Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: 1KkuQZlIJWiWkUw8pTL7RXJRjjET8TZs0bLGIXWBTcY=
Subject key identifier: B7:26:2B:3D:18:32:59:59:0C:CC:C3:2B:DF:0C:82:01:A7:32:41:34
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 019D3752D22B3FBA12E29CF28EEC8119C0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 096C
Signing time: Sun 29 Mar 2026 02:01:07 +0000
Manifest this update: Sun 29 Mar 2026 02:01:07 +0000
Manifest next update: Mon 30 Mar 2026 02:01:07 +0000
Files and hashes: 1: BtxvHCilSqt_99RwN54PMNqlIS8.roa (hash: FhEZYVel7CDKvGsL+NRAOlWLOkmBn5nDe2CgOk2RwyA=)
2: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: 16O1OC9KWmgLT4EWkGvPswCCPKBGAhLH+5KgxMle8YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d2:2b:3f:ba:12:e2:9c:f2:8e:ec:81:19:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Mar 29 02:01:07 2026 GMT
Not After : Mar 30 02:01:07 2026 GMT
Subject: CN=b7262b3d183259590cccc32bdf0c8201a7324134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:ed:1f:de:38:b7:0d:18:e4:8f:be:d8:25:
b2:90:c9:3f:63:f4:e5:90:27:7c:24:61:b6:c3:76:
d5:44:fc:be:17:d1:36:0c:55:d0:4e:dc:72:b5:f3:
80:c9:dc:fb:56:4a:67:89:e9:8d:e4:32:3e:fa:2a:
91:a2:44:e1:98:f3:c0:dc:86:43:1c:3e:60:bb:b1:
cf:ee:fc:e9:e3:be:bd:1c:8c:41:33:00:c0:e2:b3:
19:f1:62:0c:38:b7:af:68:64:3d:50:bb:5a:f7:dd:
be:19:b6:48:21:7e:20:57:b7:7d:88:0a:09:35:6c:
a8:90:14:14:ee:3c:be:22:1e:29:40:8b:d1:57:11:
16:13:61:ca:0a:da:c6:b3:0b:2d:45:d2:fd:db:ac:
a2:f8:db:dc:82:2b:ac:83:89:ad:30:90:4c:f5:64:
52:b0:90:8b:f3:32:13:d7:4a:c8:75:aa:a0:30:17:
ff:0c:d6:75:e8:7e:c4:41:e4:7f:cd:14:a8:f6:a0:
90:c2:14:18:df:e9:65:06:4e:45:1e:6e:4e:aa:df:
bb:85:3d:68:ca:ba:cc:5b:f7:86:ca:b6:33:e5:33:
a3:26:34:7b:02:54:01:11:99:d7:58:3f:f2:ce:89:
6d:78:e8:19:8e:99:33:e9:5b:64:d5:7c:80:ff:69:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:26:2B:3D:18:32:59:59:0C:CC:C3:2B:DF:0C:82:01:A7:32:41:34
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d4:9c:4c:a1:04:ed:82:97:9b:f9:ec:49:53:e1:eb:e3:38:
b8:ec:b3:de:66:c0:2b:6f:16:e6:b3:5c:d8:b1:b3:9e:20:a5:
0b:55:02:0a:80:7c:d2:5b:a4:36:0c:d6:45:de:55:6b:e7:a3:
99:58:94:bf:66:a1:a6:6a:c3:8c:a6:39:f4:92:08:a9:b1:56:
58:16:f9:3f:6a:22:c0:47:11:cb:9c:78:7e:e7:11:1c:44:b7:
09:54:f7:ef:60:e7:10:e8:3d:82:f9:2b:25:91:e4:31:7c:35:
ce:8b:e6:3b:66:23:b3:b5:c6:5a:0b:c2:8c:95:49:d9:96:d2:
28:dc:48:6d:4f:dc:c1:dc:44:db:77:bc:5b:60:57:05:cd:31:
05:0d:41:9f:1a:c4:18:0d:ca:4b:75:6a:f2:b4:a0:ec:9f:a0:
a3:ea:27:1e:0d:5e:50:11:f5:e0:41:55:66:7f:0b:37:65:ca:
4b:b1:da:42:8d:89:4d:c3:b6:99:cf:91:9e:9c:08:a4:a2:d4:
1c:a3:78:e6:70:34:6e:06:e0:8e:66:e1:96:a8:9d:1a:50:3b:
f4:e7:92:b2:e4:68:21:6c:1d:64:a6:65:ea:e4:11:b3:7a:c1:
de:74:03:d2:e6:7c:56:cb:9d:cc:6f:e1:2e:12:27:bc:6e:81:
ec:6b:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 08:50:23 2026 by rpki-client