Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: wVHZdMQyavokSCTOLDhhDUirjbPm1k7iGr3I2S29FT8=
Subject key identifier: 05:12:8E:65:CA:94:44:08:94:3C:6E:BB:AA:0D:FF:5C:14:62:71:71
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 019F93C8CBAD34B5B7BC2A465D2284EB0A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 0AA5
Signing time: Fri 24 Jul 2026 11:00:37 +0000
Manifest this update: Fri 24 Jul 2026 11:00:37 +0000
Manifest next update: Sat 25 Jul 2026 11:00:37 +0000
Files and hashes: 1: BtxvHCilSqt_99RwN54PMNqlIS8.roa (hash: FhEZYVel7CDKvGsL+NRAOlWLOkmBn5nDe2CgOk2RwyA=)
2: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: CFAzt7c0AEZlODWlJJSs2TcuLMoCM8ryXrGxn91GbDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:cb:ad:34:b5:b7:bc:2a:46:5d:22:84:eb:0a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Jul 24 11:00:37 2026 GMT
Not After : Jul 25 11:00:37 2026 GMT
Subject: CN=05128e65ca944408943c6ebbaa0dff5c14627171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7f:8d:75:63:8a:29:04:95:e6:87:67:68:b8:
b0:46:ec:6d:8f:7a:a9:83:17:37:90:ca:6e:91:12:
2e:64:1e:4b:11:ed:b9:3a:97:77:5c:02:58:73:e5:
ad:5b:22:02:b1:63:aa:01:40:3f:51:e9:89:19:98:
fb:00:ed:e7:44:a6:72:df:4f:59:fc:e5:dd:6e:0a:
44:a0:59:ac:37:3d:2a:3f:7a:ce:62:c6:2e:51:02:
30:74:5d:05:90:f9:d2:5d:c9:b2:a1:7f:08:7e:01:
44:d1:46:d4:05:4b:d9:6e:fa:cd:2b:2d:f2:34:aa:
c6:6a:16:4a:0e:f3:52:a0:e1:93:47:7d:02:ad:29:
19:d9:ee:b2:9c:c4:ce:b9:53:85:bd:21:24:79:26:
ae:7d:49:d6:76:60:63:9e:0b:2f:15:c0:99:5a:57:
a9:56:5f:32:7d:db:d0:1a:17:29:f3:f8:66:94:42:
56:13:d2:b3:4c:1a:b2:d6:a3:81:2d:50:5b:79:4c:
f0:78:77:c0:56:f3:c4:f7:fe:4c:98:ad:30:c5:97:
13:fb:b3:fb:f6:1d:f8:2e:62:6c:93:e5:de:be:c7:
e1:55:13:1e:37:38:3e:6a:bb:8d:72:1c:b0:6b:2f:
e9:f7:e5:b9:20:a8:02:4a:56:c9:18:5b:c5:a5:ba:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:12:8E:65:CA:94:44:08:94:3C:6E:BB:AA:0D:FF:5C:14:62:71:71
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d3:f4:bc:89:9f:e8:35:58:e6:70:65:9c:c6:2f:64:3d:c5:
ef:a2:f7:b6:86:7c:96:a0:c2:69:67:18:d9:66:72:4e:05:2f:
f6:e9:e0:e1:57:6d:6c:cc:67:5a:bb:d8:ef:2a:f3:e9:2a:f9:
e2:a4:12:49:4a:ad:51:dc:46:d2:6e:b4:54:05:4b:12:eb:d2:
a4:14:83:eb:2d:88:b4:ee:13:d2:dd:9a:5e:1c:9f:2c:cc:c5:
21:b8:4e:f8:a8:0d:9b:b3:99:7a:00:d2:1f:b6:a4:6e:60:8f:
29:3c:64:ee:fc:eb:2f:e4:24:8d:09:f8:07:bc:5f:a0:85:45:
5b:7a:69:65:6e:50:a4:85:e1:d5:a7:1f:fd:bf:e0:b7:df:63:
da:46:8b:77:6a:d9:db:1b:3c:4e:59:ec:9e:93:a5:e9:b9:c3:
60:67:f0:e0:db:0d:a4:b6:9d:86:14:f2:72:24:e5:26:28:38:
cb:3e:74:28:1c:ed:88:bd:4a:a2:97:b2:6f:c8:d3:18:8e:0d:
f7:dc:21:0d:83:b4:c2:75:58:b0:14:1c:b1:4b:22:ce:a4:b5:
62:1e:b6:41:de:31:f8:86:b2:db:a8:b7:50:55:5d:61:b4:5f:
a2:a5:ed:ee:8e:be:6a:8d:08:a8:68:af:0a:d6:c5:3e:b2:a2:
d2:5e:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:42 2026 by rpki-client