Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier: Mzc37Z/CasniqxBf4Sjmj5cWurRa3G/VvSN01qG/MCA=
Subject key identifier: 3B:0E:3B:4B:18:AD:43:FF:57:DC:80:F4:07:37:9E:45:60:97:74:5F
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 019CAD229F93D86F9090C030BF1B2F8EDBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number: 143B
Signing time: Mon 02 Mar 2026 06:00:53 +0000
Manifest this update: Mon 02 Mar 2026 06:00:53 +0000
Manifest next update: Tue 03 Mar 2026 06:00:53 +0000
Files and hashes: 1: ODB5K147usnzcNTK56uipc26ego.crl (hash: TQiUNdlfHJyxFOJqDWeY7/hCr+IVwvKBj39n6mNOXF8=)
2: ulMvleh0KpHzaZnOGnMAPRh_7go.roa (hash: f+kd+NW6NmqPoqPYmJohSpoAXQXjo50jBTIPGaMt3IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:9f:93:d8:6f:90:90:c0:30:bf:1b:2f:8e:db:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Mar 2 06:00:53 2026 GMT
Not After : Mar 3 06:00:53 2026 GMT
Subject: CN=3b0e3b4b18ad43ff57dc80f407379e456097745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:cf:14:ac:1b:a4:e4:e0:1f:7f:44:52:04:
2c:a2:37:1f:1c:d7:9d:99:05:32:01:d6:b5:4a:89:
e8:8c:9b:51:77:b7:54:1b:19:e3:7e:b0:bb:09:20:
64:4e:64:09:6e:a7:be:ca:10:fd:28:60:c3:99:19:
f7:82:0e:d9:97:bc:8a:32:d9:4c:df:2e:78:02:92:
31:3b:f6:92:92:c0:9a:4c:cb:ba:9e:27:ca:56:24:
e1:d3:20:ed:ce:6e:f6:f7:ff:44:18:cb:d3:9c:e7:
41:ed:d7:e7:09:57:8f:56:8f:8c:ed:89:01:c2:f6:
75:67:da:46:f7:26:9e:a6:ee:6b:60:0b:ee:ce:90:
91:2f:bd:9c:1d:76:2e:51:06:23:9c:8e:b7:52:d8:
a0:5a:cc:e5:49:51:55:02:21:cd:e5:dd:76:25:fa:
66:0d:98:d7:47:5e:55:b5:7f:f6:8b:72:62:78:2e:
12:79:e3:d3:cf:e8:c8:28:75:80:ba:86:7c:59:ed:
7f:92:30:a2:0b:f2:14:92:84:f3:9f:78:26:04:e2:
64:f3:a4:df:63:86:72:4c:f1:3c:0b:c3:80:95:c1:
39:74:db:5e:ab:01:a7:c0:ea:18:ef:70:5b:92:6e:
83:74:05:c9:ea:1d:5b:66:72:a8:a1:c7:45:db:d6:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:3B:4B:18:AD:43:FF:57:DC:80:F4:07:37:9E:45:60:97:74:5F
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:16:84:fa:15:ef:ed:3a:85:01:6f:46:6c:be:e6:07:09:5d:
a5:a5:c6:67:b1:c2:2b:ed:0f:76:22:8a:95:56:54:6c:d9:82:
33:e1:e6:d3:23:d0:2a:e4:1c:6d:01:80:a7:c2:11:ff:e1:3b:
92:5b:bb:47:9e:d4:03:bd:b2:7b:88:17:21:bc:67:4a:43:3d:
06:42:b1:39:18:40:6e:45:e9:f6:b0:10:70:f8:9f:f3:d7:69:
a4:42:ee:75:00:66:68:10:34:7e:aa:0c:de:ef:b4:60:61:3e:
bd:7f:94:16:8b:40:bd:93:a3:4d:59:45:73:f6:7f:f4:62:94:
b4:58:2d:8a:01:6d:0f:26:8b:e4:83:52:5f:07:e1:e7:d8:00:
07:06:c2:f2:df:ce:81:cc:95:7e:73:27:60:4c:9e:44:7c:15:
dc:b5:45:af:da:57:1a:d4:62:ee:50:df:d9:95:81:a5:67:f1:
5f:6d:9a:b9:4d:5e:5c:a6:02:37:d4:49:47:14:f8:fe:2c:5a:
fd:40:cd:c8:8d:11:a8:44:1e:13:0e:8c:a0:54:0c:e2:0e:13:
d8:74:bf:1c:a9:6b:99:66:dd:55:de:bf:8a:fe:85:74:37:a1:
db:3e:65:e8:30:9f:cd:03:0c:e0:6a:13:6b:28:c4:02:c1:29:
b8:8c:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:41 2026 by rpki-client