Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft
File: OdAejKCv5BTBV-H7-1OUhnzlHts.mft (raw, json)
Hash identifier: O8+HeYNZP60Jlop937xjj4WX0OPlQq2LIMiHm6gP1o4=
Subject key identifier: CE:C2:4C:F5:71:CA:A7:99:50:F9:83:AA:1E:27:23:40:AE:F4:6C:E1
Authority key identifier: 39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB
Certificate issuer: /CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb
Certificate serial: 019D9E51B0052F3B9B50A443050D43EEB1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft
Manifest number: 018D
Signing time: Sat 18 Apr 2026 02:00:46 +0000
Manifest this update: Sat 18 Apr 2026 02:00:46 +0000
Manifest next update: Sun 19 Apr 2026 02:00:46 +0000
Files and hashes: 1: OdAejKCv5BTBV-H7-1OUhnzlHts.crl (hash: g97KvOj/ptA9PrEuWtWxfK0S69Mmy4n90U/qlu+FpTg=)
2: QcsUaaoKRPUBylV1-Fbk0DFfN80.roa (hash: gVbE2LpxkXM42NWeJiCGY1tC1aB+7n0+0yKW+mHCt6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:51:b0:05:2f:3b:9b:50:a4:43:05:0d:43:ee:b1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb
Validity
Not Before: Apr 18 02:00:46 2026 GMT
Not After : Apr 19 02:00:46 2026 GMT
Subject: CN=cec24cf571caa79950f983aa1e272340aef46ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:90:0c:73:a1:1f:11:b9:5a:33:c8:7c:15:
9c:24:73:ba:eb:a0:c4:6c:0a:fb:4a:3e:cd:5e:16:
61:56:7c:3a:32:d5:e3:70:9d:5f:df:82:4d:54:e2:
16:83:e3:cb:85:5f:36:64:5a:ba:39:f1:04:c4:47:
d8:d6:dd:58:89:00:b9:74:b2:00:93:84:82:09:8b:
9a:80:dd:e2:bd:e2:dd:54:8f:85:5c:07:8a:0d:24:
39:e2:da:ea:b5:54:a5:f9:4a:f4:8b:80:d7:0c:d3:
0f:e2:d4:33:61:e7:fc:43:f9:95:31:b4:fe:c9:37:
25:c1:eb:56:00:d3:9c:7f:75:69:68:66:31:52:b5:
1f:f2:eb:ae:54:c0:19:01:fc:9f:5e:d2:28:3d:8b:
95:83:67:46:e3:10:44:e2:5d:f5:8c:03:a3:0b:bf:
44:5f:35:55:4f:00:c8:c3:0a:5b:1b:fe:d8:95:c2:
63:a1:97:ec:2c:f0:53:51:dc:8f:6f:a2:d6:00:cf:
9f:4d:fb:53:c9:ee:3a:81:37:b5:ca:a4:2b:86:eb:
77:41:42:d5:c6:c2:bf:76:14:77:5d:0b:54:7a:20:
eb:b3:5a:0e:a4:5f:ca:ca:6f:fe:8d:4f:2c:32:3b:
da:c2:3c:f9:6a:4d:e5:4a:79:f5:91:6a:63:bc:d3:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C2:4C:F5:71:CA:A7:99:50:F9:83:AA:1E:27:23:40:AE:F4:6C:E1
X509v3 Authority Key Identifier:
keyid:39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:27:37:c6:09:74:83:bf:6a:e3:61:25:87:ad:a4:d7:7e:e7:
6c:87:33:0f:7d:4d:6d:6b:4c:61:f0:b1:88:ea:6a:49:3d:2d:
59:8e:3e:f5:fb:6c:c5:dc:fb:77:1b:20:cd:5e:f3:b8:37:b8:
f0:b9:58:20:c0:21:52:71:8c:b3:e0:da:7f:55:92:16:28:e6:
bc:05:4f:99:fd:6c:11:c8:fd:10:6f:6c:94:75:46:84:bb:1a:
29:41:3a:b5:03:e7:4e:51:17:8c:91:60:5c:53:3f:5b:27:a4:
45:fc:e3:b1:38:a4:f5:77:62:d1:cd:3a:21:e8:d9:6e:f2:1f:
61:a6:6b:96:24:6a:22:ec:2c:41:7c:31:32:0e:bf:1b:67:42:
03:3b:db:49:52:e2:7c:7c:c6:38:08:b6:74:50:ff:9b:d0:d0:
0b:6f:0c:6d:4e:68:14:ea:34:0c:7f:0c:8c:92:3a:03:2d:4a:
b1:ce:07:90:8d:23:b3:a5:2a:f7:1f:a1:cb:a7:6e:ae:15:73:
cc:98:2c:e0:ef:8a:3e:99:a6:9b:9e:97:3a:7a:6d:de:78:cb:
c7:d9:56:51:6f:6f:c6:6f:18:c5:78:91:6f:ef:af:d0:89:4a:
8c:cb:a1:ea:2e:b4:e4:9e:38:71:84:79:ac:fe:01:4e:3f:f1:
2c:5f:99:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 11:25:48 2026 by rpki-client