Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: 7830EvMSgWyE1YuFVhn/aHqcuUvqPG386j3THppM45Y=
Subject key identifier: 33:AE:07:78:BD:DC:8D:DD:2A:9F:78:F4:43:23:15:5C:9C:03:46:7E
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 019D999958F77BA8FFD27EE83DE88CD8A27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:00:56 +0000
Manifest this update: Fri 17 Apr 2026 04:00:56 +0000
Manifest next update: Sat 18 Apr 2026 04:00:56 +0000
Files and hashes: 1: Qy_arNs4QDgtO2oRm6RpY_yvLkM.roa (hash: sM686aC1vKRTxadqylfi5DLdDcH3yJBn9EUNjVW3g+A=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: T06JLteSGQ1SnLQylF5B3a9ZDOWWgfSAtmq8DzIanHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:58:f7:7b:a8:ff:d2:7e:e8:3d:e8:8c:d8:a2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Apr 17 04:00:56 2026 GMT
Not After : Apr 18 04:00:56 2026 GMT
Subject: CN=33ae0778bddc8ddd2a9f78f44323155c9c03467e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:ab:3f:00:8a:f6:39:ad:05:83:f0:f9:9b:
c4:1e:91:c4:b0:d1:61:3e:cb:a2:63:c9:84:af:23:
a9:72:bf:b4:a8:f8:49:a5:b6:89:8d:84:bb:7c:f1:
ba:db:15:6f:2d:38:9c:1f:a1:bf:d3:3b:66:5e:eb:
8b:cf:2f:29:08:12:58:a2:c8:45:cb:a0:23:57:bb:
2b:7b:d8:2d:99:76:52:66:d5:06:fd:3b:ba:9e:c1:
5f:a9:d7:d4:84:5e:29:64:d4:7f:20:9f:53:a0:d2:
4c:32:aa:43:98:b6:1a:32:3b:65:e3:99:4e:df:3c:
e6:bd:57:95:58:aa:49:fc:04:9a:cd:18:2a:8b:f1:
77:dd:39:0c:c5:0b:96:3d:8a:83:72:9a:13:49:13:
4e:55:ea:21:e4:20:a1:6a:6c:2b:67:47:c1:4c:34:
0b:40:8f:d8:f3:92:43:86:3c:68:63:36:47:7d:15:
22:bd:58:24:42:23:6d:5e:c5:f4:51:ad:bc:8a:93:
52:ac:5a:ab:57:46:8d:37:ac:22:23:7f:b6:54:7f:
9b:73:10:9e:68:71:ae:91:28:84:6e:c5:77:79:71:
f2:72:cf:1b:46:6d:c0:e3:08:db:4c:6d:d4:44:68:
c6:ce:10:6f:7d:98:17:6b:44:21:a8:70:2c:1a:c0:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:07:78:BD:DC:8D:DD:2A:9F:78:F4:43:23:15:5C:9C:03:46:7E
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:75:1c:8b:13:d8:9d:03:7c:ce:ba:74:b6:a0:8c:b9:bc:f2:
a7:ae:8c:a8:9d:ad:df:df:d8:aa:e9:22:ba:40:39:d1:45:21:
30:53:45:08:90:5c:b5:41:ed:e8:09:c8:cc:5b:ad:89:58:51:
1c:fc:f3:83:1b:99:4c:44:16:62:5b:30:ca:b3:d1:ed:7d:05:
3e:75:a2:a4:91:f7:4f:30:04:f1:c0:77:95:07:4b:60:fd:d9:
1e:f2:f4:e4:f1:13:db:2e:e3:cc:75:4c:84:50:cb:27:6d:35:
fc:08:24:e1:3c:b4:21:86:38:ec:a7:27:16:37:bf:9a:a1:81:
8e:16:9a:71:31:e5:8c:aa:e0:9e:5f:f9:87:16:8b:35:91:2c:
72:5f:99:82:19:18:7b:09:39:15:16:b7:a4:1b:87:13:3f:86:
8c:39:23:a8:3c:46:c3:a4:6e:0c:87:f2:b8:df:0f:12:41:cd:
ba:49:6d:7e:09:82:2e:26:5c:5d:14:66:4e:11:44:3a:ba:0a:
7e:bd:de:ce:26:fd:46:83:3b:49:94:a7:63:a9:f8:cc:ed:cb:
48:21:b9:13:2a:a2:1e:98:cc:a2:9c:51:cf:6c:bf:c6:d5:93:
51:b4:4a:0b:14:54:21:28:03:ae:a8:63:24:ff:07:77:20:0e:
8d:09:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:41 2026 by rpki-client