Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
File: ODD00TlF8W-bdLEmR-oSzF0nSM8.mft (raw, json)
Hash identifier: NmyFylW7viv8Cx/iC6/ezHwKNZcJmcjo54Fit+slRSM=
Subject key identifier: DA:69:5E:70:B6:10:86:0E:1E:9C:16:0B:D7:F9:05:E8:E1:94:36:24
Authority key identifier: 38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
Certificate issuer: /CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Certificate serial: 01A17702F30B5F1139D9E442AC9C1BC6D755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
Manifest number: 12B8
Signing time: Mon 26 Oct 2026 07:00:44 +0000
Manifest this update: Mon 26 Oct 2026 07:00:44 +0000
Manifest next update: Tue 27 Oct 2026 07:00:44 +0000
Files and hashes: 1: ODD00TlF8W-bdLEmR-oSzF0nSM8.crl (hash: agd8BNy2FXK2er2U2629s0N5rlh669zexBTyJTuwdVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:02:f3:0b:5f:11:39:d9:e4:42:ac:9c:1b:c6:d7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830f4d13945f16f9b74b12647ea12cc5d2748cf
Validity
Not Before: Oct 26 07:00:44 2026 GMT
Not After : Oct 27 07:00:44 2026 GMT
Subject: CN=da695e70b610860e1e9c160bd7f905e8e1943624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:18:29:31:38:8a:c1:5b:84:62:c4:ad:27:
be:64:c2:c6:a0:98:02:67:7c:29:c2:61:8f:2d:d9:
63:d1:7c:c8:0d:9a:5a:91:17:34:5c:16:f3:e2:99:
cd:bc:bf:75:01:7a:69:23:1f:47:a4:6d:10:f5:b4:
32:2f:7a:12:fa:94:b1:6f:5f:9e:40:83:a8:86:5b:
fd:38:6b:ec:6b:da:5e:49:23:45:4a:d2:04:bb:78:
2f:7a:bb:9b:91:06:64:67:7a:7e:55:89:85:cb:99:
e4:83:8c:cd:27:ee:bc:1d:9b:72:5c:d5:2b:78:b0:
0b:57:ca:0b:24:ab:78:62:8b:7a:e4:02:78:6f:b0:
e5:6a:d5:92:56:a7:50:ea:27:2f:11:7b:58:15:0d:
15:38:1f:90:bd:84:ba:a5:72:40:de:6e:cb:c3:a2:
a6:ea:ac:64:59:48:b2:77:0d:3c:fb:0e:47:de:74:
9a:1b:12:00:98:86:3f:15:d0:46:18:4a:b7:12:13:
54:32:c1:33:e3:31:35:5f:2f:25:16:dd:e7:ca:4f:
0d:5d:fd:36:83:09:34:92:e2:55:47:a0:11:4c:4c:
37:46:ce:ad:13:98:3d:5c:08:f7:41:94:d2:d3:11:
38:bf:9f:e5:e7:a7:cb:38:25:4a:e4:88:dd:65:1b:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:69:5E:70:B6:10:86:0E:1E:9C:16:0B:D7:F9:05:E8:E1:94:36:24
X509v3 Authority Key Identifier:
keyid:38:30:F4:D1:39:45:F1:6F:9B:74:B1:26:47:EA:12:CC:5D:27:48:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODD00TlF8W-bdLEmR-oSzF0nSM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b13cd8-073b-406a-8c5f-ecdec0a41024/1/ODD00TlF8W-bdLEmR-oSzF0nSM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:44:f1:da:f1:35:4f:4a:2f:00:e7:dd:69:49:ac:5e:b6:f1:
79:f1:fa:62:37:fe:ee:d2:39:ab:26:02:cf:9c:e5:a6:7d:0c:
79:b3:66:f4:47:31:1f:a7:b8:6f:bc:67:99:06:3d:f9:ce:5d:
ea:fb:b2:9f:0c:2a:f9:30:fa:a1:f6:d9:99:71:ab:7d:0e:51:
8c:43:50:d8:be:f0:01:30:cf:04:06:04:92:62:94:62:29:37:
e1:46:06:d8:46:f8:b1:40:67:14:78:04:fa:94:49:d8:67:70:
ba:2b:69:a2:bb:9b:7c:54:c8:8c:a1:87:e8:7d:d2:60:72:13:
40:6c:2e:b3:5b:6c:bf:48:89:ca:3d:8a:ef:87:52:a9:94:95:
09:ce:50:2d:9b:56:87:26:ca:90:be:45:12:c8:7d:f1:1a:26:
93:56:43:cf:27:e9:4b:89:92:ae:a9:d5:44:f3:ce:58:a0:eb:
c4:b4:ae:7a:46:0a:46:92:59:80:19:05:71:d2:19:2a:74:e4:
c3:ad:c0:e9:0a:37:82:a6:61:ba:d0:49:84:46:eb:d0:6a:3e:
ec:69:26:65:1c:15:39:21:40:ea:e4:66:3b:b6:14:d2:25:21:
04:ad:b3:34:31:53:bc:7f:e5:d3:e2:7d:48:c3:da:bc:d5:47:
54:2f:1d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:04:50 2026 by rpki-client