Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: Xm4KX5RbCM7BfNCl/uTMAy6ieeHl+/8NrLiD7UWo6FE=
Subject key identifier: 67:90:34:13:9F:7E:71:40:FF:87:71:58:4B:02:C4:9D:3D:BB:9C:3D
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 019E4A699311CAE1180EA3248D43AC5B56A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 191E
Signing time: Thu 21 May 2026 12:01:33 +0000
Manifest this update: Thu 21 May 2026 12:01:33 +0000
Manifest next update: Fri 22 May 2026 12:01:33 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: sLYV8+AFEfp3aSuzr6SFNOVGO/2IqVvFkG86Wlzf1rQ=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:69:93:11:ca:e1:18:0e:a3:24:8d:43:ac:5b:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: May 21 12:01:33 2026 GMT
Not After : May 22 12:01:33 2026 GMT
Subject: CN=679034139f7e7140ff8771584b02c49d3dbb9c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:3b:ee:ad:ed:51:f6:c2:08:34:4d:3a:45:
71:d4:29:af:4f:4f:19:4b:97:04:f3:13:f2:3b:22:
30:6a:fb:0a:26:a2:ac:fd:b8:b3:74:43:07:d2:d2:
a7:59:86:ed:ee:4c:63:33:8e:bf:5b:0b:ed:e8:97:
16:7d:07:b3:f8:53:69:fd:03:31:ca:58:06:f5:28:
4a:a8:63:bf:97:33:f7:cf:33:b6:03:af:77:0e:98:
79:01:5f:db:ad:7d:1a:1c:5a:5e:b1:8f:3e:64:19:
6a:11:bc:a9:b1:c6:e4:11:2d:24:34:ff:e6:16:fb:
a2:1f:3e:e6:87:dd:81:e5:d0:57:32:a8:7b:76:5a:
0b:9f:a7:ef:04:fa:e6:a2:5d:c7:a1:00:d6:e0:e8:
fe:1f:b0:f3:e8:f1:6f:5b:47:e8:9b:bb:1d:ae:90:
dc:21:90:47:54:db:42:55:df:d5:9d:75:24:2e:3f:
9a:10:d2:b1:4f:c7:c2:bb:40:2e:c1:c7:c2:b6:16:
a4:3c:54:27:f4:d4:46:e4:41:52:e6:63:16:a3:3d:
32:09:cc:d3:52:32:5b:ce:03:f7:cc:1a:d9:e7:2a:
12:b1:d0:c1:6d:40:60:03:59:95:40:0c:91:a6:a3:
65:9d:25:c8:2f:c6:50:9c:be:d7:79:eb:1d:34:7d:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:90:34:13:9F:7E:71:40:FF:87:71:58:4B:02:C4:9D:3D:BB:9C:3D
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:27:d1:15:e2:a4:5b:a7:8b:28:b4:98:cf:b7:ab:d9:20:ec:
10:0a:ab:26:8c:11:18:fe:d4:10:fd:55:57:b6:ea:9f:32:2c:
47:33:82:c7:74:49:cc:63:0e:7c:10:3e:ab:3e:31:43:e5:56:
f1:b5:57:64:a2:42:b5:10:52:92:ce:c2:5f:2e:69:e1:c7:cb:
79:90:8e:d0:0b:4e:fd:0c:23:b6:d2:1c:a9:e4:cc:3a:36:e3:
81:36:99:ed:01:de:57:cd:72:da:ea:50:6a:20:f7:76:5a:64:
21:90:9d:32:cd:bd:24:3e:b0:bc:0e:01:2a:7a:38:74:d0:5e:
96:55:6c:64:19:59:0e:a5:20:e9:10:82:cf:0f:7b:aa:80:76:
30:b0:13:4c:b9:6c:6a:0e:27:46:f1:6f:57:46:e2:d4:e2:44:
6f:f6:72:5a:81:a1:ae:86:6e:70:13:25:ab:18:b4:4c:98:7e:
32:0e:ef:11:88:67:4f:2b:10:d8:0c:00:64:dc:39:c7:fe:1e:
1f:99:42:68:f1:99:fd:b9:66:32:d8:dd:f0:0b:77:98:c5:f7:
d6:78:e0:7c:58:bd:70:fd:fc:9e:c9:dc:2a:9f:83:e2:e3:f8:
01:27:d8:44:d5:47:bb:1a:1a:13:db:52:bc:85:63:8a:f7:38:
d5:ad:f9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 16:12:36 2026 by rpki-client