Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: Pb7l/zeZ+WYDqj3ve5rN9k9b8fKICnYd4x7tmcAQxXo=
Subject key identifier: BB:35:72:81:01:CD:81:DE:04:71:80:97:61:14:99:77:C2:08:2F:3F
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 019CA97CAC6916DB0C8193F8D0B94697EDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 13DD
Signing time: Sun 01 Mar 2026 13:00:45 +0000
Manifest this update: Sun 01 Mar 2026 13:00:45 +0000
Manifest next update: Mon 02 Mar 2026 13:00:45 +0000
Files and hashes: 1: FgwbtcgDS6AsP8OMVO21C0j4_jg.roa (hash: iHrPCB0hDYR1pARGaZ09Zax2FMU3N5cpbZlNW/6HTA8=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: 8Z+3j/riBqDXxacd2vxmBzknP7Cqe1bErLBcb6VL7b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ac:69:16:db:0c:81:93:f8:d0:b9:46:97:ed:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Mar 1 13:00:45 2026 GMT
Not After : Mar 2 13:00:45 2026 GMT
Subject: CN=bb35728101cd81de0471809761149977c2082f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:07:a0:2b:1d:77:80:fe:1d:5c:e7:3e:6c:
7a:77:c3:59:63:d1:d5:74:42:5e:2e:a1:1d:16:e2:
7c:27:ea:c0:56:46:bd:a7:1c:8e:2e:cb:68:35:d9:
2a:6b:a0:0d:5e:13:46:3f:71:d5:b1:e8:5f:15:c1:
61:b5:d9:3b:58:e4:f6:ea:41:17:cb:0f:22:58:8f:
38:e5:f2:93:9f:e6:13:df:49:a6:35:81:c1:6b:2b:
30:48:76:42:dc:b1:a2:bb:70:30:29:3d:1d:01:a6:
a9:63:4f:16:20:1c:0a:56:e4:8f:cc:dc:cf:7a:38:
2f:d5:ae:bf:eb:20:53:b8:24:cf:04:df:64:e4:06:
49:d0:89:ef:3d:c0:d3:bf:5b:01:c9:7c:58:29:db:
e2:8e:82:e6:c6:32:d0:75:16:2b:23:fc:da:9f:b7:
5f:84:01:25:46:10:85:2f:84:37:6d:dc:df:9d:21:
82:48:a9:99:a1:85:47:10:fa:42:0d:91:15:a0:02:
a2:13:8f:1f:c0:5b:3f:05:d9:91:3f:d6:11:ab:39:
15:ff:d2:51:5f:47:68:c9:bb:d2:62:a5:1e:8c:eb:
c8:d7:5e:29:96:47:d2:4a:a4:44:56:42:b1:60:a6:
8e:6b:ef:85:fe:90:b6:07:5a:2d:a0:4a:aa:b0:df:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:35:72:81:01:CD:81:DE:04:71:80:97:61:14:99:77:C2:08:2F:3F
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ce:0d:27:76:cb:96:c6:52:a2:93:d8:cd:3a:0d:de:30:99:
16:c0:63:f4:71:0d:86:bd:0f:c4:7b:39:db:40:10:35:b1:49:
f4:81:72:c6:be:55:68:3a:5d:a2:51:9a:47:47:be:be:19:6e:
4d:b9:b6:dd:28:e2:a0:43:e8:95:ac:87:9b:8f:4a:66:93:83:
15:4e:ec:a9:17:49:4b:73:de:15:17:f6:ad:9a:ef:36:08:32:
63:b3:ef:93:5a:0b:83:ea:43:af:96:cb:3a:9b:55:bc:f0:73:
83:5f:5d:b9:23:50:7d:b7:29:c3:ec:b2:d6:3b:de:e3:09:5b:
37:e2:24:b6:a6:b5:a7:e9:ff:73:be:9f:4c:60:b0:5c:17:36:
1c:56:c7:24:85:b0:88:08:70:94:d8:ca:20:c2:38:9c:02:70:
65:17:fe:b0:fa:f3:93:5f:df:6f:b2:92:e4:6f:5b:84:14:ce:
ce:a1:dd:e2:b1:be:21:d0:22:d0:08:28:18:f0:2f:e6:87:b2:
f9:b8:13:04:e5:12:40:fa:af:8f:9c:67:59:55:af:a7:02:c6:
67:e0:14:e9:79:69:ea:59:05:be:59:95:98:a3:c9:cc:84:0b:
ae:6d:e4:6c:11:42:4f:b1:b8:3c:3e:a4:5d:9f:00:c8:af:95:
49:fe:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:35 2026 by rpki-client