Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: dpu6fLqcE8Z+QoN2r+QujR9Tbjp1EL3x/DnHa7T4IRc=
Subject key identifier: 96:00:C1:67:EE:78:44:A7:44:91:DD:C7:E7:C8:24:D1:AD:7E:DF:A4
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 01A17D3CCC2DEEA403DEFD277B2FE3706295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 12:01:38 +0000
Manifest this update: Tue 27 Oct 2026 12:01:38 +0000
Manifest next update: Wed 28 Oct 2026 12:01:38 +0000
Files and hashes: 1: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: 7UGovifJ3ram0fLgtKxpwv8JxxeTg7C3vJebUccNfaI=)
2: xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa (hash: ZJ+YcdwxYrTOk2uKzIqFnqUJ/TPq1N6JkOSkhw/1KeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:cc:2d:ee:a4:03:de:fd:27:7b:2f:e3:70:62:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Oct 27 12:01:38 2026 GMT
Not After : Oct 28 12:01:38 2026 GMT
Subject: CN=9600c167ee7844a74491ddc7e7c824d1ad7edfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:a6:4d:75:1c:fc:ce:7d:11:b8:42:7a:fc:
2a:1d:2a:92:2f:74:4f:44:be:c6:76:c6:61:18:6c:
61:a4:36:3b:53:4d:97:51:46:6a:20:a5:9d:9c:12:
41:00:5c:07:5c:7d:72:a9:cf:d9:6f:72:78:15:c9:
15:3c:e6:b9:50:73:03:67:d0:ea:c6:95:32:29:b2:
4a:ee:f4:62:38:d8:67:02:35:29:84:38:4c:5e:5c:
9e:34:61:f9:51:f3:8c:5e:0b:e0:77:74:63:5b:9f:
1c:ce:96:ee:51:98:98:f6:4d:ff:f7:2d:cf:df:be:
2d:cb:02:51:7c:55:95:73:a7:b0:0c:f4:fb:5b:44:
79:22:d6:4d:66:d9:28:cf:91:87:23:f7:2e:ab:b8:
66:26:a2:ee:37:ac:b3:0f:9c:57:9f:53:16:6a:7b:
1f:5a:2c:31:8d:bc:0e:c8:50:f5:13:0d:95:00:0a:
30:2f:7a:d5:f9:e8:ec:ba:36:3c:a9:25:6f:25:7d:
74:fb:8f:f0:1f:ac:52:62:fe:59:7a:51:bf:96:40:
06:b7:59:11:da:60:64:60:b0:fb:bb:49:02:10:79:
98:a8:11:94:30:41:bc:4c:72:2d:65:ce:c1:cf:10:
e1:be:6e:fc:d1:a3:e7:33:0a:db:2d:d6:f0:3f:4b:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:C1:67:EE:78:44:A7:44:91:DD:C7:E7:C8:24:D1:AD:7E:DF:A4
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6b:04:2d:32:52:44:1c:6f:db:7b:a1:11:9a:f4:55:d1:eb:
7c:be:82:fe:fc:2e:57:46:89:84:ef:62:d0:b0:a2:3b:d6:55:
03:78:52:b8:04:ff:b2:80:ac:10:0a:a7:c1:40:ff:8e:db:b6:
4c:2f:3e:b5:aa:c7:f4:d1:15:2c:41:42:0d:c0:da:a6:7e:85:
e4:4e:d8:e5:5e:53:6d:1a:2b:d1:c2:bf:61:4e:b3:30:1c:a1:
83:b5:2c:19:5c:ec:0e:1b:53:07:47:04:39:3b:b0:3a:c3:ed:
63:99:fe:2d:88:19:28:ee:7b:b4:ae:30:23:d0:d0:95:5b:3c:
9c:4a:f0:bc:94:74:89:d8:a7:cc:d7:78:16:22:2b:46:c1:fe:
97:ce:55:6d:54:31:a0:24:7d:77:28:05:7a:18:57:af:76:60:
b7:93:b4:93:46:f0:1a:c1:2b:9f:58:64:bc:b5:5a:82:65:8e:
cd:76:49:4b:d9:b4:06:3c:4e:53:bc:53:05:07:97:ab:26:44:
fe:ce:b8:6b:0f:ce:cb:b9:fc:17:30:7f:37:0e:f2:f2:dc:af:
ac:56:82:1d:3c:17:03:ca:48:3b:20:78:c0:82:24:c9:5e:56:
4c:04:38:7d:49:78:9e:bd:55:bd:bb:08:6d:40:1b:cd:e7:47:
01:2c:dd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:02 2026 by rpki-client