Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: lF1m5xabtlOSqWQCFhvXfmxfsPsdUdP/LV5iCh0lKSo=
Subject key identifier: 5E:1B:99:ED:67:E8:CF:08:6A:F7:47:66:38:1B:4B:E3:20:BC:3D:B9
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 019E1DFE3F06D412AB5569E17FF648052D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:01:02 +0000
Manifest this update: Tue 12 May 2026 21:01:02 +0000
Manifest next update: Wed 13 May 2026 21:01:02 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: l0QPEaKZp1VFyQf6C7KBcbEik8Gz6AumXSsEIlCNADI=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:3f:06:d4:12:ab:55:69:e1:7f:f6:48:05:2d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: May 12 21:01:02 2026 GMT
Not After : May 13 21:01:02 2026 GMT
Subject: CN=5e1b99ed67e8cf086af74766381b4be320bc3db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:77:19:34:5d:9d:ef:f0:b8:ef:15:ee:cb:
d6:35:d1:2f:9c:4e:a3:e7:72:51:1e:bd:52:6e:28:
e4:5b:30:76:63:83:43:9f:09:be:1d:1d:26:f5:02:
6a:01:57:6d:06:5d:df:2a:d1:dd:f4:dd:e1:92:bc:
45:67:6a:78:b1:06:a7:01:54:59:d4:6c:a5:79:13:
23:63:89:c9:2c:9a:d5:a3:66:95:a3:e7:92:70:9f:
20:37:b7:94:7f:44:af:16:83:53:e5:09:fa:5d:68:
6a:3f:75:27:59:2d:51:e6:4e:36:17:0b:04:c6:71:
f5:e4:54:e1:71:96:3c:ac:ca:d1:58:51:03:c1:d4:
cb:41:a1:09:7a:79:86:b8:77:c4:cc:e2:9a:3b:3c:
1c:67:a5:94:ea:14:ee:6d:49:c0:04:52:65:48:c5:
2e:cb:64:ca:6c:60:02:81:04:b1:72:bd:26:23:ac:
df:19:45:cc:74:c1:42:21:eb:e6:9a:be:1f:1c:5d:
a6:10:d0:cb:29:84:6c:97:82:35:07:59:79:e0:c2:
96:ca:74:97:53:15:87:32:07:3d:9c:fe:b0:c3:10:
62:82:9a:35:97:b7:36:62:f6:32:e3:f7:04:ae:f8:
b6:f0:fa:c1:74:80:5d:12:f1:be:ce:9a:29:d1:3f:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1B:99:ED:67:E8:CF:08:6A:F7:47:66:38:1B:4B:E3:20:BC:3D:B9
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e3:39:f2:ab:ef:31:5c:94:b6:62:86:05:a6:6e:75:a4:58:
a6:ad:0b:c9:e1:a5:bd:a0:ba:76:37:d5:be:c3:94:31:a9:76:
41:59:08:6e:99:35:36:ab:9d:ae:3f:3d:34:a0:e6:7c:6e:7e:
a5:5d:9c:42:16:da:a8:cc:57:15:c1:cc:95:9e:71:e8:87:4a:
30:e6:cb:ab:07:cb:36:28:a3:98:88:44:d6:3a:76:d7:9d:2b:
07:7a:54:8a:f8:c3:94:8b:d1:b5:b8:88:34:4e:0b:9d:8d:b2:
30:cb:80:8c:16:45:d4:6a:bb:03:9e:fd:5a:7b:70:28:61:29:
07:7c:f3:66:32:84:5a:3f:91:e5:91:b5:c7:f7:8e:de:5b:a5:
8b:91:b2:af:58:3f:12:82:2d:78:a2:0c:48:44:69:00:11:09:
51:a0:8d:e5:9f:aa:7a:3c:37:c8:01:2b:96:bf:ff:0e:bc:fe:
59:36:3e:91:9e:00:b8:e6:ed:60:3f:b0:0e:09:97:03:57:c3:
5d:36:2f:e0:4c:c5:17:ff:e0:1b:40:32:9c:0a:2c:74:13:51:
ab:44:47:78:93:2e:3c:6c:c6:02:d2:73:92:12:10:b3:b9:a5:
c0:a6:fa:1b:d0:f1:56:5a:3a:dd:44:c2:0b:1d:7a:d9:7b:19:
ea:1e:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:08 2026 by rpki-client