Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File: Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier: hcPR+/Nb3erZbFpmMzKcC93w6yzh7BWqM2mPBQtMSlg=
Subject key identifier: 86:EA:41:67:A1:D9:64:B2:18:C8:21:F9:D7:92:8D:44:2C:A6:4A:67
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer: /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial: 019D98BDC25F1F868177B024C1202C9D78D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:01:05 +0000
Manifest this update: Fri 17 Apr 2026 00:01:05 +0000
Manifest next update: Sat 18 Apr 2026 00:01:05 +0000
Files and hashes: 1: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: jt01w3elpN3/YQcgFTMMSSoTvH4Q2IsJt21H5AJ0rEU=)
2: xs2nJzo3Rk58Z2BcwamLcHEwnDA.roa (hash: ZJ+YcdwxYrTOk2uKzIqFnqUJ/TPq1N6JkOSkhw/1KeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c2:5f:1f:86:81:77:b0:24:c1:20:2c:9d:78:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Validity
Not Before: Apr 17 00:01:05 2026 GMT
Not After : Apr 18 00:01:05 2026 GMT
Subject: CN=86ea4167a1d964b218c821f9d7928d442ca64a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:03:0c:37:17:ed:1c:08:6b:bc:f7:e9:5c:
69:5c:00:e9:65:05:00:8a:46:1a:b6:21:c5:33:fc:
02:97:ad:c5:47:18:88:42:8f:04:71:aa:3b:3c:2e:
c4:d0:90:0f:dd:71:e2:0c:77:fe:b5:51:f5:d9:d7:
a1:88:11:47:0f:41:0a:92:f5:c7:b5:ce:6d:70:3d:
ea:b1:bd:93:03:f9:91:cd:1c:5d:82:78:e6:b1:47:
fd:e9:aa:5a:dc:db:3e:bc:ec:8c:31:42:63:64:a3:
b9:be:1c:e3:25:2e:5b:8f:11:5e:6a:6f:f9:06:bc:
90:84:44:87:98:3c:27:b3:17:8a:28:89:86:8e:2c:
0b:ab:93:15:24:a1:57:b5:0c:a1:98:9e:40:dd:bb:
7c:67:4e:99:64:b5:4d:ee:d0:89:fd:5f:e1:08:b5:
14:13:a4:54:a3:33:90:03:16:3d:e3:65:96:cf:15:
e2:30:0a:f3:29:48:b7:9d:76:8a:bd:f4:49:04:ac:
0c:b1:02:1e:66:b7:32:44:5f:1b:a9:61:da:13:46:
73:f7:29:37:5f:a0:e5:35:88:a3:80:5c:59:a3:5e:
bd:c3:68:7c:d8:0c:29:18:d8:b9:8c:f1:b3:49:d0:
1d:d4:8a:ae:d0:e3:56:15:38:51:f6:f0:49:68:5a:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EA:41:67:A1:D9:64:B2:18:C8:21:F9:D7:92:8D:44:2C:A6:4A:67
X509v3 Authority Key Identifier:
keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b3:68:c3:42:fb:67:fa:a6:aa:ea:7c:1a:4d:cb:0b:31:0b:
cc:2f:98:2f:a5:cd:48:d0:23:2e:54:6c:35:34:bc:a6:40:f0:
a0:c3:2f:42:40:08:34:03:1c:1c:53:c7:73:06:47:c7:ce:46:
48:f2:23:c0:6a:e5:89:b1:03:c1:90:39:f1:c7:48:ad:06:d7:
7f:76:f4:ee:e9:e5:7d:b8:48:62:ce:9d:11:8a:db:7a:05:0d:
b5:62:2a:b4:2d:e3:c5:74:8c:a1:c2:e3:f7:99:35:02:64:58:
83:17:97:3a:33:01:e4:80:63:09:99:16:e3:be:bf:91:67:7d:
22:8c:47:46:17:3f:36:55:07:91:57:4d:f8:67:b7:23:2f:cf:
d6:0d:5c:11:76:0c:37:d5:fa:1a:33:57:b6:75:3c:cd:7a:16:
48:fb:ba:a2:31:cc:48:9c:11:d4:b4:f9:a3:2a:6a:b3:be:c2:
a6:d9:25:2e:4b:4e:45:40:44:cf:f3:6d:d1:09:9c:87:37:94:
db:25:13:27:69:c4:00:08:84:0e:90:ed:9c:c1:d2:7f:35:c3:
96:29:4e:8f:2b:fb:53:56:d2:3b:72:e0:68:fd:8f:a4:b3:6b:
6c:46:48:75:e2:2a:7a:09:a9:7d:aa:75:b0:13:68:5a:5d:bc:
50:a7:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:26 2026 by rpki-client