Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: KtODw8CSUePzNCBjnkDpXHNcc2Z5tANUvyqoFUXfBCo=
Subject key identifier: 93:C3:83:A7:46:DB:0D:38:8A:58:A4:48:48:6F:6D:35:33:F7:93:4F
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 019FA14D96FE4614CBBE544CA6207DF6F292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 0F40
Signing time: Mon 27 Jul 2026 02:00:44 +0000
Manifest this update: Mon 27 Jul 2026 02:00:44 +0000
Manifest next update: Tue 28 Jul 2026 02:00:44 +0000
Files and hashes: 1: aPqOfzzuuz9AqAHspb9bdZx6PfM.roa (hash: zBL5ieLSzKkx3st5xVsICvLwsvchGrXAG+kK+S4AaG8=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: jkC1oBO3a4q+fbN0HfIRVHYovjXERyhtc8q+Xxvkzqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:96:fe:46:14:cb:be:54:4c:a6:20:7d:f6:f2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Jul 27 02:00:44 2026 GMT
Not After : Jul 28 02:00:44 2026 GMT
Subject: CN=93c383a746db0d388a58a448486f6d3533f7934f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:98:40:9b:76:b7:1b:06:fe:a1:94:31:6e:
f2:bc:ed:7a:1a:58:1e:c8:a9:d3:11:41:18:d9:61:
81:38:32:ff:23:3b:2a:62:f2:4a:53:7b:c3:a7:ba:
e2:d6:09:35:37:2d:3c:24:e7:64:7a:a8:c4:39:20:
e1:d4:85:21:a0:a8:65:09:9b:1f:47:f9:60:ac:5b:
74:ae:66:8a:ba:66:15:90:da:5f:9a:ee:b3:c1:dc:
74:bd:e3:9b:34:df:dc:e6:6a:66:d5:71:a1:d2:32:
5b:4d:d3:12:17:96:cf:ef:86:fb:0b:b5:1c:03:7a:
7b:ab:5c:6f:4c:2e:d9:6e:9d:54:f5:a1:eb:30:90:
b1:1d:a4:1d:80:b2:ae:e3:5b:3b:b3:6b:bd:90:98:
37:a2:d1:d5:3f:33:8b:65:a8:58:f6:fa:fe:57:8f:
a3:79:d2:e0:fa:12:2c:65:b8:e1:2b:92:1c:84:c9:
de:b0:0f:83:30:20:30:99:c4:06:43:c7:a9:5b:df:
ae:4f:11:95:6b:44:e2:c5:7a:07:f3:e3:58:0a:93:
13:e1:32:5e:08:8f:88:ec:20:b2:cb:e6:d1:7d:39:
f8:9e:6b:ae:22:20:47:9f:8d:1a:ad:d9:1f:f1:ae:
e9:6f:04:26:ac:9d:49:5c:f0:73:5f:3c:81:3d:f8:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C3:83:A7:46:DB:0D:38:8A:58:A4:48:48:6F:6D:35:33:F7:93:4F
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:52:9f:c1:1f:7d:2d:51:ed:c3:12:ae:e1:73:21:93:ce:ff:
e7:a2:a4:f6:e5:56:e6:2d:13:21:5b:31:30:d9:8d:87:d2:2a:
fd:f8:f7:f5:f3:c9:dd:9a:00:58:54:3a:d0:1e:23:1d:67:bf:
c1:12:41:7c:80:80:6e:9a:94:a1:95:f1:0e:41:7d:c1:64:22:
b0:46:2b:06:e6:59:29:91:6d:56:34:83:09:52:bf:61:c8:fd:
ab:80:9b:b8:75:c7:c7:2b:b0:83:7a:7d:4f:0a:ad:a5:ea:4c:
54:aa:14:9a:4d:e8:72:d9:f1:52:93:cd:7a:bc:84:7e:4b:0a:
35:67:31:04:4e:a0:e7:49:de:5f:2f:b6:2b:93:7d:0c:3f:7a:
09:09:06:82:21:c3:14:36:b3:8a:0c:aa:10:96:26:bc:ec:db:
63:fd:bb:c9:7d:c7:54:60:2f:7f:fb:61:ae:65:19:70:71:18:
46:ac:bf:4c:66:db:b5:7c:b8:3a:fb:6d:0b:3d:22:e9:5b:b1:
89:27:9c:53:a5:ad:13:68:1b:50:98:aa:0b:b6:df:36:ff:33:
eb:c5:d6:1f:ef:9f:8d:c4:67:7b:a0:61:34:d7:10:83:15:b1:
2c:d7:71:f3:e9:dc:df:79:29:fb:cb:a1:36:03:e3:a5:9c:22:
fa:89:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:10:49 2026 by rpki-client