Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: ooRBimChwI7xYsiaMZJ5giIwqG6upSH8LEPrYYyGDr0=
Subject key identifier: EB:F6:15:92:1C:1F:B3:2E:80:DA:B8:0D:AF:33:C8:D3:DF:63:E2:CF
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 019D38657A0A5705A82F9225749CFB8578FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 0C34
Signing time: Sun 29 Mar 2026 07:01:07 +0000
Manifest this update: Sun 29 Mar 2026 07:01:07 +0000
Manifest next update: Mon 30 Mar 2026 07:01:07 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: inS6B3aPH3LpVIPir9QsFE9lh6+4z4FKSjaDDKgh9q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7a:0a:57:05:a8:2f:92:25:74:9c:fb:85:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: Mar 29 07:01:07 2026 GMT
Not After : Mar 30 07:01:07 2026 GMT
Subject: CN=ebf615921c1fb32e80dab80daf33c8d3df63e2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:1a:4d:12:98:80:b6:5d:b3:96:8a:b7:f9:
95:a2:7d:fc:da:21:99:cc:f2:37:66:cb:15:f0:4d:
43:62:5e:b2:8a:cc:39:fc:98:f4:f9:a1:c0:3c:69:
f8:14:93:3e:ec:42:c1:2b:16:a7:70:7b:17:6f:d4:
39:8f:b7:79:91:02:c4:40:08:bb:f7:06:a5:41:d5:
33:33:e2:b1:f8:c9:99:63:cb:f9:50:5d:b0:0d:36:
e3:18:03:69:fa:b2:ab:ec:5f:5a:f5:32:0c:7f:69:
8d:10:0c:44:e6:f7:f1:84:27:6b:9a:38:f9:46:ea:
ae:ba:9f:5a:06:95:0d:cc:a8:a4:1c:8f:3a:19:8c:
11:cc:d0:c1:cb:03:f5:13:c7:83:d9:22:43:48:dd:
b0:dd:a3:60:df:13:5f:4c:9b:89:a7:ae:f4:25:8d:
f3:ca:e3:7d:9e:0c:4d:46:43:a5:b9:ed:0c:86:48:
65:7b:43:d1:82:81:0a:e5:57:a1:d4:89:7d:0d:4c:
86:54:e4:8d:ea:0f:9e:34:66:45:a9:ce:b9:be:75:
4d:ea:77:3d:09:50:c6:e5:dc:90:bd:47:6a:3f:47:
1d:f4:45:c9:8d:0c:97:1b:a2:33:e8:8f:ac:21:9f:
b7:06:cb:01:27:39:e1:9a:01:a3:ac:ae:df:40:26:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:15:92:1C:1F:B3:2E:80:DA:B8:0D:AF:33:C8:D3:DF:63:E2:CF
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d4:c1:17:69:4c:b3:01:b0:78:10:cb:db:62:f1:27:96:8c:
8e:57:a5:e5:b1:e1:1f:81:28:b9:d7:61:19:6a:10:3c:1c:59:
5f:8d:da:63:41:dc:66:c2:dc:e0:0c:88:ad:d0:fb:f3:c8:06:
ef:ee:ae:b4:00:d1:69:b7:a0:93:21:1d:bb:19:b2:e9:10:8f:
5e:d5:70:49:83:5c:3c:ea:94:d7:7e:e0:4e:1a:c1:11:f3:b2:
e9:01:95:54:11:16:d1:6d:18:da:8c:4f:ee:88:d6:c3:df:58:
6f:8e:aa:93:56:34:56:af:ff:7e:dc:51:47:10:a9:4c:80:3d:
62:26:2d:45:34:12:60:e0:99:f9:98:3b:8c:4a:43:e5:cb:27:
9d:4e:1c:94:ff:eb:61:10:bc:43:a7:e2:48:37:1f:16:79:bc:
a6:e3:5d:72:49:b6:6a:6d:c1:53:0a:21:fd:8b:f1:88:ba:49:
b1:b7:64:91:f9:d2:d2:7a:2f:ae:13:5a:90:b5:67:1d:f1:b0:
57:e6:25:53:85:c3:0d:86:9b:11:07:8f:e3:6c:54:fc:80:06:
b9:1e:a2:ae:b7:3a:11:fd:2b:50:1b:4d:69:82:9e:b5:20:e0:
f9:fa:95:66:47:81:63:69:70:11:7d:1a:d9:15:d4:ac:ff:4f:
a7:ce:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:16 2026 by rpki-client