Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: O5qQ5IHX6KM7Nttsf89NGC+vdqsFxm41uwgACxgO3XY=
Subject key identifier: 45:AD:34:51:06:07:CC:65:EF:25:C1:30:10:D6:23:D1:AB:61:25:C3
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 01A1076F4B3AC20FFBDFF3CB8F7AD41A7775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 15:01:36 +0000
Manifest this update: Sun 04 Oct 2026 15:01:36 +0000
Manifest next update: Mon 05 Oct 2026 15:01:36 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: r6/1mVVZ/87gsBFt2cQ/pf3nLfKkVMUUlEhMy6Z2tkA=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6f:4b:3a:c2:0f:fb:df:f3:cb:8f:7a:d4:1a:77:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Oct 4 15:01:36 2026 GMT
Not After : Oct 5 15:01:36 2026 GMT
Subject: CN=45ad34510607cc65ef25c13010d623d1ab6125c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:47:e7:73:88:3f:97:2d:6f:78:42:5c:42:
9a:08:de:46:a9:8c:8f:48:3d:b6:87:28:9c:de:a6:
c0:45:c4:13:7c:54:f1:7b:78:56:74:30:a1:40:81:
91:5d:d2:2b:a8:8e:8a:bf:62:c1:b5:fa:0c:ea:b1:
82:f3:4f:24:c1:01:c4:30:e0:0e:9f:91:1a:80:01:
34:64:56:93:66:50:4c:85:5c:d9:f4:cb:89:e4:63:
ab:9b:4e:2c:dd:e0:cb:6a:82:f2:28:df:8f:c6:6f:
b6:37:15:7b:1c:85:e6:5c:13:cb:38:a7:24:9f:24:
15:d4:d3:71:49:e6:57:99:68:68:af:6c:a1:1d:4f:
c7:79:54:f6:81:1c:36:9e:b2:88:73:dc:4b:82:75:
58:93:b3:e9:f9:33:e4:0f:02:db:33:db:4b:ff:ba:
46:b1:6b:e0:44:89:1c:cb:c6:ac:a9:03:ef:7f:fc:
0d:e6:06:87:d1:fd:4e:b0:1e:db:66:56:60:2c:8f:
a7:96:d2:54:b9:93:28:0e:41:6e:93:18:1b:5c:e6:
91:b4:e9:ba:83:ea:78:07:7e:86:5e:0c:4f:ec:b7:
90:25:26:fe:63:0b:1f:b4:61:3b:e3:f6:04:25:03:
49:67:bb:ba:27:16:92:b8:41:5f:a9:fc:9c:d1:81:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AD:34:51:06:07:CC:65:EF:25:C1:30:10:D6:23:D1:AB:61:25:C3
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f3:35:a3:68:71:27:3e:5d:f1:a1:34:ae:d3:b0:13:0c:b9:
b6:9b:7d:83:f1:02:6e:ac:c0:e2:3d:ef:72:b4:b6:ad:f7:58:
75:75:dd:bc:67:ed:c0:e1:f4:ac:4a:23:4f:5e:3e:e8:7c:a6:
7e:87:86:10:e2:88:94:3b:a1:49:b6:02:45:34:44:15:f2:74:
73:2e:2b:fb:a7:f8:4b:0a:6c:f5:30:7a:46:bd:14:ed:6a:50:
d2:cd:78:9a:8e:19:6e:d7:7c:0b:fe:17:b6:94:c7:b2:3f:a9:
1e:7f:fc:79:ce:6b:23:0a:8b:d1:06:c4:ce:bc:05:e9:83:05:
56:28:01:a6:75:f5:3a:05:9a:bd:97:ab:d5:69:d3:09:e7:7f:
77:54:ee:6e:3f:66:3c:12:69:2f:f1:43:35:84:32:85:d0:fd:
62:f3:eb:ce:ff:c7:2d:03:45:b2:74:d7:8e:17:fb:0d:e2:6d:
09:cc:e1:ec:f6:a3:f9:8f:4b:4b:2e:c1:fa:42:d1:0e:e5:9e:
1f:8a:3a:e1:c2:3c:85:50:ab:37:a0:0c:a0:c4:1c:55:cb:a7:
07:d4:3c:9d:04:6c:46:74:c4:7a:61:e4:94:ca:a4:4c:ad:fd:
f6:5d:41:ce:11:e9:3b:dc:1b:79:86:a4:09:ff:9c:8c:f0:ca:
15:0b:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:27:32 2026 by rpki-client