Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: jm7bAONsZh43QbwxN4XIrrU7NItvvi2dmlE94HoK75M=
Subject key identifier: 98:8A:2C:79:20:09:E9:0A:D6:23:85:E9:FA:40:F6:27:13:4D:F4:9F
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 019D27A8ECB79C791AE4B94F3B0B4EAA7836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:01:15 +0000
Manifest this update: Thu 26 Mar 2026 01:01:15 +0000
Manifest next update: Fri 27 Mar 2026 01:01:15 +0000
Files and hashes: 1: Qy_arNs4QDgtO2oRm6RpY_yvLkM.roa (hash: sM686aC1vKRTxadqylfi5DLdDcH3yJBn9EUNjVW3g+A=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: wXcE9Ye/EEmRVKAeLxszQjDypVXgpRVd3YB5TV8Hcm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ec:b7:9c:79:1a:e4:b9:4f:3b:0b:4e:aa:78:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Mar 26 01:01:15 2026 GMT
Not After : Mar 27 01:01:15 2026 GMT
Subject: CN=988a2c792009e90ad62385e9fa40f627134df49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:5b:47:52:5c:11:06:89:b4:c7:61:71:42:
25:2e:f9:f4:1b:f1:70:7c:98:af:12:db:95:29:1f:
3e:7e:da:05:73:b9:db:e1:a4:18:e0:00:98:09:31:
69:4e:d1:1f:f5:16:af:fb:7e:83:09:d3:f4:0e:f2:
b4:33:f8:15:fa:9d:3a:a8:1e:5e:a4:d7:5a:10:ec:
45:92:88:fa:4c:30:8a:31:82:1c:6d:16:c4:fc:e5:
10:c2:f8:52:d8:0f:7b:2c:e9:1d:45:ca:b6:48:94:
6f:5a:68:50:74:4f:ef:67:ab:62:20:6c:f9:d5:ac:
b2:ce:32:cd:c4:b9:b4:48:0b:6c:87:40:86:46:55:
82:f0:80:53:98:86:cb:f2:f4:45:d4:2b:20:00:58:
66:cb:17:66:f1:39:44:b7:95:95:d5:87:6c:5b:31:
e0:9f:02:50:3b:f6:79:48:cc:23:81:aa:21:49:b2:
e5:98:fc:ed:45:87:3e:9b:15:92:dc:e5:2b:9a:90:
ac:3e:32:70:cf:eb:be:c5:e1:f2:16:a8:de:77:75:
3f:54:0c:a9:60:8b:46:fc:fc:b4:9d:a9:dc:74:a7:
8a:00:5b:b9:9c:6f:96:07:0f:63:28:6b:24:0f:14:
57:75:d1:40:65:3a:14:c3:01:41:33:56:ee:9a:85:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8A:2C:79:20:09:E9:0A:D6:23:85:E9:FA:40:F6:27:13:4D:F4:9F
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:93:8f:0a:b4:c4:b8:60:14:a6:12:16:f2:83:d8:a6:bb:aa:
19:c0:28:b6:d8:08:06:d8:a6:2a:a4:f1:8c:3c:ae:a9:e9:89:
8f:d8:68:5b:43:fe:29:7e:97:19:50:d1:21:dd:da:0e:30:e8:
76:03:5b:a2:c9:a1:bf:35:44:84:f4:41:38:13:86:e0:b5:ca:
4b:2f:de:2d:cf:56:f3:c4:83:ff:13:60:a4:2b:ad:cd:83:ad:
38:b4:ce:cd:c9:f0:fb:b7:04:9a:fd:d4:3b:84:76:b5:d0:fd:
ac:f9:7f:09:6b:0c:85:69:96:49:83:85:49:20:7b:17:67:72:
54:d9:d8:85:08:2d:a5:a6:5c:c2:f0:d1:6d:d8:0c:01:68:08:
95:62:44:f6:68:7d:40:28:5b:27:40:70:a3:09:d1:60:f5:38:
75:b1:a7:25:f1:7c:d5:fb:b1:c5:51:4d:4b:6e:e6:f0:e4:33:
36:fb:2c:d1:94:6a:32:e0:b5:97:b7:cf:c3:9d:0a:09:29:2b:
24:8b:d8:ae:48:17:ee:db:6f:a7:da:0a:7b:16:54:4c:e2:63:
04:e5:4e:e7:1c:2e:11:ad:91:9b:58:12:a0:9d:15:59:d1:63:
41:75:09:fd:ec:d5:09:a8:23:a5:66:6b:3a:f1:58:c7:0d:47:
3d:13:6c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:36 2026 by rpki-client