Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: h1UPBeI+9Eu9CQ1tC+vPHT9+AXXlUgCT55pfn/T91XA=
Subject key identifier: A7:CD:A7:74:6D:D5:EC:F8:3C:F3:43:FB:C5:4C:39:B4:7A:F8:D3:F2
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 01A17394C1E7391C6D93812909514AE45C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1AC1
Signing time: Sun 25 Oct 2026 15:01:31 +0000
Manifest this update: Sun 25 Oct 2026 15:01:31 +0000
Manifest next update: Mon 26 Oct 2026 15:01:31 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: 8QeNzbepDgVXctdubGaZFdkOmLI1BrWdPA5WSRVsEpM=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:94:c1:e7:39:1c:6d:93:81:29:09:51:4a:e4:5c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Oct 25 15:01:31 2026 GMT
Not After : Oct 26 15:01:31 2026 GMT
Subject: CN=a7cda7746dd5ecf83cf343fbc54c39b47af8d3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:60:ff:84:b7:bb:7b:d3:03:68:fa:06:54:
da:db:4a:1d:2e:4b:73:a3:f5:ed:5e:5f:85:c2:16:
bd:15:1f:17:6a:9e:d0:07:00:5c:e9:df:b8:e1:4c:
04:1a:8e:3d:85:90:a0:81:69:bd:3a:f1:07:53:7c:
d6:71:91:aa:18:44:b7:4e:59:f9:02:ac:a0:7a:af:
5f:bd:c9:fe:a5:6c:d7:2e:34:df:40:90:8c:14:a4:
77:9d:f8:05:d7:8b:a5:45:1e:74:ee:c2:d5:9b:93:
93:29:d3:bb:c2:8d:75:62:b5:75:52:cc:e7:aa:68:
b2:df:a8:2e:be:2d:e0:6c:a8:c2:87:18:d7:e7:66:
10:b8:66:6e:c1:6c:09:fe:d8:af:35:30:4a:66:b6:
a1:be:ac:70:66:6a:b4:33:47:ec:d4:ec:e7:d0:6e:
aa:71:0a:f1:a2:1e:b3:b0:6c:2a:a3:4a:1b:2e:65:
58:49:b6:fb:60:26:19:d6:66:a2:95:11:b2:64:76:
44:57:73:fe:e7:bf:94:a8:31:89:ae:b3:9a:ac:47:
28:39:a8:d4:03:bd:36:5c:ff:2e:4f:74:a3:53:97:
6b:b4:f9:eb:ff:65:8c:fb:3e:ee:29:ea:39:b8:6f:
af:64:55:f6:fb:36:7b:88:20:ef:73:63:65:64:c3:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CD:A7:74:6D:D5:EC:F8:3C:F3:43:FB:C5:4C:39:B4:7A:F8:D3:F2
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:11:26:41:de:da:5e:8e:e0:9d:4e:9e:17:68:48:0c:0f:a5:
e1:16:e0:e2:56:6e:4b:2b:d7:94:fa:4c:12:0e:2d:a4:d6:8b:
af:12:31:4b:28:a3:8f:f6:5b:ce:bb:a8:d4:21:5c:5a:ce:c4:
c6:b1:70:b2:73:76:2a:c4:2e:4d:f0:89:ac:66:bd:d8:37:e9:
ea:86:62:a9:42:5c:9c:09:97:bf:93:42:22:9e:8e:78:09:24:
e8:be:6f:1d:72:da:4b:85:44:13:7c:bc:c9:44:81:4b:1b:2d:
bb:ef:2a:51:a8:80:1e:3e:10:91:ab:f7:39:17:f7:09:c2:bd:
5e:d3:78:72:99:8f:fa:52:56:77:35:2a:dc:e0:72:8e:c8:c6:
27:8f:dd:15:56:cc:8d:22:3e:88:9e:a7:99:82:98:36:18:fc:
90:34:6e:52:04:2f:1c:f8:09:2e:c3:90:52:b0:b3:fb:7a:71:
97:ed:c9:cc:b6:13:3c:8f:64:18:83:b8:29:27:b1:29:59:30:
c0:ac:39:3d:53:00:1a:9f:6d:7b:3e:ed:1f:13:10:66:66:07:
e3:d8:a3:60:fd:f6:32:16:b9:51:d1:ea:f5:54:7e:91:6f:ed:
7f:44:47:12:c7:d8:00:ae:06:c1:23:be:0e:bf:00:28:00:0a:
ce:d9:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:47:48 2026 by rpki-client