Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: flX/9rvehDp6u1e90FUw3eYBEaNgNydzkVSf/l/RAuk=
Subject key identifier: 5B:84:AF:93:43:CA:F7:7E:42:58:33:03:58:01:F8:11:20:C8:AB:9C
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 019CAC100D226402F9EECB4C9CD2A0479281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:00:58 +0000
Manifest this update: Mon 02 Mar 2026 01:00:58 +0000
Manifest next update: Tue 03 Mar 2026 01:00:58 +0000
Files and hashes: 1: Qy_arNs4QDgtO2oRm6RpY_yvLkM.roa (hash: sM686aC1vKRTxadqylfi5DLdDcH3yJBn9EUNjVW3g+A=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: Z5boii59opZa4LSD+OtyuF0MOxr+Ai6PdKcGzLNU5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:0d:22:64:02:f9:ee:cb:4c:9c:d2:a0:47:92:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Mar 2 01:00:58 2026 GMT
Not After : Mar 3 01:00:58 2026 GMT
Subject: CN=5b84af9343caf77e425833035801f81120c8ab9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:ae:68:15:60:41:3d:0d:ea:cb:3e:1b:ab:
85:93:8b:96:1e:25:0f:99:03:f0:d3:d8:17:8b:65:
33:d4:84:08:2e:c3:e1:51:84:db:92:ac:48:b9:eb:
90:ce:4d:89:12:5a:2d:e1:e5:c9:70:b1:fc:a6:c8:
56:4c:16:89:3f:d5:80:a1:80:76:7b:1b:42:74:81:
06:a4:25:43:7e:ef:27:03:f2:4d:6a:19:e0:69:02:
22:66:3d:c0:df:96:f8:8a:e4:22:cd:ac:0a:04:b5:
2b:1b:94:eb:d8:a6:f6:9b:8a:cb:df:a7:b9:78:c7:
ba:e9:da:56:7b:da:d8:67:8f:8f:7e:07:79:8a:fa:
6a:14:b1:80:d2:2e:01:9f:ac:49:54:c0:68:56:10:
2d:62:65:aa:cc:45:4e:06:96:33:76:25:9b:9b:3d:
47:54:d4:37:99:a1:ca:e1:5a:64:e8:e6:f9:ec:86:
be:76:28:80:34:f4:84:c1:6c:16:05:18:af:62:7e:
ff:72:c5:45:ae:83:c2:fc:37:53:9d:5e:cf:64:7f:
ce:02:c0:1c:d6:dd:fe:cf:8c:80:c6:9b:a8:26:ba:
dd:d5:ae:d1:6a:7b:5a:9e:a4:66:84:b9:ad:f9:60:
f6:d5:f9:81:ca:c2:fd:fb:9c:2d:82:52:37:f5:f8:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:84:AF:93:43:CA:F7:7E:42:58:33:03:58:01:F8:11:20:C8:AB:9C
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3a:63:f7:26:9c:e0:ed:06:63:8e:02:40:a8:2d:55:ba:68:
bb:ab:4f:d0:24:5f:41:c4:4b:93:bd:f6:0e:a3:9a:fc:7d:14:
93:a1:da:33:50:7e:d6:9f:33:f7:9d:fd:c1:47:08:43:b7:d0:
2f:57:ea:1b:3e:bc:7e:70:73:e9:09:a6:ff:57:f7:5d:4c:37:
fe:00:0e:db:17:7a:10:d9:63:5a:91:f0:ce:94:f8:14:64:b5:
52:db:71:ea:3b:0c:19:1b:88:77:f7:37:39:c8:9d:32:4e:b4:
74:2c:9d:53:83:1d:96:cd:16:d0:64:21:00:c8:04:92:c4:f8:
42:0a:05:f7:0d:3e:49:c6:3f:c3:35:7e:38:a9:d4:aa:73:b5:
51:65:3c:b6:bd:64:df:aa:42:e0:51:87:0b:28:c7:bf:8b:82:
b3:b3:92:ce:f8:d8:05:9c:cc:4e:c9:a4:ae:b2:47:91:e7:7f:
ee:b5:86:e4:e6:55:01:ed:6a:81:5c:bd:1f:ea:62:61:3f:77:
fd:b1:20:d9:1b:e2:b9:e0:5c:d2:fc:22:36:2c:53:46:f0:a2:
39:86:d0:cf:8c:b6:b3:fb:a7:b2:f6:74:33:89:5f:cf:d4:4c:
44:9c:fa:d3:b7:3e:8b:c7:c7:cf:7d:86:83:fd:ef:38:3a:36:
68:50:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:57 2026 by rpki-client