Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: 7MgUY6wwZYIwAOxUmCk7oNo51oyYimcWGCY2Z84E+KM=
Subject key identifier: CF:BE:35:48:0A:E1:9D:76:33:09:A2:45:E7:A3:3C:1C:28:DB:6F:37
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 01A10581092DD45421D3A5ED1242FDECF41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 06:01:44 +0000
Manifest this update: Sun 04 Oct 2026 06:01:44 +0000
Manifest next update: Mon 05 Oct 2026 06:01:44 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: IpVztpQDxk6dgu1OcSLlqZJGMv0nkdClos6DjbhdXdE=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:81:09:2d:d4:54:21:d3:a5:ed:12:42:fd:ec:f4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Oct 4 06:01:44 2026 GMT
Not After : Oct 5 06:01:44 2026 GMT
Subject: CN=cfbe35480ae19d763309a245e7a33c1c28db6f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:6c:1b:d3:34:88:67:f4:28:06:5f:5f:fb:
d3:bf:55:30:be:dc:b0:fa:5f:42:52:67:e4:c1:0c:
06:22:c8:3b:1f:28:76:6d:5f:4c:86:ac:19:6c:c7:
b1:55:e4:98:c3:42:2e:bd:eb:95:2e:58:53:20:ca:
e6:88:ba:c9:ea:b0:33:e8:1d:85:a6:54:58:b7:52:
d3:c9:da:fc:50:af:bc:5d:08:d8:9e:40:df:76:59:
89:99:8a:db:0c:46:01:0e:98:b4:01:61:cb:88:af:
f2:87:90:25:ac:fa:c4:6b:ac:4d:68:b1:5c:4a:08:
9e:cb:20:4e:4d:9f:26:b8:0c:32:5c:51:5b:9a:17:
4c:92:08:b1:b1:38:45:ab:1a:e6:bc:3b:0d:c3:cf:
e7:f4:21:2b:1d:ea:46:b0:34:21:c7:90:40:9c:49:
13:c8:fc:2c:97:17:e9:3d:7f:ed:81:ee:71:37:6c:
02:9d:1b:e5:01:9a:15:5c:17:f0:67:c4:1d:15:19:
1a:ca:9f:7b:2c:ce:a7:a1:b7:c4:96:f8:f8:9a:48:
79:d6:8e:c7:72:e7:d6:20:de:a5:1d:94:8e:cd:b9:
e0:18:4d:6f:b4:6c:1a:fa:cb:5e:a4:1e:ce:fa:f4:
97:34:e1:02:ca:49:10:32:af:a1:fd:bc:a6:22:ea:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BE:35:48:0A:E1:9D:76:33:09:A2:45:E7:A3:3C:1C:28:DB:6F:37
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:02:ce:4c:22:45:a0:a9:66:8b:6b:70:e1:98:3f:13:59:3e:
9d:99:76:11:ab:51:d8:2d:8d:73:27:4f:10:50:fb:38:17:9c:
4e:65:23:65:9c:26:c2:54:ae:1f:44:cf:a8:62:fa:71:9c:3a:
14:b4:7a:51:f6:6f:71:c3:1b:9f:70:03:77:5c:85:46:69:39:
39:17:a6:0b:bd:f9:8e:80:4a:c6:f8:d2:52:aa:ca:ef:2f:39:
3e:31:9f:92:58:7a:e3:e3:80:8f:d8:0d:3e:22:a1:f3:39:f1:
78:50:02:ad:64:9c:50:bf:9a:39:07:84:e5:bd:93:05:25:88:
58:ac:0f:0f:aa:d0:9e:2d:f6:3a:0e:81:4e:11:d7:6e:aa:c2:
d9:a4:ba:7c:16:e2:b6:fe:52:54:2f:ba:ba:42:01:df:25:cc:
a5:d8:6c:63:8e:a4:55:db:be:93:d3:44:18:a7:d9:ad:1a:82:
9f:2d:5b:ba:00:0b:7a:07:0b:de:24:af:30:5d:d4:17:2b:d0:
cc:d8:46:cd:6c:e4:6e:96:ff:7e:0a:75:04:d4:ce:7c:c3:47:
2e:4b:3c:bf:bc:c1:42:07:8f:33:4a:32:4b:2b:b7:fd:7b:25:
f3:07:bb:d0:31:75:89:ec:fa:11:94:14:7c:3c:56:36:b6:18:
da:64:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:52:23 2026 by rpki-client