Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: EkuPuc+cPpzdHB3rmqmd9+5V/aI9wGVCNVkvB8HVFGY=
Subject key identifier: 4A:C2:72:52:70:39:51:FC:85:3E:52:44:51:29:63:F9:9D:87:F7:52
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 019D3940FC47A26C8C63B6A9BCC649BD80F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0E01
Signing time: Sun 29 Mar 2026 11:00:53 +0000
Manifest this update: Sun 29 Mar 2026 11:00:53 +0000
Manifest next update: Mon 30 Mar 2026 11:00:53 +0000
Files and hashes: 1: aPqOfzzuuz9AqAHspb9bdZx6PfM.roa (hash: zBL5ieLSzKkx3st5xVsICvLwsvchGrXAG+kK+S4AaG8=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: 8VjsXkaIwKo/J9LjCS/KO0rT2tevV78S/lRWYWy778c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fc:47:a2:6c:8c:63:b6:a9:bc:c6:49:bd:80:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Mar 29 11:00:53 2026 GMT
Not After : Mar 30 11:00:53 2026 GMT
Subject: CN=4ac27252703951fc853e5244512963f99d87f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:1a:95:ac:b7:b2:90:ec:07:fb:eb:88:05:
c2:cf:a3:b0:92:8b:69:6b:b0:38:70:48:0f:91:a4:
6c:c1:1c:05:e5:ad:c7:35:85:30:a6:81:f0:b3:d7:
fb:c2:13:ce:60:c5:79:d2:e0:a2:1a:ac:b1:36:b1:
11:c0:28:20:e1:e4:dd:8a:4c:e0:8e:19:94:9b:ad:
ee:28:2b:7a:1f:f4:94:c5:06:f3:91:03:a1:4d:54:
56:18:76:f3:84:31:ab:79:d2:bb:d0:ec:5d:ae:ce:
7b:41:53:ba:d1:58:12:0d:21:9a:7a:dd:ba:ae:18:
85:03:a5:99:87:52:45:b3:6b:38:87:ac:34:25:81:
1f:83:cf:f1:a5:c2:cf:07:ef:bf:b5:a7:b2:29:00:
fb:2b:43:e8:0f:c5:9b:28:63:1b:30:3c:81:05:db:
7b:ce:46:b4:e2:b2:cf:1c:e3:9f:b6:6a:d8:7d:2e:
58:54:16:24:42:3f:bb:0b:f9:8f:b1:02:33:c7:25:
53:ba:8e:63:61:6c:f2:a7:c4:76:72:c3:0e:ca:9b:
2e:64:fc:8e:0b:55:5f:19:bb:96:a1:14:c4:63:ff:
af:11:a0:a5:84:25:2b:94:7a:2e:2a:e3:65:96:a2:
7b:7b:79:36:fa:93:52:9e:48:dd:9b:05:0f:22:2e:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C2:72:52:70:39:51:FC:85:3E:52:44:51:29:63:F9:9D:87:F7:52
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:04:1d:39:2f:91:0a:63:e2:d4:a0:86:44:4f:b4:a4:cf:a8:
28:3b:7a:63:e7:73:36:76:85:db:44:38:f1:c3:be:26:94:01:
b7:d5:7c:87:9e:c8:3f:2b:d7:f8:66:c4:b9:8c:cc:e9:e9:cc:
30:d5:b2:f4:92:eb:88:19:e8:ad:58:a8:da:9e:a2:13:aa:fa:
34:93:92:ac:b9:30:a7:28:b7:d7:cc:d2:c3:51:bb:2a:71:6f:
78:4f:c2:18:12:d1:c1:ab:c6:00:21:f2:da:56:7d:4a:e0:6d:
7d:64:ce:99:9e:2e:8b:4a:17:c0:47:a2:6b:2a:77:74:81:2f:
ed:f1:57:06:7e:7f:fb:15:64:52:a1:60:43:52:a5:eb:3f:4b:
21:3c:43:c6:f3:17:4c:78:59:ed:c8:5d:8e:01:3a:d9:cd:67:
df:7e:13:18:cc:6b:c3:91:a5:c5:ae:b3:7b:26:ad:41:57:16:
7f:f2:13:6d:7a:52:2b:fb:35:76:72:5a:e2:7c:2b:ce:cc:b6:
e2:ae:cf:89:2c:60:a7:16:9b:f2:c6:1b:7f:08:e6:cb:92:a1:
28:65:94:d2:80:b8:78:97:b3:69:6b:c6:2d:4c:59:c9:dd:87:
38:f1:ca:d4:f3:b5:48:81:bf:b8:e0:af:24:73:7c:4c:30:1a:
29:c7:44:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:46 2026 by rpki-client