Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: DikQaKF1LNVEQ1iW1Xyh3maPQxSyulfnvPmY7+FTsWE=
Subject key identifier: A2:CE:B4:71:4E:8C:A8:E0:38:8C:DA:E5:64:37:41:50:8A:0D:25:FB
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 019CAB6AEE2F7A3F36C2231D37C076E71705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 0BEB
Signing time: Sun 01 Mar 2026 22:00:37 +0000
Manifest this update: Sun 01 Mar 2026 22:00:37 +0000
Manifest next update: Mon 02 Mar 2026 22:00:37 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: 4J3oquS2xU0dGryZr5PjlpsOBhbaNWbVekc0oQsWOLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ee:2f:7a:3f:36:c2:23:1d:37:c0:76:e7:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: Mar 1 22:00:37 2026 GMT
Not After : Mar 2 22:00:37 2026 GMT
Subject: CN=a2ceb4714e8ca8e0388cdae5643741508a0d25fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:45:be:ad:89:fa:1d:d4:0e:e6:8f:a5:54:
ae:d1:b2:56:eb:90:ff:6b:12:06:ea:14:5a:53:0b:
cd:a2:27:ba:14:05:d5:f5:60:ad:64:c2:be:0e:eb:
53:59:58:f2:33:8b:fa:2a:2f:aa:7c:54:7e:d9:2c:
a0:e6:56:e3:04:22:77:8f:3f:46:11:0c:76:98:a2:
d3:87:44:1a:2e:8d:8f:d5:4a:69:d5:39:56:c8:4e:
a8:4b:b8:19:ab:f4:00:71:8d:be:51:19:4b:2b:ac:
ae:b4:2a:0f:ca:9c:c5:ef:45:0a:6a:12:60:d2:d0:
0a:5e:5f:87:2e:39:f9:4b:33:5c:08:00:4a:51:3e:
97:02:1a:85:5b:c1:bf:dd:4a:57:c9:12:bc:a6:60:
4e:dd:0e:1c:93:9b:aa:f6:64:46:09:08:f6:71:5d:
71:cb:08:c4:0f:cc:b5:95:96:70:f9:a6:d9:2d:c5:
73:af:7c:8c:c2:1f:f3:02:e6:f9:45:a7:d6:71:cd:
e5:1c:2e:14:16:a8:8b:57:86:74:2f:90:37:c9:11:
93:04:dd:b0:b3:ec:84:a5:4c:89:66:16:1b:c5:89:
be:8e:d4:60:71:71:97:fc:b4:89:cf:ab:69:96:6e:
99:50:31:57:53:1e:02:b7:02:82:27:95:3c:8a:ea:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CE:B4:71:4E:8C:A8:E0:38:8C:DA:E5:64:37:41:50:8A:0D:25:FB
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c5:2c:93:f7:53:bc:a8:29:2c:54:4c:27:7a:a5:33:8a:24:
13:64:32:da:8b:49:c4:db:b0:d3:f9:78:3e:04:30:c2:9e:ec:
e9:b2:96:53:89:33:17:96:4c:b3:0c:b7:59:e9:d9:34:26:04:
1d:fc:65:17:89:0c:41:2a:86:b1:d0:d0:f5:8d:f3:8b:ee:2e:
62:bb:fc:60:12:49:95:91:16:eb:51:72:4c:24:82:28:c1:67:
e1:42:54:35:8c:74:9a:3f:2e:7e:14:a9:fb:8f:a2:df:28:33:
98:f1:b9:0d:7b:36:25:c4:3c:c5:32:4c:ee:4d:bd:c0:65:30:
bf:0b:be:0a:58:c8:80:7a:d1:bd:4b:be:77:fd:22:21:37:38:
d5:31:14:81:bf:04:08:49:cc:79:e9:e9:60:99:52:4f:7c:18:
76:8c:0e:99:9c:75:c0:78:ce:8b:f7:25:9c:46:31:9e:29:15:
b1:8d:77:01:9f:78:3c:d0:70:e2:4b:e7:ca:15:0c:50:57:52:
b4:80:3b:0b:2a:dd:05:0c:e6:62:a7:be:02:e3:0c:4d:18:0d:
60:c5:a9:16:93:ae:58:7e:1e:e9:33:fe:75:60:f9:d0:1a:88:
86:f6:be:f9:5f:f6:f9:85:10:7c:1b:da:e7:61:b9:37:cf:da:
00:c3:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:09 2026 by rpki-client