Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: ASY1ImJoh9nzWN2PLDoWpsUX5iQ+NFDAIGV/9/WMbqc=
Subject key identifier: F2:44:2B:32:A8:08:B6:87:E1:55:C4:C5:51:5E:18:F1:10:98:4E:4B
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 019F94A47BA29F2C3D9E41D968E458EB2BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 15:00:35 +0000
Manifest this update: Fri 24 Jul 2026 15:00:35 +0000
Manifest next update: Sat 25 Jul 2026 15:00:35 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: PHahoXoGBaefIepU/MaceBIBEYBu2X8MzkpU7g7fBJw=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:7b:a2:9f:2c:3d:9e:41:d9:68:e4:58:eb:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Jul 24 15:00:35 2026 GMT
Not After : Jul 25 15:00:35 2026 GMT
Subject: CN=f2442b32a808b687e155c4c5515e18f110984e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:99:d2:90:87:9c:72:bd:b7:bb:04:e5:f0:
77:63:79:1c:40:52:34:61:40:bd:98:b1:73:b6:31:
60:5f:68:72:e4:ed:6d:8a:6e:22:51:2d:f8:58:dd:
2e:09:24:03:26:27:18:9c:3e:97:e9:a4:59:2d:c1:
b0:65:9a:33:21:32:7a:e2:9c:62:2d:72:42:d7:b6:
dc:a9:33:15:c3:fe:ce:51:ce:bb:ce:45:ec:fc:23:
5b:4e:88:cc:8a:5e:76:52:f6:3f:45:32:d5:52:ba:
ff:0d:7a:5d:dc:d9:e6:68:fc:e7:cf:6c:7d:fd:13:
db:55:d0:91:d8:c7:97:70:d1:70:47:9c:2a:7c:8f:
72:09:f3:f2:ab:92:22:18:93:7e:ca:aa:b5:d3:c0:
37:59:5d:cb:bc:a5:c4:f6:81:fe:8c:b5:52:3b:56:
51:3c:75:1e:28:f9:7b:c5:25:41:1b:a0:d4:e5:01:
41:cb:fc:b7:56:43:98:eb:32:87:67:bb:5b:c6:52:
3e:82:bc:f5:c1:75:36:11:24:c9:47:77:5f:50:7c:
73:c3:90:f7:59:ab:92:db:a9:18:45:a7:e4:a2:c7:
e6:87:82:dd:0b:ed:b2:85:0d:49:70:2d:4d:5b:93:
9b:3a:2d:db:a1:9f:fe:28:e0:ba:a8:b0:cc:d4:c2:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:2B:32:A8:08:B6:87:E1:55:C4:C5:51:5E:18:F1:10:98:4E:4B
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:24:c8:ab:7f:b5:3b:11:18:21:2b:de:e0:ff:8c:b0:ba:80:
1b:b7:1c:0a:c3:e2:e6:1c:fb:5c:08:74:46:4a:55:0a:cb:1c:
b4:8e:0c:61:1d:fb:9a:ab:0f:87:68:be:72:c5:44:75:f3:0b:
4a:ce:21:1d:32:2f:da:fa:ce:f9:8f:fa:df:c2:af:e2:ba:a3:
5b:b7:3f:a0:22:eb:e8:22:79:ac:65:d9:2b:5e:68:94:48:95:
45:06:72:a1:e6:ff:1b:f5:bd:31:38:49:09:60:af:d9:26:de:
a5:6a:e9:80:16:8f:ad:1f:aa:75:4e:2a:a1:e8:3c:b1:93:43:
11:de:de:19:d8:f3:6b:77:0c:c4:3d:d2:26:b9:c1:22:80:9b:
46:a9:30:96:de:cc:d9:a2:19:ca:97:62:9a:2d:1d:f6:61:f8:
1d:10:c6:30:a6:58:cd:b0:75:50:dd:54:90:9c:67:8d:a9:6b:
d7:0f:c5:8e:2d:8a:0a:e1:84:a0:5d:ac:7e:6b:0a:70:6d:30:
a3:f9:51:64:a6:86:fe:32:3c:27:49:3e:27:46:94:6b:07:e9:
c0:8f:e6:75:b5:d6:92:46:64:0a:5b:82:f1:4e:70:6a:d0:0a:
36:4a:70:ca:35:7a:00:8d:19:08:68:80:74:21:91:dc:2a:69:
26:81:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:10 2026 by rpki-client