Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier: Tp8RwwNkq2I5oHAxR5WRytPPw8tIVvSSII5D9GGefkM=
Subject key identifier: EC:3F:9C:C6:61:F0:E8:3C:15:6B:B2:75:0D:D9:E1:BD:F5:15:7A:89
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial: 019CAA21E78BB4B81A5978E1EE2C467901D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number: 0424
Signing time: Sun 01 Mar 2026 16:01:14 +0000
Manifest this update: Sun 01 Mar 2026 16:01:14 +0000
Manifest next update: Mon 02 Mar 2026 16:01:14 +0000
Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: dcTFBt4siYGLpKUdfm/raY0tJl9pBr6NaYOxV90F35A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e7:8b:b4:b8:1a:59:78:e1:ee:2c:46:79:01:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Validity
Not Before: Mar 1 16:01:14 2026 GMT
Not After : Mar 2 16:01:14 2026 GMT
Subject: CN=ec3f9cc661f0e83c156bb2750dd9e1bdf5157a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:72:83:26:b6:b6:71:16:76:82:1a:65:05:68:
0a:7c:3f:4c:b8:f0:ec:cd:80:3b:a9:dd:1f:d4:51:
eb:48:6b:62:82:3b:b4:6b:02:4f:c8:02:a7:eb:a0:
27:28:0a:79:c4:c2:52:35:91:43:41:7c:9c:00:e9:
c1:29:aa:53:c6:0f:eb:70:df:e7:6b:45:f3:ed:8b:
8c:e6:c8:4d:4a:42:b9:92:c3:a8:bb:e2:05:03:b0:
d5:93:9d:b0:cd:a6:5c:98:0a:66:96:8a:cb:55:55:
e0:9c:74:ce:7f:e9:c8:e8:d5:80:31:b0:df:e7:b2:
71:b4:ec:26:27:b3:ca:56:26:c5:d5:f5:49:d1:e7:
e5:c1:af:25:40:c9:2c:d1:7f:33:d5:e7:ed:54:3d:
ea:72:ed:9e:e8:8e:27:ed:c1:29:c3:72:8b:7c:c2:
8a:76:ca:5d:2e:cc:5a:8f:fd:d9:e8:ea:aa:0a:62:
a7:48:bd:8a:52:8f:35:71:c7:af:4b:16:c4:e1:68:
e2:51:45:73:61:67:75:df:e8:a1:de:9e:b4:dc:16:
10:f7:d1:02:87:46:4f:e5:e1:48:d2:00:74:14:6a:
60:cd:01:cf:35:76:96:57:95:69:a4:8c:87:81:94:
67:77:e6:e4:74:a2:92:18:cc:e3:8b:5a:a0:62:ef:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:9C:C6:61:F0:E8:3C:15:6B:B2:75:0D:D9:E1:BD:F5:15:7A:89
X509v3 Authority Key Identifier:
keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8e:aa:1b:54:88:32:f0:c4:66:67:82:44:62:bb:cb:5a:6f:
a9:21:87:5a:44:89:b3:31:07:05:ec:22:35:3e:31:51:9d:75:
f5:0e:d2:ea:52:34:b9:23:f2:00:9a:9b:d7:6b:a6:c8:84:0c:
7d:36:e8:3b:ae:56:7c:dd:7b:d8:1b:8f:8b:9c:4f:fe:9d:ab:
1e:42:df:f9:a8:bf:c5:68:83:e0:1f:bd:b3:be:c8:f9:ed:bc:
59:10:cd:7b:f9:07:49:b1:7c:3f:eb:4d:2b:ca:98:4b:b7:29:
87:e7:46:ce:d1:c0:46:e3:dd:55:ad:6a:0f:aa:87:8c:0b:98:
e9:84:7b:0c:0d:0d:f6:f5:39:92:ab:c0:80:7c:c6:c0:a3:26:
16:43:92:83:46:ae:44:3c:13:0f:0a:06:40:01:15:b6:00:55:
4b:d0:7b:0f:5a:cf:25:06:2e:b3:a4:7a:e5:1f:c1:a5:14:e5:
95:7a:33:47:48:fe:bd:4b:cb:61:40:c6:09:6a:aa:a4:55:dc:
bb:9a:2f:c4:2c:e0:25:a0:ed:bf:d5:21:85:a9:1f:40:73:bf:
b4:e1:84:5f:c0:e0:de:3c:84:9d:88:42:eb:65:cc:c9:9e:b9:
e6:95:02:90:b1:3f:e6:9f:79:35:1e:21:50:4a:11:d3:ad:18:
1b:32:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:15 2026 by rpki-client