Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
File: ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json)
Hash identifier: zHbWJpeTcB8ij6PHGeHlW9b7lqzrMleBN6bt2uENBD8=
Subject key identifier: FE:D3:B0:D5:0E:59:69:C0:DB:4F:C4:0D:F6:F7:B5:48:E0:91:79:69
Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
Certificate issuer: /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Certificate serial: 019D265FDAD5882B21EB3971007239EC3E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
Manifest number: 107C
Signing time: Wed 25 Mar 2026 19:01:49 +0000
Manifest this update: Wed 25 Mar 2026 19:01:49 +0000
Manifest next update: Thu 26 Mar 2026 19:01:49 +0000
Files and hashes: 1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: 7L91z4YJ4m+OCkzPJCgc3iCEXs2G9UHS2MltNhTnU90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:da:d5:88:2b:21:eb:39:71:00:72:39:ec:3e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Validity
Not Before: Mar 25 19:01:49 2026 GMT
Not After : Mar 26 19:01:49 2026 GMT
Subject: CN=fed3b0d50e5969c0db4fc40df6f7b548e0917969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:2c:b3:7a:34:85:80:7c:25:d9:10:81:1b:
19:60:aa:c7:b9:f2:ea:2b:7c:5e:b2:81:5d:f8:04:
7e:e8:ad:30:84:88:c9:f5:c4:2e:51:d9:6d:34:11:
b0:9f:8c:85:24:0b:ce:5b:1e:0c:fa:72:50:4a:07:
34:6e:54:1e:1e:34:87:0f:90:87:c6:7b:07:ab:9e:
f4:ad:10:f4:81:4a:06:57:ee:76:53:c1:bc:84:c4:
ba:db:42:5c:a7:a3:6b:73:f2:ca:b6:20:86:9c:1e:
71:83:15:39:d1:d4:5f:03:a7:fa:13:da:0d:2d:a4:
6a:70:d5:bb:63:ca:52:57:29:f2:ce:9a:88:c4:c2:
fe:61:3d:c7:9d:94:9e:42:69:8c:67:91:fc:c1:35:
a7:b7:06:ca:b9:cf:f5:b8:66:e9:4c:83:6f:2a:4d:
d8:c4:a4:87:55:7b:79:df:f4:bd:c6:9e:32:db:c9:
37:7d:02:68:c2:42:1d:d4:bb:2b:95:5c:b4:d7:79:
a2:39:94:4e:1c:ae:f1:d5:6b:6b:9f:5a:51:43:53:
8b:61:70:06:a9:1c:10:b5:f6:34:a0:d1:ce:c6:10:
9c:67:a4:63:1f:b9:2b:d4:d0:8a:e8:81:27:62:0b:
34:a3:fb:ca:0f:ef:14:99:06:58:10:b1:cb:d4:1c:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D3:B0:D5:0E:59:69:C0:DB:4F:C4:0D:F6:F7:B5:48:E0:91:79:69
X509v3 Authority Key Identifier:
keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:22:a6:a3:93:00:c4:b3:c9:eb:77:ad:c1:2c:20:8d:58:97:
9d:b2:ff:49:3d:43:a3:2e:bb:60:c9:6d:e7:7c:63:21:27:41:
7f:39:5d:cb:f0:da:e1:9d:fc:19:e2:cf:a7:7c:ff:e1:dc:3f:
3d:d8:40:b0:e3:5b:cc:24:38:b7:19:fb:b5:36:a3:40:bd:cb:
37:1e:f9:35:6f:a7:96:44:f4:82:39:b9:a1:72:a3:9f:c6:5f:
09:db:ee:57:61:99:96:ec:66:06:6c:64:85:b9:7a:8a:ad:34:
ea:c0:12:49:e1:31:7a:46:28:60:05:6e:6c:38:96:e4:b5:c5:
8e:bc:53:5d:9f:0d:77:48:0a:8a:76:53:4c:66:fe:9b:d9:60:
c7:b1:b9:a0:6d:fd:18:7e:b2:2c:6e:91:a6:2e:d0:53:75:d0:
5e:8e:8a:c1:53:7f:47:9e:2e:5a:cd:f4:8e:56:f6:e0:72:a6:
23:71:8a:16:4a:02:d8:c3:7e:b6:26:2f:85:cd:61:5b:d1:7c:
fa:1a:e7:42:c4:c8:d8:1a:a0:49:16:33:9b:96:d5:57:9a:65:
29:10:27:b7:f4:97:fa:ab:02:be:73:c8:cc:2d:99:84:ff:b8:
d3:3e:cf:a2:61:1f:54:8c:f8:a9:f6:b0:58:4b:40:c0:88:42:
ee:bd:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:26 2026 by rpki-client