Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier: Mu5kp+kYoDPWZDsNBOCFAwv2LgruCt3ZxzFLYCaOTmo=
Subject key identifier: 9C:72:7F:63:D1:16:14:B7:D9:F3:67:18:E3:D5:90:67:2D:60:55:F6
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 019D0B8CCDA322A090B6526B24B8353A9BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number: 07C5
Signing time: Fri 20 Mar 2026 14:01:10 +0000
Manifest this update: Fri 20 Mar 2026 14:01:10 +0000
Manifest next update: Sat 21 Mar 2026 14:01:10 +0000
Files and hashes: 1: 3tkw1-qcgk_89pGe7YNJR2YIKSg.roa (hash: 8wvPCey8xezOzLXtvtokdiPSl8fhacZDXdIFAhw8g4o=)
2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: 3LtH91i/WrBepV3SCGMbVwJrZAJ2Mrvioh+9lLOt8QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:8c:cd:a3:22:a0:90:b6:52:6b:24:b8:35:3a:9b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Mar 20 14:01:10 2026 GMT
Not After : Mar 21 14:01:10 2026 GMT
Subject: CN=9c727f63d11614b7d9f36718e3d590672d6055f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:51:fb:0a:e9:57:7c:72:70:88:bf:ba:e9:
34:f4:1c:01:85:a6:09:97:e2:95:e6:b4:3e:0c:e8:
00:12:3b:a7:1f:63:22:8e:b2:1d:5e:77:f9:e3:6d:
d8:85:fb:c4:a5:ef:18:2e:cd:a1:21:a4:2f:a4:58:
7c:8e:73:49:40:30:c7:23:a1:a0:4b:95:38:34:2f:
ce:f7:9c:f4:a6:c6:79:f0:1d:0e:8d:19:1c:0f:d7:
b5:cc:82:82:ae:77:b3:af:41:57:c7:d9:e0:66:15:
f1:a1:7d:da:8b:66:f7:4b:83:27:5c:0d:05:5b:fd:
61:54:8b:8b:71:16:fc:a3:ef:cd:eb:fe:a2:24:7d:
5a:0c:78:60:64:f3:e8:f3:64:35:72:4f:d3:0b:7f:
e7:89:0f:6c:32:6b:cf:bf:62:f0:02:d0:28:82:0a:
9e:66:d4:1e:9c:4d:0f:ed:7d:60:d2:b7:18:aa:49:
13:23:17:87:01:14:7b:97:fd:e2:b4:32:87:3f:1b:
a4:ce:e8:02:7e:51:0f:de:27:e3:e1:9b:92:96:36:
47:9e:b8:ea:cb:c7:50:9d:22:9d:30:c9:e7:76:8c:
97:d2:ed:8d:c7:20:6c:a7:bb:5e:56:f6:11:3a:03:
01:94:0b:fe:c9:c7:44:28:07:d2:32:bd:a1:d6:e8:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:72:7F:63:D1:16:14:B7:D9:F3:67:18:E3:D5:90:67:2D:60:55:F6
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3b:fe:10:ef:fc:4e:b0:b9:f1:4a:30:3c:12:d7:9e:a7:e5:
92:59:74:4c:74:58:a8:66:7a:8e:71:46:53:f4:e2:d6:a1:f3:
b7:3e:a9:6f:3a:71:b2:8c:61:d5:35:62:96:78:b7:d4:c6:51:
07:37:ff:54:eb:f9:47:c8:b7:6e:44:11:e4:ff:20:91:bb:bb:
5c:3a:d4:6d:c8:d2:de:07:30:05:2d:00:05:91:30:44:8a:8d:
b9:e3:39:af:b0:07:0b:eb:43:ac:78:79:50:68:38:79:7f:01:
c8:6f:52:a6:2f:96:66:42:23:fa:90:d9:0a:bb:78:13:8f:9c:
e0:42:c5:02:81:3c:36:9d:13:e6:3f:f9:5e:8e:08:59:42:d3:
5c:2d:ed:fb:93:c2:b7:24:f3:5c:2f:46:fa:9f:db:8b:cf:1f:
fe:39:8f:28:af:b4:f7:bf:34:70:75:7a:7f:a1:cf:48:35:92:
ff:33:f1:f6:8c:37:75:95:e5:3f:eb:da:b5:2a:8a:28:b9:da:
09:d6:59:eb:0b:1b:19:49:4d:0b:d6:e1:53:36:f3:aa:28:ff:
4d:58:0d:3e:82:09:b3:6a:45:09:e8:9e:97:10:56:36:63:5e:
d3:10:82:54:50:6e:88:96:06:c6:53:51:62:2f:3e:7c:f9:71:
70:6e:96:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 17:58:40 2026 by rpki-client