Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier: PqSR+wa7yOGJh/KxaTgWRuttR0FZNAhHx5OGRHKed5U=
Subject key identifier: F9:42:E7:83:CF:F0:35:CC:93:F3:20:F2:42:74:A8:82:EF:6D:BF:BC
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 019D26CCF29D1710BBC2D9783B36AA98C4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number: 147A
Signing time: Wed 25 Mar 2026 21:00:58 +0000
Manifest this update: Wed 25 Mar 2026 21:00:58 +0000
Manifest next update: Thu 26 Mar 2026 21:00:58 +0000
Files and hashes: 1: ODB5K147usnzcNTK56uipc26ego.crl (hash: LlNlVS4ysrLs44nG9Zv92C/5lwPJ3HrAR1UH4y9b2zY=)
2: ulMvleh0KpHzaZnOGnMAPRh_7go.roa (hash: f+kd+NW6NmqPoqPYmJohSpoAXQXjo50jBTIPGaMt3IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f2:9d:17:10:bb:c2:d9:78:3b:36:aa:98:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Mar 25 21:00:58 2026 GMT
Not After : Mar 26 21:00:58 2026 GMT
Subject: CN=f942e783cff035cc93f320f24274a882ef6dbfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:c5:ed:59:3d:4e:59:0e:e4:aa:4d:d7:52:
ad:9d:7f:ae:b2:8a:7c:5c:a7:a5:cc:d5:fd:9d:d6:
ff:7f:e0:1e:fe:31:82:26:74:e9:70:3e:63:34:c8:
83:46:34:63:0e:89:13:62:cc:5d:3d:e4:f3:3f:ae:
66:11:7e:61:30:80:b8:ca:f1:e0:ac:52:ed:4f:3e:
73:98:42:76:69:98:1a:fa:d4:f8:01:c1:58:5f:65:
91:22:ae:c7:9e:e2:a1:cc:22:de:12:9f:6d:90:ec:
6d:f4:df:1d:b9:ff:95:56:5a:5a:20:5e:20:15:24:
cc:e9:8a:03:bf:b2:9a:4a:b9:fa:6f:c8:54:d4:b2:
4c:a8:35:45:60:2f:1c:72:46:1f:c2:cd:e5:30:55:
b8:99:4a:0b:ee:64:61:a5:95:5b:00:d4:88:a6:fd:
76:dc:00:f3:b5:fb:92:81:4e:2a:94:c6:c5:d4:cf:
88:71:09:65:e4:ff:97:79:a4:19:f2:74:57:5a:5d:
1f:12:47:fe:ce:b5:2d:e7:41:2a:85:17:07:f9:98:
8b:f4:96:de:7e:c4:79:05:93:84:24:cc:72:74:40:
cb:77:5a:1e:f7:b9:80:23:50:c6:81:e8:98:f3:0c:
12:2d:0f:06:db:99:8b:c1:ed:25:28:27:2f:32:1d:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:E7:83:CF:F0:35:CC:93:F3:20:F2:42:74:A8:82:EF:6D:BF:BC
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2e:7f:57:ed:4d:ab:c1:bb:05:44:78:c8:5b:b8:50:02:e7:
50:e6:7e:b3:73:32:10:11:19:29:d7:63:b8:ce:1b:6f:1f:71:
10:d2:ee:97:0d:52:52:f0:3e:93:61:66:bc:00:a8:08:86:7e:
aa:ad:f8:1c:c7:cb:ef:cf:65:25:c7:ff:82:81:f0:27:da:71:
84:98:3c:49:7f:9f:ad:0a:16:4d:9b:82:d4:df:f6:6c:c6:f5:
ae:06:97:15:b8:0e:c2:de:43:66:70:44:0e:42:d7:42:79:f1:
71:cc:6c:80:87:95:54:5c:fe:bd:bf:40:7d:6c:46:bd:23:61:
cc:55:db:d5:b8:6b:46:40:5b:c4:6b:c9:9a:e9:4d:d9:51:fe:
c0:c1:82:2a:4a:80:42:00:fc:91:ca:70:0a:95:89:60:f2:40:
53:44:dc:bd:24:7a:3b:1b:e2:c1:93:59:3c:58:cf:f6:97:4f:
01:24:b5:56:13:d2:8f:ef:61:f5:37:83:81:8f:20:8d:67:81:
55:3f:bd:c6:ac:f5:6e:43:e3:58:5f:db:94:bd:62:97:0a:dd:
c3:60:b6:00:ea:01:b8:78:04:98:f0:93:d5:31:73:da:8c:d9:
40:f7:06:74:9e:cd:b9:c1:36:86:c5:b5:aa:e8:2f:4f:0f:f9:
c2:d8:41:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:02 2026 by rpki-client