Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: 8YpKqJQYlrwYWGEOR1iN3WcGWaPRFt9RT1AyheDPcbo=
Subject key identifier: 09:16:E6:BB:65:8D:06:36:9D:7C:9D:DF:A4:CC:27:E3:11:72:56:46
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 019D3866497F8550D2629EF53DBD553BDF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 1427
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: FgwbtcgDS6AsP8OMVO21C0j4_jg.roa (hash: iHrPCB0hDYR1pARGaZ09Zax2FMU3N5cpbZlNW/6HTA8=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: JrRQQ0MsRIjMhLjIoOzfdVf0QNiyZk8bLLNSP2zeE14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:49:7f:85:50:d2:62:9e:f5:3d:bd:55:3b:df:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=0916e6bb658d06369d7c9ddfa4cc27e311725646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:17:10:bb:35:bf:3d:51:70:74:13:90:50:97:
8a:bc:46:c8:be:3e:8a:3f:15:cc:16:ec:71:35:7b:
a3:ba:58:d4:29:d2:4f:4f:47:89:21:72:5f:30:fe:
88:8f:dd:e5:bf:99:fd:1c:b2:27:2a:7d:bd:9a:5f:
a7:23:51:92:85:8b:5b:73:18:8c:f5:f1:b6:ea:72:
26:0f:6d:f4:46:8a:dd:1e:fd:aa:32:de:84:05:4d:
b0:a8:56:33:90:07:55:19:12:14:35:77:03:b8:81:
89:08:e8:91:43:f1:69:e2:4f:6b:3c:8c:6c:3a:88:
f4:e0:36:df:4f:ee:d9:8e:4f:13:95:65:ad:00:09:
30:71:13:59:1f:05:8c:53:63:ba:b1:00:df:7b:dd:
46:a0:0f:6b:db:b2:99:aa:d4:fd:12:f5:1c:17:cc:
49:37:ed:df:66:bb:5b:9b:39:46:e9:d0:6c:dd:4b:
fa:87:0d:4d:05:59:74:eb:a4:0d:7e:40:a8:73:0c:
3c:a4:d6:cb:65:0f:13:6d:4b:8f:14:be:5a:2f:23:
4d:60:f1:40:7f:e5:f6:e3:ad:6c:3e:48:a5:20:83:
83:b5:c5:3f:4c:e5:21:05:4d:be:27:95:b4:97:f5:
d2:7c:5f:b2:58:aa:e7:ca:8c:55:1a:2a:2e:23:e1:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:E6:BB:65:8D:06:36:9D:7C:9D:DF:A4:CC:27:E3:11:72:56:46
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:49:bd:a3:4f:a3:b4:31:e1:11:fb:ef:08:d8:84:cd:57:4b:
99:cd:2e:6a:1c:d7:2e:f2:ec:f6:5d:7d:1c:94:08:fb:66:ab:
ae:4f:ef:38:f4:a4:08:de:04:c7:7a:62:55:5a:59:29:51:5a:
53:55:57:c4:e3:51:51:5b:9b:fb:09:f8:74:7d:b5:d7:f4:2e:
5c:de:49:c6:64:58:71:26:4c:7e:7b:19:7a:8f:61:6c:fe:5d:
90:fb:2c:0b:4c:49:7a:3f:cb:71:f2:a7:8b:96:c0:ec:56:87:
b3:bf:88:0b:95:55:ae:55:71:96:00:5b:70:57:53:9c:96:e2:
09:cf:3f:4d:8a:3a:4c:f3:6a:dc:0f:5d:91:4c:27:e1:fd:51:
67:23:f8:c0:bf:73:a3:49:dd:07:e8:cd:90:d6:ea:7e:26:27:
1b:c6:48:fe:3b:1f:8a:41:47:88:e6:7d:e5:d0:70:c8:74:1f:
c2:74:28:ff:9c:07:24:4d:e2:23:85:0e:75:0c:06:53:22:e8:
d9:35:99:0d:e3:b4:d5:64:8f:95:4c:c0:81:b6:3b:7c:83:4d:
8c:0f:b0:94:b1:d3:40:4a:16:4c:db:2a:fc:42:06:a4:3c:c5:
b1:2a:ec:a4:10:43:16:d4:ef:38:a0:87:72:78:3d:7e:36:28:
0e:06:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:37 2026 by rpki-client