Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: iQlZdXjoMZSCFCttrsr50A+u1ZYoA+VSYMjObCXGfXs=
Subject key identifier: 51:1F:66:1D:BF:6F:97:23:F3:17:7C:63:BB:21:6D:63:E2:C3:B2:4C
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 019D390A06101A921A0A233CBC0863742325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:00:51 +0000
Manifest this update: Sun 29 Mar 2026 10:00:51 +0000
Manifest next update: Mon 30 Mar 2026 10:00:51 +0000
Files and hashes: 1: Qy_arNs4QDgtO2oRm6RpY_yvLkM.roa (hash: sM686aC1vKRTxadqylfi5DLdDcH3yJBn9EUNjVW3g+A=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: SesE4JfvUSQe39IQt8Als2RpDlFRabmbg9a9sdyGDwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:06:10:1a:92:1a:0a:23:3c:bc:08:63:74:23:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Mar 29 10:00:51 2026 GMT
Not After : Mar 30 10:00:51 2026 GMT
Subject: CN=511f661dbf6f9723f3177c63bb216d63e2c3b24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:f2:b6:bf:2d:75:dd:91:f7:12:e3:97:25:
f9:ef:3f:de:62:d0:0c:af:c9:d5:1e:91:b4:ca:94:
14:c5:f5:ac:23:12:69:61:45:7b:31:53:5f:3c:7a:
2c:4a:59:cc:1d:38:f4:1e:cd:3f:18:ec:34:5f:9f:
06:72:dd:31:4f:7d:86:a7:94:d5:54:05:09:24:c3:
66:44:90:24:1b:52:7f:b1:d2:12:e4:f8:ac:d2:1a:
67:b0:c1:65:ff:c3:af:e3:b1:f6:78:a5:1f:c2:e1:
c3:2d:7b:06:51:46:6c:0a:b5:ca:a4:28:14:8c:48:
61:d9:b6:30:fe:a5:91:6d:5d:ff:63:c4:34:1b:40:
f1:e4:55:58:c2:07:0e:43:35:bf:a0:be:16:38:9c:
b1:47:58:f3:e8:b4:4b:21:8a:05:0f:8e:e3:66:80:
c9:0f:93:0c:63:06:f6:c8:9e:eb:a9:9d:a4:97:5f:
07:9d:44:67:5a:f2:2a:44:87:cc:c8:cc:3c:4f:4a:
15:fa:9b:cc:cb:8a:57:2a:75:fe:9c:9c:67:ba:50:
0e:90:c6:bb:43:94:08:4b:95:c5:0a:54:10:72:cf:
26:5d:57:5c:bf:67:43:28:35:6f:e8:ac:4d:40:34:
f3:d4:01:09:b9:07:b2:35:39:83:10:f7:41:55:5d:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1F:66:1D:BF:6F:97:23:F3:17:7C:63:BB:21:6D:63:E2:C3:B2:4C
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:be:2c:5d:e9:42:ee:52:e8:c3:51:18:75:b7:97:da:fc:8a:
a4:c2:09:78:54:ff:fc:34:f4:71:f5:f4:12:b1:d5:c5:9d:0f:
3e:30:77:07:62:93:47:f7:9c:68:a4:d7:f8:99:19:f4:91:66:
ba:71:1a:bb:75:29:d4:71:ad:eb:7e:b2:31:7d:7e:9d:d6:26:
aa:dc:a7:ac:ae:8f:ec:9b:8e:c4:44:6b:71:5a:07:be:9a:53:
bd:1c:cf:e5:11:31:ec:3b:61:4c:f3:81:c4:c5:a0:ea:26:89:
20:18:59:33:f4:b9:e0:55:f4:e8:9f:58:6c:1e:05:19:63:5b:
69:17:5b:32:be:51:e2:76:d6:d7:92:d5:d9:10:97:16:ec:f0:
a5:d7:08:28:64:34:3f:b6:99:31:17:6d:3e:b6:fe:91:de:69:
4d:bb:bf:05:b4:47:dd:af:b0:f6:fa:ee:2f:79:18:85:4a:11:
21:ce:a2:09:5e:9f:a1:f3:a7:73:d0:d5:f8:29:79:87:14:f2:
67:8a:61:8b:b8:5f:6f:a5:bd:d6:84:b3:62:12:b8:96:43:58:
c6:1c:73:67:8d:64:d3:19:3f:fb:a0:3a:5d:2f:29:a5:36:02:
fe:7b:c7:54:dd:62:7f:bf:26:21:a4:e3:72:33:17:96:dc:33:
90:53:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:03 2026 by rpki-client