Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: CEoNyWpq/1TrUMmP6JzT3TUIup4ocJURC5XfeoiyJww=
Subject key identifier: 6B:19:34:23:A1:EC:19:71:34:1E:27:22:03:0B:86:87:D6:5A:7A:84
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 01A055C358FCC1582D54E987CBA5767F4BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1A2D
Signing time: Mon 31 Aug 2026 03:01:00 +0000
Manifest this update: Mon 31 Aug 2026 03:01:00 +0000
Manifest next update: Tue 01 Sep 2026 03:01:00 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: ch/ppJCUwQh0yDkAkEAxz5J23ZawlTKkJ4hZ41ChPXA=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:c3:58:fc:c1:58:2d:54:e9:87:cb:a5:76:7f:4b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Aug 31 03:01:00 2026 GMT
Not After : Sep 1 03:01:00 2026 GMT
Subject: CN=6b193423a1ec1971341e2722030b8687d65a7a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:fd:ea:3d:32:08:94:38:03:14:73:71:5d:
48:6d:a1:31:a7:38:a7:46:6d:b6:46:be:d8:8c:90:
74:a3:22:0b:17:9a:1d:65:84:8f:5b:05:d2:32:a8:
73:70:ff:bb:87:8a:71:2b:2d:12:75:c1:f8:30:44:
e7:ca:35:34:9a:0f:48:41:bc:84:21:d5:59:3f:7b:
e6:e2:77:e0:6f:51:3e:c5:d6:8d:97:74:56:6a:53:
b2:e1:df:d5:51:68:df:dc:10:96:ac:15:73:b7:03:
e3:8e:5c:1a:4f:13:3a:c4:73:45:86:ad:a2:ad:36:
2c:b0:76:3e:60:9c:e9:aa:08:59:c0:f9:cd:e8:36:
46:40:ae:5f:39:29:d7:82:49:d4:81:87:f1:94:5a:
0d:d6:62:33:d5:b8:3d:b1:c7:b9:7b:07:ae:d0:4b:
a6:8a:d5:6a:b9:15:7c:2b:2b:da:d9:93:0c:7b:6c:
24:63:01:70:b1:96:63:98:95:0e:d4:8d:b7:e4:55:
cd:64:e2:10:9f:43:a3:aa:95:81:22:30:85:c4:25:
07:31:45:0f:e8:5b:13:b6:5b:ae:84:cc:56:7c:d9:
a4:37:26:1e:23:29:21:00:dd:9f:f5:c4:11:36:c7:
d4:9f:ec:89:29:05:84:ce:97:c3:cb:95:32:e3:03:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:19:34:23:A1:EC:19:71:34:1E:27:22:03:0B:86:87:D6:5A:7A:84
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:29:5f:88:fe:9e:0d:04:7d:b3:4e:82:b7:5d:45:1a:16:42:
d5:64:47:52:d1:69:e9:ab:bf:33:ed:61:c5:33:5e:6b:af:c0:
35:1e:b0:3c:9a:ff:80:11:37:ad:f3:3f:75:10:b5:69:46:e5:
97:92:c5:f6:0e:34:ae:61:bc:b7:91:f8:d2:11:8b:07:08:c7:
6d:d8:bc:2e:73:4e:6f:c4:2c:59:40:bc:a5:e6:20:89:4f:2c:
65:9c:df:55:58:ef:9f:9d:06:b9:8b:98:52:86:be:84:cd:2c:
57:cd:81:8b:7e:da:64:38:75:dc:3f:8d:bb:22:45:2a:54:4e:
f5:e7:c4:b1:6d:ae:fa:67:96:68:3b:89:df:32:37:05:5b:35:
4b:7b:22:64:6e:68:fd:8b:7a:27:bc:da:42:c3:76:26:ec:c3:
f0:87:59:34:87:41:06:26:43:2c:f2:75:af:5f:7a:4b:e0:df:
61:40:6b:a6:e6:6d:01:7d:88:44:f9:da:f7:80:33:0a:1d:4f:
aa:27:6d:55:9a:40:2c:a8:35:70:10:b4:8e:41:c4:26:3c:f5:
a8:93:02:cf:bc:bf:01:cf:c2:87:a8:1f:c1:83:be:49:d9:c0:
57:ef:28:47:e6:61:06:97:1c:d2:5b:1c:92:02:86:37:5f:c4:
b3:e4:b3:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBVw1j8wVgtVOmHy6V2f0v1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MzFlNWQ5OGNlZWUzNGQ3ODNhNTFjY2NiNmVlNGRjNGVl
NDM3OTMwHhcNMjYwODMxMDMwMTAwWhcNMjYwOTAxMDMwMTAwWjAzMTEwLwYDVQQD
Eyg2YjE5MzQyM2ExZWMxOTcxMzQxZTI3MjIwMzBiODY4N2Q2NWE3YTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJn96j0yCJQ4AxRzcV1IbaExpzin
Rm22Rr7YjJB0oyILF5odZYSPWwXSMqhzcP+7h4pxKy0SdcH4METnyjU0mg9IQbyE
IdVZP3vm4nfgb1E+xdaNl3RWalOy4d/VUWjf3BCWrBVztwPjjlwaTxM6xHNFhq2i
rTYssHY+YJzpqghZwPnN6DZGQK5fOSnXgknUgYfxlFoN1mIz1bg9sce5eweu0Eum
itVquRV8Kyva2ZMMe2wkYwFwsZZjmJUO1I235FXNZOIQn0OjqpWBIjCFxCUHMUUP
6FsTtluuhMxWfNmkNyYeIykhAN2f9cQRNsfUn+yJKQWEzpfDy5Uy4wOvtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsZNCOh7BlxNB4nIgMLhofWWnqEMB8GA1UdIwQY
MBaAFDgx5dmM7uNNeDpRzMtu5NxO5DeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODct
MzUyY2QyOTZlYmI4LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODctMzUyY2QyOTZlYmI4
LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSlfiP6e
DQR9s06Ct11FGhZC1WRHUtFp6au/M+1hxTNea6/ANR6wPJr/gBE3rfM/dRC1aUbl
l5LF9g40rmG8t5H40hGLBwjHbdi8LnNOb8QsWUC8peYgiU8sZZzfVVjvn50GuYuY
Uoa+hM0sV82Bi37aZDh13D+NuyJFKlRO9efEsW2u+meWaDuJ3zI3BVs1S3siZG5o
/Yt6J7zaQsN2JuzD8IdZNIdBBiZDLPJ1r196S+DfYUBrpuZtAX2IRPna94AzCh1P
qidtVZpALKg1cBC0jkHEJjz1qJMCz7y/Ac/Ch6gfwYO+SdnAV+8oR+ZhBpcc0lsc
kgKGN1/Es+SzGQ==
-----END CERTIFICATE-----
Generated at Mon Aug 31 13:22:52 2026 by rpki-client