Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
File: ODB5K147usnzcNTK56uipc26ego.mft (raw, json)
Hash identifier: 15kQA6PQzEpO/1Zbfhx0Gjd6Xr993BpasZwj9+K1s/I=
Subject key identifier: 53:1C:B7:39:08:51:69:C0:97:58:9F:3A:F4:0D:28:A6:91:DF:2B:2A
Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Certificate serial: 019D9AABA3D82A2475E37F21A93B844AADD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
Manifest number: 14B6
Signing time: Fri 17 Apr 2026 09:00:32 +0000
Manifest this update: Fri 17 Apr 2026 09:00:32 +0000
Manifest next update: Sat 18 Apr 2026 09:00:32 +0000
Files and hashes: 1: ODB5K147usnzcNTK56uipc26ego.crl (hash: 3cDS24sR9Bqnh1GfnqfTNmHxle6SaJoQ9q2ZIY53oOo=)
2: ulMvleh0KpHzaZnOGnMAPRh_7go.roa (hash: f+kd+NW6NmqPoqPYmJohSpoAXQXjo50jBTIPGaMt3IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a3:d8:2a:24:75:e3:7f:21:a9:3b:84:4a:ad:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a
Validity
Not Before: Apr 17 09:00:32 2026 GMT
Not After : Apr 18 09:00:32 2026 GMT
Subject: CN=531cb739085169c097589f3af40d28a691df2b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:b9:48:0c:c4:78:03:4e:eb:74:91:ec:c6:
9b:30:f4:73:37:ab:56:dd:3b:05:2c:91:39:48:86:
d7:be:ae:bd:15:62:05:91:f0:ea:19:21:71:b4:51:
73:8f:2e:70:2c:56:d4:4b:a5:02:28:48:23:61:f1:
0c:c8:15:14:3b:1b:dc:fd:8c:43:98:37:b4:67:6f:
49:f8:ea:d9:53:66:37:66:be:45:dc:2e:2b:8a:9e:
8a:d1:1d:8c:e8:1d:29:56:07:60:24:cc:5f:9a:f3:
a5:d7:2a:19:e8:80:e1:57:b7:c4:ee:a5:f2:2d:32:
38:b2:a3:6c:33:ae:e3:d6:90:05:28:13:a4:3f:31:
f5:df:86:99:d1:c1:de:f8:12:c9:de:09:65:54:5f:
aa:53:c4:50:fe:42:b7:13:0d:c1:b8:de:38:1c:a7:
88:12:39:e7:37:7f:2a:38:e8:35:fc:3d:35:a3:bd:
ae:d5:f3:52:f7:96:e8:99:87:69:66:10:5d:33:c2:
ad:34:86:c1:25:68:14:c1:0d:97:31:3e:e2:a0:3c:
62:01:8e:cd:d0:4f:07:68:a3:94:db:ae:3a:15:9d:
18:cc:4c:77:9b:ea:3f:d7:c6:b2:48:4b:5a:e1:38:
18:72:31:93:b7:f0:77:05:a5:d4:77:60:24:f0:e5:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1C:B7:39:08:51:69:C0:97:58:9F:3A:F4:0D:28:A6:91:DF:2B:2A
X509v3 Authority Key Identifier:
keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5e:74:c0:25:a7:08:9a:1c:21:f1:be:17:58:88:04:da:9e:
66:4d:97:44:32:42:e5:de:6e:e5:fc:21:dd:50:bc:1c:c9:f4:
99:eb:28:fe:3b:a2:bf:76:9f:3e:4d:e4:50:cf:8a:e0:d2:8d:
b9:af:cf:4c:18:3a:23:26:66:ad:e9:9b:ab:e7:e9:e2:4f:0f:
e9:7c:3b:2f:c7:de:af:e4:6a:17:aa:5b:e2:46:a9:4d:70:cc:
32:1c:a6:5f:f5:1a:a1:b9:d6:d2:e1:b8:f5:1d:4e:f0:1b:a5:
0a:c7:7b:4d:61:fe:7f:be:40:c1:a3:1b:19:3c:90:83:73:35:
db:74:c4:f8:e7:cf:99:25:0e:a2:1b:73:41:09:f8:3c:b4:2b:
55:eb:49:0c:81:a1:46:f6:19:d8:b0:55:2c:47:2e:02:2e:49:
52:c2:e2:81:28:3f:e3:b4:9b:8f:72:ee:70:d9:13:af:15:81:
2f:a1:89:ff:f6:92:5a:50:a7:f1:c3:5a:ae:89:06:56:2a:5d:
a3:6e:d4:1b:a6:32:f8:5f:ba:9a:f3:20:0a:b9:89:bd:75:3f:
2b:cf:f2:e8:84:8d:d5:c6:bc:1a:cf:4c:0c:4b:54:8f:a8:6c:
3c:e8:78:72:f4:90:3e:a8:d4:dd:80:54:38:2d:de:4a:2e:3f:
a0:95:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:48 2026 by rpki-client