Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft
File: OdAejKCv5BTBV-H7-1OUhnzlHts.mft (raw, json)
Hash identifier: 3tuu2qGT0GByE0x8NHW4rla2Rv1+JySQQBL4PGLUPoM=
Subject key identifier: 2A:0A:EB:85:12:79:00:8D:3F:59:D2:9A:13:C3:3D:0C:70:53:C6:66
Authority key identifier: 39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB
Certificate issuer: /CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb
Certificate serial: 019D37F77C19F157C7AEDE4FA36501C7E253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft
Manifest number: 0158
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: OdAejKCv5BTBV-H7-1OUhnzlHts.crl (hash: ec20ydtxPhuc0mLPCpin9RcGoTGWb+D3iTSNH6/dpPs=)
2: QcsUaaoKRPUBylV1-Fbk0DFfN80.roa (hash: gVbE2LpxkXM42NWeJiCGY1tC1aB+7n0+0yKW+mHCt6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7c:19:f1:57:c7:ae:de:4f:a3:65:01:c7:e2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=2a0aeb851279008d3f59d29a13c33d0c7053c666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:72:cf:45:f2:f4:62:7f:93:ac:a5:de:60:
44:85:17:5d:43:a3:c9:d2:20:ec:d4:0b:20:c6:98:
d3:56:e7:77:ce:5d:3b:cd:ab:ec:21:18:68:ab:d4:
5a:33:80:c5:3a:cf:4d:40:2b:d4:db:66:58:e3:ef:
b8:1b:e7:e7:1d:4a:0e:dc:2b:f2:dd:39:73:06:41:
13:8f:40:97:98:7a:dc:7a:97:6e:d3:97:fa:50:cc:
9e:b0:de:40:2e:e6:08:60:b3:13:6c:0d:0c:e9:c3:
b7:27:58:ee:7c:26:23:46:1b:5f:82:f6:73:79:f1:
1c:3a:d6:0f:a7:d4:2a:f6:28:af:60:64:63:be:6b:
6a:86:a1:d9:7b:48:0f:c0:ac:07:ae:9d:25:4b:1c:
a0:70:74:89:d7:f2:f1:0b:94:b7:4d:cc:86:ea:6d:
61:52:0d:04:e0:05:f2:16:11:90:af:44:a0:2d:d0:
2d:43:ef:ae:e9:44:36:58:db:50:01:1e:84:3f:52:
ee:a7:33:8b:aa:c3:61:e1:82:fa:e5:32:ad:b4:f6:
e7:a8:56:80:d8:e6:f2:05:f7:43:51:00:28:55:7c:
69:52:3e:24:19:9a:2b:19:a5:96:cb:c6:76:94:4e:
a7:04:47:1a:29:72:7d:f1:f2:da:2a:ba:33:75:3c:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0A:EB:85:12:79:00:8D:3F:59:D2:9A:13:C3:3D:0C:70:53:C6:66
X509v3 Authority Key Identifier:
keyid:39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c8:62:4f:4c:ca:e4:31:6c:69:da:3b:56:c4:e8:0a:4b:7a:
d7:82:0c:7d:3a:c3:e1:10:2c:9a:02:de:30:45:8a:d6:6d:e7:
2c:bf:e7:27:72:68:11:11:0f:ed:a8:b8:d3:05:8e:cf:c3:df:
0e:f7:e3:66:6f:f9:e5:9b:8d:9e:0a:69:47:e2:07:6d:81:ef:
b0:f1:48:96:ee:75:6a:2f:ed:8c:f7:e4:cb:ff:6d:d8:90:30:
0f:df:41:42:8d:4e:cd:00:58:67:50:b8:2d:3e:76:56:34:21:
0e:ad:9a:27:bf:48:56:3e:02:1c:31:3e:3f:9c:39:83:90:a5:
2a:79:c5:24:9a:f9:65:b6:79:de:c9:51:89:d7:bf:7a:6c:80:
7d:62:05:f1:5b:8e:14:46:68:84:6e:b0:3d:a4:1a:39:ec:21:
97:fc:35:8d:2f:b9:4e:e2:fa:1f:5d:8e:e0:24:01:8e:74:b9:
9a:15:65:27:5b:36:e3:ad:e1:77:8d:7f:78:50:e4:90:6c:6e:
a2:a5:a7:be:12:90:f8:9b:aa:47:15:a4:49:ad:f2:e1:f6:f7:
7d:06:eb:cf:64:2f:b0:16:6a:2d:91:fd:02:e1:50:8a:c4:da:
9d:6d:f3:f1:c9:28:36:a7:4c:26:43:ee:e8:38:ae:62:ea:e4:
d6:b6:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:14 2026 by rpki-client