Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: 25SsqmysBsmP1ahtOvbjEImkRQz1r65pxd7tbU/uMyc=
Subject key identifier: 94:AC:6A:34:FF:94:24:1E:20:E4:03:7A:E6:D1:67:5B:98:C7:34:0A
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 01A0CB22EECAC3FA85FD278916F4F9072DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 174D
Signing time: Tue 22 Sep 2026 22:00:59 +0000
Manifest this update: Tue 22 Sep 2026 22:00:59 +0000
Manifest next update: Wed 23 Sep 2026 22:00:59 +0000
Files and hashes: 1: 2h_8VJcabHSDMCKwNPF09jw_Hf8.roa (hash: c7tBoia56lSI7zrOJCToiDaTHfoOdjooQhw4RuRBw4Y=)
2: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (hash: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao=)
3: QZlonf94vrWyMPOp87JAm_NWNqo.roa (hash: w6YhRh8acabp1x77SswHpUR6bqnL4nDuqC2pTtKcfFs=)
4: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (hash: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI=)
5: SpN8Ae02yCS4OsvaV0LVnRQu4n8.roa (hash: R6h5Q2EcPAyb3qsGG8N6McT5J+RVk0PixkSdyl6z20Y=)
6: esU4fsvjE_GKeZBwL9xIr9vckzE.roa (hash: iqFT9wVD2iFSuqGQNBizWBYxsH/4xrNP/ECuVx8b/i4=)
7: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (hash: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo=)
8: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: hYQuUbb77BONgl6WCDTfZcFcnTgRXrLdskVQGxYGMa0=)
9: xKxA9QME2V8f2RH3M46PbYUw4oY.roa (hash: thsfcGsSl3d+8qrEjeuctIXvk8eBzxGLHCJIT/WWbto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:ee:ca:c3:fa:85:fd:27:89:16:f4:f9:07:2d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Sep 22 22:00:59 2026 GMT
Not After : Sep 23 22:00:59 2026 GMT
Subject: CN=94ac6a34ff94241e20e4037ae6d1675b98c7340a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:d7:4b:51:50:cb:85:d6:85:93:e8:6b:94:
34:c5:c5:53:57:62:87:bd:bd:cd:c8:f1:ed:53:e3:
47:e5:3b:b6:0a:48:73:75:2f:b0:39:82:fa:fd:e7:
46:26:12:56:7e:ed:17:42:82:37:4d:b8:22:ea:db:
03:27:7b:95:5e:ec:fd:0e:e1:07:ab:74:ac:7c:ed:
1f:f5:f9:58:36:cb:40:c7:1f:27:45:1c:84:22:a6:
60:f6:68:cb:8a:3f:59:40:f5:70:01:15:50:9d:09:
96:e0:3e:81:63:95:df:53:bf:97:86:62:47:a5:64:
eb:d9:5f:d9:96:63:4c:2d:2a:28:f5:11:3c:34:a4:
09:06:1d:d8:50:89:8d:8f:5a:b4:e4:f7:30:9e:8f:
fb:9c:7d:92:e6:f1:d9:8d:51:1c:2f:c2:86:f5:99:
59:a0:f8:05:6d:6f:f6:2b:51:fc:22:e7:64:2b:a6:
dd:f5:c4:1f:4d:6a:84:04:da:d7:a9:3d:fd:8c:5c:
76:fb:ec:e5:15:b7:23:91:ea:53:83:bf:81:ac:b0:
39:d4:b4:c2:6f:ab:da:2b:03:07:50:8a:a9:ee:16:
ba:7c:47:75:90:00:c1:d1:e1:d4:b6:3f:04:ac:5b:
68:07:cf:fa:99:0c:54:56:0e:c7:61:be:93:d4:94:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AC:6A:34:FF:94:24:1E:20:E4:03:7A:E6:D1:67:5B:98:C7:34:0A
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e3:d3:7b:5b:3a:fb:f7:74:61:a5:fd:56:b4:e1:ff:53:43:
db:19:35:c4:47:8b:a0:5d:0c:34:47:40:53:21:38:5e:9b:24:
db:54:eb:90:46:9c:df:e6:48:45:96:1a:5d:aa:7a:69:8d:d7:
99:23:34:88:16:8f:8f:69:28:7a:5f:3e:72:ef:a5:3c:59:89:
84:cd:25:9a:46:2b:10:19:90:90:ac:8b:9e:a0:9d:d2:69:bd:
e3:7a:84:75:e5:30:c0:06:67:09:94:ee:cf:d7:bd:4e:94:c9:
59:c2:ba:6a:0e:2b:28:23:d9:36:f8:1f:16:45:6f:16:9f:29:
3a:24:d4:e3:3d:2e:49:e9:9a:4e:00:86:74:11:8c:91:03:6f:
f3:6f:0e:a1:f8:3c:75:69:43:c1:3c:38:55:f1:85:ff:ac:31:
96:4f:22:e9:94:13:27:7a:56:1c:e6:96:75:e2:d0:f8:ca:18:
f2:63:37:f3:bc:1b:55:ef:c9:7a:6c:09:a2:f4:d4:26:54:a9:
8d:bd:ee:97:11:07:5b:07:d3:2d:3a:0e:b8:62:75:52:73:7d:
43:d1:3a:ad:e4:0f:a2:73:93:95:ad:dd:48:8f:62:7b:a5:cc:
cd:a4:6b:65:b8:60:da:4b:8b:0d:6f:36:b2:01:f3:86:3e:04:
85:6f:e3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:32:35 2026 by rpki-client