Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: h4LUfAYeeCBwE9jburkY7h0ZzCrzXf3cKPZRD2SMJYA=
Subject key identifier: D1:96:A9:91:FD:28:98:80:1E:1C:06:F9:58:B6:ED:5E:93:90:C7:51
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 019DA4543182D485FA42A0424F4EC64F5958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 06:01:14 +0000
Manifest this update: Sun 19 Apr 2026 06:01:14 +0000
Manifest next update: Mon 20 Apr 2026 06:01:14 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: DyuGxvq26499IPBYohsYTy80Dti9GCt38Ph6OBLz3WM=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:31:82:d4:85:fa:42:a0:42:4f:4e:c6:4f:59:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Apr 19 06:01:14 2026 GMT
Not After : Apr 20 06:01:14 2026 GMT
Subject: CN=d196a991fd2898801e1c06f958b6ed5e9390c751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:2d:a0:1f:9d:0f:de:de:80:f9:5c:65:6f:
ca:94:6d:41:47:87:82:ba:09:ec:4b:3a:b5:86:3a:
74:45:12:93:fb:9d:c9:45:f6:38:ce:4e:ec:bf:8c:
e7:dd:54:a8:c6:d0:e9:aa:c4:9c:25:a8:21:1e:33:
fd:52:39:23:c4:60:c6:2b:0f:da:86:ff:71:0d:3e:
df:d4:53:08:c5:96:d5:9d:aa:9d:18:ff:6f:5d:6e:
94:b2:c2:5f:2b:0d:12:03:67:e5:4d:5e:a2:3f:5a:
a6:a2:27:6f:de:e5:45:65:3b:97:9d:aa:ad:59:3b:
c4:bf:17:25:cc:98:bc:a4:0c:76:fd:63:87:da:30:
ac:2e:19:1e:51:59:cc:2d:62:48:6d:3b:11:de:fa:
a3:94:5b:7d:0f:9c:29:f5:f4:71:e3:91:48:3b:0d:
0d:8e:16:70:2d:0d:de:4d:39:3f:f0:fe:91:18:cd:
f6:c2:24:dd:76:bd:0e:1b:65:ed:37:df:44:6d:fe:
4f:42:a8:3f:3c:2d:bb:31:f4:e9:13:e2:b1:41:68:
7d:92:72:74:dc:45:2e:e9:00:57:0c:d0:d3:6e:cc:
5a:0c:9f:3a:be:16:06:1b:30:68:fc:0c:e1:29:82:
7d:1d:71:f8:bc:9c:8f:b0:60:10:51:22:c6:00:e0:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:96:A9:91:FD:28:98:80:1E:1C:06:F9:58:B6:ED:5E:93:90:C7:51
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a3:13:2b:7a:11:5d:0a:05:66:d0:1e:27:36:5c:78:df:6b:
12:82:12:73:71:66:a5:38:40:99:5a:e9:3f:06:59:d7:93:93:
7c:29:b0:8b:9b:fe:a8:32:4a:3b:c0:d6:c4:7e:27:90:fb:82:
93:3d:17:2d:15:b1:3a:0f:43:58:c7:83:c9:c8:ab:17:c7:86:
e6:01:cd:aa:7c:ed:df:73:20:c5:98:de:0a:b8:ab:6c:2b:03:
e2:d8:c3:fc:f2:20:a0:56:7a:48:8e:a8:cc:61:33:5a:90:21:
95:d4:14:1e:2b:a5:29:80:4e:b2:46:42:02:07:e1:fe:83:eb:
42:73:f6:5b:95:ef:47:47:77:0e:93:d5:21:f9:c4:55:eb:32:
d2:d0:e0:0c:a0:31:15:dc:66:ef:83:dd:83:7e:16:2e:b4:ef:
48:d0:7e:53:97:03:47:5d:c3:43:ae:d7:2c:e7:86:b5:b5:3c:
09:3f:60:3a:cd:15:0d:eb:8d:c0:bb:5d:08:83:f2:66:87:35:
db:11:3c:77:eb:e6:8e:46:fb:8f:d2:23:f7:3e:15:dd:14:d7:
1f:38:03:74:a9:44:6a:ba:18:e9:86:2e:b6:63:7d:1d:72:5c:
e6:f9:fd:57:0b:bf:42:f3:57:7b:6f:5f:d1:a5:51:8b:0a:11:
f1:5b:86:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:17 2026 by rpki-client