Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: PS487YnTeLXkAvrclDbfnDU/UYjU66lR56Ee/hsYIMI=
Subject key identifier: 0C:E4:01:F2:5F:8C:7B:43:1B:03:DB:DF:61:BE:9C:84:FF:DF:72:84
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 019D25F2052D363319C00345999CC3356366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0DF7
Signing time: Wed 25 Mar 2026 17:01:51 +0000
Manifest this update: Wed 25 Mar 2026 17:01:51 +0000
Manifest next update: Thu 26 Mar 2026 17:01:51 +0000
Files and hashes: 1: aPqOfzzuuz9AqAHspb9bdZx6PfM.roa (hash: zBL5ieLSzKkx3st5xVsICvLwsvchGrXAG+kK+S4AaG8=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: I81m3Io2oVhgdZ5zE0BJGzrXk6ywYlfFtO6nG2aOeYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:05:2d:36:33:19:c0:03:45:99:9c:c3:35:63:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Mar 25 17:01:51 2026 GMT
Not After : Mar 26 17:01:51 2026 GMT
Subject: CN=0ce401f25f8c7b431b03dbdf61be9c84ffdf7284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:69:92:53:f9:c4:8b:b8:fe:ad:e5:bd:79:
35:c7:32:f9:46:b5:ed:e3:dd:d2:7a:48:5b:44:9c:
9d:4a:3b:ad:a1:37:fd:03:35:ca:55:27:0e:76:31:
ba:cb:b3:2f:e1:89:7a:26:cc:ef:8a:14:9e:0e:90:
7c:8f:e0:3a:4f:bc:14:fd:17:e2:ff:24:2e:e8:65:
ac:2f:ac:63:ec:f0:23:86:8f:38:39:39:70:36:65:
b4:26:84:26:6d:06:e6:b0:d1:78:18:7f:40:f1:95:
ef:97:34:d1:07:9b:18:c6:c8:b5:73:5d:f8:17:06:
39:01:95:dc:dd:6c:1f:f7:48:0d:77:51:bb:1d:ae:
60:c2:46:f2:3e:ec:74:df:f4:bd:b4:2a:8f:39:b9:
ec:27:31:08:f3:de:aa:74:25:d2:95:a6:61:a5:32:
0b:49:0f:32:1a:d4:ac:dd:6b:66:6d:9c:c3:55:ee:
59:43:b9:ff:49:8b:57:d4:b6:6a:45:77:2c:e4:c8:
48:2a:4a:df:d9:b5:1b:3a:ae:10:38:29:ec:f3:3a:
87:52:ae:3e:0d:2d:46:36:7b:96:a4:12:3e:77:3e:
58:64:fd:69:26:51:61:ae:bd:c2:18:98:e8:12:e0:
f2:ba:b7:2c:14:d1:35:28:17:99:ba:79:d0:2a:94:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E4:01:F2:5F:8C:7B:43:1B:03:DB:DF:61:BE:9C:84:FF:DF:72:84
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ae:fa:ef:fb:b3:7f:b8:8a:5b:1c:61:5c:8f:fd:0d:14:4e:
bf:cf:1b:6f:49:95:01:30:78:7d:ed:a1:da:c6:ee:db:18:81:
10:98:6a:a3:a9:3a:80:b7:95:0d:70:7b:84:1d:25:86:6b:14:
59:c2:63:a1:21:c5:3a:82:c5:49:ca:fa:e9:52:91:ff:98:bc:
65:23:57:1a:9e:71:9e:98:07:33:b6:21:72:3a:07:b5:88:ee:
ee:9c:5f:ab:3b:4a:2d:88:76:07:ee:34:ba:48:c4:75:4e:ef:
cf:e9:9b:0c:07:1d:eb:78:7a:18:80:a6:34:fd:b2:9d:3d:26:
df:66:73:9b:9a:c1:76:83:1c:4f:18:aa:0a:b9:06:40:8a:4f:
97:ce:8f:50:c0:3a:ee:19:ed:93:e0:90:be:a3:e2:b0:af:de:
59:8d:65:0f:fd:e1:0d:90:8b:ea:79:41:e5:92:25:32:ca:81:
af:b6:12:3e:f0:74:e3:f9:0f:b2:f4:4a:cd:61:89:7b:eb:53:
2a:25:78:e9:1a:49:a9:95:a9:90:19:f6:46:06:d9:5b:e6:34:
16:29:89:7d:9b:73:bd:10:a0:02:93:b9:a4:e6:62:e7:88:15:
b6:9b:33:76:8b:13:c8:3c:4b:26:7c:59:39:5d:81:c2:49:f9:
e9:fd:32:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8gUtNjMZwANFmZzDNWNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGU0NTZkNGQ0MDVjNmY0MjkyZDYzNjg4Njc2Y2UxNTBl
N2YwN2UwHhcNMjYwMzI1MTcwMTUxWhcNMjYwMzI2MTcwMTUxWjAzMTEwLwYDVQQD
EygwY2U0MDFmMjVmOGM3YjQzMWIwM2RiZGY2MWJlOWM4NGZmZGY3Mjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwitpklP5xIu4/q3lvXk1xzL5RrXt
493SekhbRJydSjutoTf9AzXKVScOdjG6y7Mv4Yl6JszvihSeDpB8j+A6T7wU/Rfi
/yQu6GWsL6xj7PAjho84OTlwNmW0JoQmbQbmsNF4GH9A8ZXvlzTRB5sYxsi1c134
FwY5AZXc3Wwf90gNd1G7Ha5gwkbyPux03/S9tCqPObnsJzEI896qdCXSlaZhpTIL
SQ8yGtSs3WtmbZzDVe5ZQ7n/SYtX1LZqRXcs5MhIKkrf2bUbOq4QOCns8zqHUq4+
DS1GNnuWpBI+dz5YZP1pJlFhrr3CGJjoEuDyurcsFNE1KBeZunnQKpT9+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzkAfJfjHtDGwPb32G+nIT/33KEMB8GA1UdIwQY
MBaAFKHeRW1NQFxvQpLWNohnbOFQ5/B+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUt
MGM5ZTBjZjdlOWZjLzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80MGU0MDUtYTM4Zi00NzgxLThkNTUtMGM5ZTBjZjdlOWZj
LzEvb2Q1RmJVMUFYRzlDa3RZMmlHZHM0VkRuOEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6767/uz
f7iKWxxhXI/9DRROv88bb0mVATB4fe2h2sbu2xiBEJhqo6k6gLeVDXB7hB0lhmsU
WcJjoSHFOoLFScr66VKR/5i8ZSNXGp5xnpgHM7YhcjoHtYju7pxfqztKLYh2B+40
ukjEdU7vz+mbDAcd63h6GICmNP2ynT0m32Zzm5rBdoMcTxiqCrkGQIpPl86PUMA6
7hntk+CQvqPisK/eWY1lD/3hDZCL6nlB5ZIlMsqBr7YSPvB04/kPsvRKzWGJe+tT
KiV46RpJqZWpkBn2RgbZW+Y0FimJfZtzvRCgApO5pOZi54gVtpszdosTyDxLJnxZ
OV2Bwkn56f0ySw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:40 2026 by rpki-client