Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.mft
File: od-mNA5rzLQ37DD8-o9NgtwVzK8.mft (raw, json)
Hash identifier: Tlb17pDgoH18STRCy4+gvufSFVUVE6KUYymgprJ2Ouo=
Subject key identifier: 9C:31:F1:56:07:8F:6A:D7:D6:A3:BD:E2:BE:75:A5:1C:F2:98:B6:EC
Authority key identifier: A1:DF:A6:34:0E:6B:CC:B4:37:EC:30:FC:FA:8F:4D:82:DC:15:CC:AF
Certificate issuer: /CN=a1dfa6340e6bccb437ec30fcfa8f4d82dc15ccaf
Certificate serial: 019D382E3AC67453D7BCAFC6C6A548D389B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od-mNA5rzLQ37DD8-o9NgtwVzK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.mft
Manifest number: 48
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: OG19cG02W6XiUeaI2D7Kvd4yTkU.roa (hash: nb3wBIFFJPwVVswh9bW4m/krDoVB8NsXSoHSp9oQDpU=)
2: od-mNA5rzLQ37DD8-o9NgtwVzK8.crl (hash: Oq4/UXj9WYvNYexcVt47qSDDx22NRjmcIsDO3hiweLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/od-mNA5rzLQ37DD8-o9NgtwVzK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3a:c6:74:53:d7:bc:af:c6:c6:a5:48:d3:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dfa6340e6bccb437ec30fcfa8f4d82dc15ccaf
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=9c31f156078f6ad7d6a3bde2be75a51cf298b6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:bd:14:dd:94:1a:9f:74:e0:2a:68:92:3e:
87:6b:cc:9d:71:90:7c:7a:91:aa:2f:e6:eb:b2:45:
4b:8a:b5:0e:5d:a6:21:9e:50:bd:04:ab:eb:12:ee:
5b:fb:6c:c1:27:76:05:65:bc:c1:af:19:c7:4e:e8:
38:20:88:13:1e:2e:a9:a3:1e:92:47:ac:23:8e:1d:
7f:84:ad:d4:75:a3:82:8e:29:57:03:50:86:c9:81:
74:bf:45:45:14:76:58:b3:a2:ad:8b:96:df:3b:53:
98:e2:ef:15:c6:d9:b6:53:e4:c9:8e:7a:01:10:19:
5b:b3:c9:5f:ad:13:ac:52:8d:a3:86:df:8b:49:31:
26:6e:3d:56:f3:0e:eb:46:a8:9b:05:d3:67:ac:ad:
be:bd:3a:d8:90:7b:3c:8a:b5:a7:34:f0:6a:e9:d4:
2c:4d:a7:e8:bf:88:05:a4:16:8e:0b:09:cf:64:90:
13:3a:2d:7e:c6:a6:cf:f5:37:39:c0:72:06:a2:a6:
f5:d9:12:cb:f2:9d:96:18:63:08:b5:dd:d9:84:13:
e0:81:03:87:3a:91:ce:4e:06:0e:fe:b8:79:a6:8e:
51:d1:38:68:d7:17:65:d5:fe:39:fe:10:58:e1:2c:
91:3e:77:19:c6:c2:1a:e6:bd:53:0b:95:ad:9f:a5:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:F1:56:07:8F:6A:D7:D6:A3:BD:E2:BE:75:A5:1C:F2:98:B6:EC
X509v3 Authority Key Identifier:
keyid:A1:DF:A6:34:0E:6B:CC:B4:37:EC:30:FC:FA:8F:4D:82:DC:15:CC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od-mNA5rzLQ37DD8-o9NgtwVzK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5f:d7:07:06:f0:68:f8:20:eb:81:ea:a7:d8:0f:c7:98:70:
e1:b2:f9:8c:77:85:37:30:92:72:f0:c1:84:b0:ff:a4:92:59:
b0:5c:86:80:45:42:e9:22:5e:df:9f:b9:71:8b:8a:5b:69:ed:
b0:73:33:b6:8a:b1:1a:9a:5a:b9:80:5c:0a:a1:ba:d4:48:ea:
7a:fd:ec:00:ba:3d:0c:f3:d4:b5:2f:16:59:8b:80:fb:9a:7c:
16:ea:e2:8f:2b:a8:79:f7:92:13:f9:19:87:86:c0:b8:fd:a8:
e7:69:8d:c2:89:9a:e7:66:d3:42:44:dd:8d:22:9a:e2:8c:5f:
cc:eb:59:e8:52:08:5f:bc:f1:57:50:61:50:88:ab:c2:24:79:
b5:61:19:fa:6a:a0:92:d5:bd:0d:4e:d7:2d:dd:5c:38:1a:3a:
ce:b9:ef:5d:d7:57:d0:bf:4b:8c:51:88:4a:91:0b:d8:10:20:
4c:e3:70:30:1d:c0:d8:c8:99:72:2f:fe:8c:a5:4e:87:f6:7a:
98:ec:a7:31:50:95:51:f6:3f:32:3a:a2:25:40:8a:a2:46:13:
a3:97:ef:25:a4:db:56:27:84:64:df:e7:4d:e7:2d:ee:54:2a:
f8:c3:0c:a9:ba:f1:da:e6:45:86:a5:bf:a4:ed:78:d1:b9:3a:
c6:23:77:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:16 2026 by rpki-client