Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json)
Hash identifier: 2OIhiICIsfN83A++yOzEuTkN/KgNB5C+ObSLGX+8/mw=
Subject key identifier: CB:1A:09:54:20:97:A2:B0:4C:0D:62:6D:FE:EA:CC:E1:5C:03:C6:0C
Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Certificate serial: 019CAB3443FC1E519C026C0267E6EB8EE6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:55 +0000
Manifest this update: Sun 01 Mar 2026 21:00:55 +0000
Manifest next update: Mon 02 Mar 2026 21:00:55 +0000
Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: YG4GvBGJ4w19FkBNijsm6szhFFvmCJb43j3nLAlzbo8=)
2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:43:fc:1e:51:9c:02:6c:02:67:e6:eb:8e:e6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793
Validity
Not Before: Mar 1 21:00:55 2026 GMT
Not After : Mar 2 21:00:55 2026 GMT
Subject: CN=cb1a09542097a2b04c0d626dfeeacce15c03c60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:0f:eb:a8:fd:91:e8:33:7b:8d:d9:f5:64:
b4:12:f1:19:f8:12:a6:d6:be:9f:94:ee:1f:6b:e0:
a0:3f:01:3d:90:bc:4d:32:d4:1b:12:e2:d2:de:b5:
86:bd:9f:b4:b8:dd:11:f3:71:17:92:60:c1:bc:83:
00:28:f3:d6:75:b5:46:7a:c3:3f:2b:4e:12:b5:51:
7c:d0:30:4f:d2:ca:d7:90:59:dc:a2:ed:19:ed:7d:
04:dd:a2:e4:07:37:d5:fd:dd:ad:e4:47:32:56:98:
18:a5:cf:08:33:86:a9:b1:a8:4b:3c:d9:26:02:b8:
e9:f3:63:37:fb:aa:ec:f3:d1:02:f6:fd:fe:27:fc:
4e:10:99:8a:66:45:e9:20:c7:90:80:2c:64:56:31:
59:c5:d1:7b:41:a4:0f:0a:a5:5f:ef:2e:57:1c:63:
3b:99:2b:29:92:41:31:c6:12:d9:b0:6b:16:91:b6:
74:66:71:4c:19:17:46:e0:6e:65:ef:b5:08:9a:bb:
c6:4e:4c:c9:58:19:62:69:ae:34:0d:37:90:bf:6c:
de:75:b9:2f:01:69:55:f0:61:98:af:60:ac:56:99:
bc:14:e3:96:54:c5:11:78:dc:a9:43:ab:f0:c3:e1:
46:d7:76:08:08:95:75:79:a1:32:c4:31:11:34:dc:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1A:09:54:20:97:A2:B0:4C:0D:62:6D:FE:EA:CC:E1:5C:03:C6:0C
X509v3 Authority Key Identifier:
keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0c:42:4c:47:0c:ba:f5:37:96:74:32:a9:ef:a4:53:37:ac:
c0:72:e1:e9:ad:d1:3a:bf:59:c8:c7:1f:7e:dd:66:d4:ed:74:
54:86:92:bb:ff:02:98:6d:0f:43:67:20:ab:18:e2:94:08:85:
12:fa:b6:b4:ca:0e:64:c8:6a:25:86:2f:c0:c2:4e:ec:40:f2:
4f:3d:11:5f:a3:45:58:ae:63:29:44:57:5d:d0:ca:e7:d0:4a:
3b:db:85:34:c5:19:68:0e:2c:94:06:48:d3:24:e2:81:3f:95:
56:53:c5:74:a6:01:86:68:70:7d:5a:3c:d5:fc:eb:ca:a3:fd:
bc:dc:83:e3:31:ed:d2:06:f4:68:85:da:04:64:5e:25:2d:0b:
9c:33:52:5e:a1:d7:8c:1c:b9:27:c2:62:b0:b4:cc:e3:a5:79:
bb:50:0f:76:87:df:e0:df:a7:33:33:b3:f0:d0:88:b3:cd:7a:
0b:d3:4b:ec:fd:a9:18:48:0d:12:29:08:d0:27:7b:ca:59:25:
d3:07:aa:a6:1d:04:7f:bf:a2:7b:be:f1:5f:bd:79:9f:a1:e1:
b1:ab:6b:16:24:4c:57:96:d1:2f:09:a4:a1:45:f5:7b:bf:19:
26:89:c1:67:e0:d4:82:4e:60:17:cd:c4:d2:c1:4a:0b:33:2f:
40:db:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:31 2026 by rpki-client