Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: fEcZnX/rp41ps2TRF1807jbBVZT4geW8q3GEGUjKwtk=
Subject key identifier: F2:77:6E:71:14:6D:6E:51:2E:62:6C:C5:3F:F8:C1:32:42:DE:3D:7A
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 019D26CCDC917439A9C99B09402C705E03CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: hK+znHs4Zhr4rAVLAgnXgkr3GGtFiVnvBAemuoxK/Hw=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:dc:91:74:39:a9:c9:9b:09:40:2c:70:5e:03:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=f2776e71146d6e512e626cc53ff8c13242de3d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:41:3c:79:7c:48:10:8f:dc:65:d7:5b:f1:
50:83:a7:7b:54:d5:70:54:42:57:1c:7a:84:ec:b2:
f0:f9:4b:d1:6e:34:e4:e7:17:96:f7:07:a9:a1:2a:
d2:ee:6d:2d:93:3f:6a:c1:c7:1b:87:8b:7d:8c:9f:
b1:d2:80:de:aa:98:75:c0:7f:fd:60:ef:f9:02:7a:
d1:f9:4c:d9:e2:0d:56:4a:d2:7f:d9:f7:75:30:c1:
12:c1:af:91:dc:7e:5b:5a:2c:e3:f7:98:61:76:83:
9d:95:1e:13:ff:26:cd:2d:38:bc:cc:09:7a:f6:41:
ef:28:8c:d7:1f:e5:7c:74:d3:3a:2d:c0:5e:64:01:
b9:35:a7:47:93:2c:da:51:9b:0f:d0:2d:32:7e:f8:
1a:75:a3:77:d7:21:22:0d:ef:60:98:d0:ca:95:76:
99:aa:27:76:fc:16:10:8b:7a:67:e1:c2:32:90:75:
99:5e:ce:26:b9:6d:7c:00:40:82:7a:08:ed:d2:ab:
37:e5:42:7b:3d:97:46:a2:24:cb:23:92:bd:88:cb:
5b:ec:b6:d9:8d:9b:23:71:1f:79:dd:df:12:d5:5f:
c4:e4:93:e3:98:5a:be:b7:e7:78:88:70:b1:be:1a:
af:fa:92:2c:c0:e6:43:f8:f5:5c:8e:b0:4d:0a:46:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:6E:71:14:6D:6E:51:2E:62:6C:C5:3F:F8:C1:32:42:DE:3D:7A
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:19:6f:6d:7b:05:94:d0:25:82:41:60:13:0d:37:47:28:4f:
cb:f0:0a:8f:fc:e1:95:7b:22:9d:16:ac:96:e4:67:73:50:0b:
a5:a1:95:05:0b:a6:3c:33:0c:be:ae:36:bf:82:da:05:50:e4:
0d:cf:c6:73:36:74:1f:ae:27:69:74:62:37:47:0e:b7:0a:87:
4d:d6:4b:70:07:a4:cd:73:14:9a:31:4e:d2:cb:dc:36:4d:87:
eb:ab:7b:eb:f7:5c:fc:e9:7e:68:8a:66:c8:8a:59:ac:c4:32:
8f:f3:5a:37:97:d3:ae:1d:16:d6:24:54:99:ba:37:c7:dd:48:
aa:19:39:62:05:35:23:2c:14:71:7c:10:b2:b8:db:31:be:55:
16:43:15:f4:9b:7e:24:49:68:4d:7e:2b:74:fe:de:4a:c9:d7:
0e:ec:f8:5f:fa:ca:4d:6b:59:6a:1e:d0:8c:c1:31:c6:50:9b:
e3:d5:99:4a:bc:9a:c7:f6:ed:aa:f6:46:89:61:01:e6:e0:36:
e1:56:0d:7a:2d:ea:d3:d0:01:5d:99:61:8d:86:11:95:62:38:
de:53:df:94:09:b7:dc:11:ea:9b:56:35:e0:b8:d0:e0:51:ec:
83:45:35:9d:d2:13:01:92:20:6d:fb:9b:39:e1:fd:aa:4f:23:
9b:ab:b5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:46 2026 by rpki-client