Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: 7BcPTdBXwrfoiXojJceKsLhcxQIz/O4WP8gK23YeBVA=
Subject key identifier: 51:E7:F5:20:49:D9:9A:D1:66:9D:B2:FA:FF:7B:E7:48:2E:36:18:D3
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 019D382E51F354B198DCED6E1CFDF89A1D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: gf0MfUe1EVxQbOLXmXcloBoNPvUQt2bEZuM1H31B7os=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:51:f3:54:b1:98:dc:ed:6e:1c:fd:f8:9a:1d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=51e7f52049d99ad1669db2faff7be7482e3618d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:e4:d5:86:83:10:cf:0a:33:08:40:19:85:
bc:6a:67:d8:61:09:ca:6b:2c:d7:f4:08:a1:dc:51:
51:41:bd:69:96:71:42:21:f5:b3:5d:43:f4:68:de:
78:c7:32:90:27:81:62:22:d7:b3:f2:8e:0a:d6:42:
8d:ca:63:d7:bf:49:d5:37:88:9e:89:d1:1c:b1:ea:
79:5f:6a:4c:a2:4b:f3:53:c6:e9:c2:50:66:62:08:
5d:7b:36:52:bb:d8:52:a8:b3:6c:ae:c5:37:8f:88:
45:55:e8:5b:1c:2d:59:14:e1:fc:d5:72:5f:75:23:
bc:a1:a1:c9:72:ba:4e:74:30:6e:ee:a4:6a:9d:57:
0d:04:f2:2f:39:d8:38:2e:0b:4d:ed:b9:6a:4a:6d:
9d:58:5b:ba:b9:99:75:6f:19:39:84:85:a7:b7:b9:
23:78:66:77:14:fa:fa:62:85:7b:a8:0a:69:f0:4b:
b9:ba:8d:eb:1c:f9:7d:24:23:8f:06:79:9c:b2:54:
65:fe:64:b7:6f:d1:ec:e6:54:de:52:1e:22:1b:d9:
f4:02:ef:1c:6f:e0:04:4c:3b:79:80:b7:f3:4e:84:
8c:2d:42:45:4b:fd:65:d4:22:8c:59:1d:4b:d4:fa:
41:a6:88:c2:7c:ab:c7:47:81:d0:52:3b:a4:ae:e5:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E7:F5:20:49:D9:9A:D1:66:9D:B2:FA:FF:7B:E7:48:2E:36:18:D3
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:82:75:17:01:dc:38:46:1a:80:1f:75:a9:1b:8a:53:76:1f:
37:d2:39:09:be:d4:73:d5:ed:da:a7:c3:95:63:f3:81:f1:7b:
71:0c:64:3d:fe:e2:27:13:be:e4:cc:1e:ed:88:d7:a7:d3:93:
97:59:bf:5a:6a:95:d9:0a:6e:a0:b1:40:fe:5d:ff:a9:9b:41:
db:4b:c4:ef:2f:53:a1:21:1d:7b:a7:14:fa:9e:8f:87:aa:6a:
b1:47:f6:55:18:e6:4a:65:3b:19:02:7a:65:4a:b2:64:a8:a4:
bb:9e:3b:cb:fa:00:b5:fa:15:de:23:3d:1e:ac:b3:0b:a3:3f:
9d:26:9c:58:11:d3:64:c0:2c:40:95:39:0c:3a:52:69:37:aa:
ce:4f:f0:35:a3:c4:ec:c4:0e:f8:5b:28:79:cd:bf:36:cb:12:
d2:73:cc:db:e1:dd:a8:c9:c0:f8:4d:1e:b0:23:e1:ef:5a:d2:
95:e1:02:c0:9e:ae:8a:33:3a:b9:a0:57:23:02:2b:08:35:d5:
92:5a:9b:23:d9:d4:ae:16:ff:bc:4a:62:69:b7:92:e2:b1:d5:
87:a0:9a:6e:a8:1c:b1:d0:91:04:f6:27:7a:22:cd:93:38:89:
c3:8c:78:c2:fc:94:ef:ef:df:f3:8c:88:82:61:9f:f0:8d:99:
33:ab:91:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LlHzVLGY3O1uHP34mh0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MzFlNWQ5OGNlZWUzNGQ3ODNhNTFjY2NiNmVlNGRjNGVl
NDM3OTMwHhcNMjYwMzI5MDYwMDUyWhcNMjYwMzMwMDYwMDUyWjAzMTEwLwYDVQQD
Eyg1MWU3ZjUyMDQ5ZDk5YWQxNjY5ZGIyZmFmZjdiZTc0ODJlMzYxOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcrk1YaDEM8KMwhAGYW8amfYYQnK
ayzX9Aih3FFRQb1plnFCIfWzXUP0aN54xzKQJ4FiItez8o4K1kKNymPXv0nVN4ie
idEcsep5X2pMokvzU8bpwlBmYghdezZSu9hSqLNsrsU3j4hFVehbHC1ZFOH81XJf
dSO8oaHJcrpOdDBu7qRqnVcNBPIvOdg4LgtN7blqSm2dWFu6uZl1bxk5hIWnt7kj
eGZ3FPr6YoV7qApp8Eu5uo3rHPl9JCOPBnmcslRl/mS3b9Hs5lTeUh4iG9n0Au8c
b+AETDt5gLfzToSMLUJFS/1l1CKMWR1L1PpBpojCfKvHR4HQUjukruV1bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHn9SBJ2ZrRZp2y+v9750guNhjTMB8GA1UdIwQY
MBaAFDgx5dmM7uNNeDpRzMtu5NxO5DeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODct
MzUyY2QyOTZlYmI4LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODctMzUyY2QyOTZlYmI4
LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYJ1FwHc
OEYagB91qRuKU3YfN9I5Cb7Uc9Xt2qfDlWPzgfF7cQxkPf7iJxO+5Mwe7YjXp9OT
l1m/WmqV2QpuoLFA/l3/qZtB20vE7y9ToSEde6cU+p6Ph6pqsUf2VRjmSmU7GQJ6
ZUqyZKiku547y/oAtfoV3iM9HqyzC6M/nSacWBHTZMAsQJU5DDpSaTeqzk/wNaPE
7MQO+Fsoec2/NssS0nPM2+HdqMnA+E0esCPh71rSleECwJ6uijM6uaBXIwIrCDXV
klqbI9nUrhb/vEpiabeS4rHVh6CabqgcsdCRBPYneiLNkziJw4x4wvyU7+/f84yI
gmGf8I2ZM6uRSg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:04 2026 by rpki-client