Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: 2zkh0/QMxsWP+kEX1V75qAmU2NBKM8xGly+dv+2q7yw=
Subject key identifier: 79:97:35:93:51:5F:82:91:0C:19:7C:0F:A5:9D:79:B0:E1:68:46:19
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 019D99D0E0CEB20D5C9011DEBD87FBE9917E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 099F
Signing time: Fri 17 Apr 2026 05:01:36 +0000
Manifest this update: Fri 17 Apr 2026 05:01:36 +0000
Manifest next update: Sat 18 Apr 2026 05:01:36 +0000
Files and hashes: 1: BtxvHCilSqt_99RwN54PMNqlIS8.roa (hash: FhEZYVel7CDKvGsL+NRAOlWLOkmBn5nDe2CgOk2RwyA=)
2: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: yfo5bn6oDrIjp9hzAHOUP1D0ptxtm7YSbOWJXlTNYoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e0:ce:b2:0d:5c:90:11:de:bd:87:fb:e9:91:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Apr 17 05:01:36 2026 GMT
Not After : Apr 18 05:01:36 2026 GMT
Subject: CN=79973593515f82910c197c0fa59d79b0e1684619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:23:27:6a:ec:0e:bb:c4:f9:31:4d:f2:86:
94:14:f6:fa:36:50:49:a3:9f:ce:a1:36:f9:14:4c:
20:39:ce:cc:3a:b7:ef:db:0a:5d:16:cc:04:39:62:
fe:a6:47:06:60:e7:b2:83:7b:2b:2a:7f:0d:b9:0c:
71:6f:82:2f:53:41:6d:05:75:aa:47:85:d3:ef:71:
a2:c2:14:14:24:77:17:e7:e3:df:eb:a1:45:40:29:
36:ee:8d:67:51:f7:82:a9:37:f7:01:40:10:ff:76:
28:7e:6c:a2:5e:bf:1b:76:40:de:ce:9f:ec:49:d1:
0a:2b:25:b2:e2:27:7d:53:04:c2:9c:08:f3:03:8f:
aa:6b:15:d2:90:2d:36:69:0a:7e:a3:02:84:c7:5c:
f7:7a:26:60:4e:c7:fc:c1:15:f5:0b:75:dd:7e:7b:
7d:ff:9a:9d:21:1d:fd:d8:5a:69:75:31:3d:f4:30:
00:42:24:c7:be:28:f7:65:0f:da:ce:ae:31:82:0d:
50:3e:01:08:20:01:f1:28:90:14:fc:63:2f:8e:bd:
f1:b4:b4:b8:a4:0a:7c:65:57:20:4c:e9:a0:eb:4a:
39:63:a5:bb:3a:f6:97:da:89:15:83:d8:84:f5:77:
4b:e9:30:62:63:4f:b5:41:91:4b:4d:9f:69:c8:12:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:97:35:93:51:5F:82:91:0C:19:7C:0F:A5:9D:79:B0:E1:68:46:19
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6c:5f:ef:c6:7d:7d:cc:e3:18:fb:cc:cd:e0:6d:a3:ab:d3:
0f:c4:a3:a5:72:e3:b7:a1:09:90:99:19:2a:03:94:52:46:97:
ab:8a:99:d2:45:fc:3c:61:7a:1e:d1:13:f9:86:d9:81:1d:82:
f6:0a:97:26:18:38:a5:4e:50:f4:c0:b1:9d:f2:d2:01:51:85:
dc:02:45:7b:55:a2:2a:de:2b:61:ba:4c:3c:99:37:da:2a:6b:
2b:a1:ad:58:6e:c6:76:48:70:ef:a5:b3:5c:89:48:63:19:3f:
57:85:29:78:b9:5b:86:7b:bd:19:fe:3b:7e:21:ef:3d:56:45:
f8:10:45:56:5f:55:8f:c6:20:4e:ba:0f:a1:67:25:9a:b9:87:
2b:b2:29:cc:81:05:dc:3d:1d:76:88:6e:46:d7:62:5b:d4:e1:
c8:c4:f0:fd:cb:97:e7:9e:3f:47:ff:d1:9e:7a:ee:54:36:ed:
7d:1c:03:d7:34:3d:9c:7f:76:36:53:b4:ac:fa:99:de:42:e0:
bb:8d:1f:65:01:a0:3b:42:64:6c:62:cb:c2:79:38:09:88:f3:
62:7a:81:d4:58:2b:5d:fa:81:af:13:a3:96:40:08:e5:ae:fa:
14:85:ba:cb:2a:42:7a:1d:4c:e5:e9:d8:d1:44:d5:d4:46:db:
87:af:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:11 2026 by rpki-client