:35:fb:59:90:63:06:e2:e6:ef:8c:41:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Mar 26 16:01:06 2026 GMT
Not After : Mar 27 16:01:06 2026 GMT
Subject: CN=e4b934d813d04aafe33eef5576c1086cb38b40c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:fa:0a:6e:16:42:37:37:4a:22:9e:75:42:
af:d8:82:ef:ba:03:23:3b:a3:e0:e4:dd:bc:69:47:
48:7c:83:25:08:40:f2:24:cb:0c:d7:d8:da:07:8d:
cb:f4:12:53:2c:55:97:d1:12:9d:b8:1f:ae:88:3b:
cb:fb:33:65:ae:5f:8f:4c:8e:68:d8:1e:00:f9:5b:
8f:3b:c5:c0:54:44:23:a9:bd:8d:0b:6e:f3:89:e0:
e9:5c:9d:d6:e7:92:e1:9c:67:08:c0:03:e7:b9:e0:
94:ba:c4:c9:36:57:ba:6c:ca:04:10:4b:16:61:a2:
e3:7b:c3:b2:17:1f:64:7d:df:3d:0e:16:d7:2a:03:
89:b8:88:ac:83:0b:ab:89:5e:f6:6b:c2:e6:50:7b:
be:9e:33:af:7f:c4:c1:b3:34:48:d1:60:bf:03:d7:
39:46:8d:05:97:80:41:6c:e8:f6:b3:bf:8b:29:79:
b2:d7:7e:45:be:01:1f:cf:ac:4d:2a:1d:5d:af:a0:
6b:86:0e:e4:82:fe:f8:ae:c9:9c:64:d2:b3:b0:f1:
3c:dd:42:34:3f:1e:35:3a:d8:61:30:c5:35:0c:0c:
57:cc:c6:db:9d:76:21:57:fe:6b:f6:8f:f9:85:fa:
24:4c:67:65:9c:21:37:71:90:15:00:55:75:fc:f1:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:34:D8:13:D0:4A:AF:E3:3E:EF:55:76:C1:08:6C:B3:8B:40:C3
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ae:69:e7:fe:bf:0f:db:33:5a:0c:97:26:39:80:a8:5f:a8:
f0:c2:ac:f5:4f:a7:3c:c9:09:03:4a:e6:c4:5f:99:e6:05:63:
99:4f:45:45:de:35:67:4b:47:6f:73:a1:5c:84:a5:2b:7a:ab:
c6:fd:6a:5f:86:16:77:7b:91:8f:f0:5a:eb:c0:4c:80:ed:32:
73:47:43:f6:11:ee:71:4d:87:e9:c8:02:1d:be:fe:39:db:e2:
7e:e0:0f:58:18:b3:e4:6f:8c:d6:44:c4:e0:33:6d:92:42:bb:
75:92:0a:64:7f:1d:1a:f4:34:ba:97:2a:97:9c:0e:c9:d6:1c:
66:be:30:75:b2:b5:71:03:87:f3:ed:84:1a:52:de:35:26:d2:
6a:0c:ba:1d:8f:4e:1d:68:1a:f2:3c:f1:7b:85:58:34:c6:ff:
73:aa:5a:93:34:e3:a3:11:84:4c:00:8a:99:1a:f9:47:0d:19:
84:4d:fa:b3:be:7f:2f:43:39:9d:d0:a2:04:41:40:a1:29:85:
38:bb:44:d3:d0:4c:7b:6b:58:2c:b0:71:3e:b0:ef:ac:6b:eb:
b3:64:1b:58:df:fc:26:0b:3b:04:05:96:f9:fd:3d:42:7a:99:
99:52:c0:36:25:26:ee:f8:d3:cf:f9:a8:3b:d7:7a:b3:78:ef:
ee:2a:ba:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:55 2026 by rpki-client