Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: mTF4vdgV8bXUUyFbvUBS4hHyRAsDfEoJtCqyCT1LS9E=
Subject key identifier: 95:F4:7A:1A:53:F0:8E:0E:5A:70:58:ED:D0:FD:7E:EF:FC:96:AF:55
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019E1D90CE8858BDD94A6D509D7DEC512AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 15EA
Signing time: Tue 12 May 2026 19:01:29 +0000
Manifest this update: Tue 12 May 2026 19:01:29 +0000
Manifest next update: Wed 13 May 2026 19:01:29 +0000
Files and hashes: 1: 2h_8VJcabHSDMCKwNPF09jw_Hf8.roa (hash: c7tBoia56lSI7zrOJCToiDaTHfoOdjooQhw4RuRBw4Y=)
2: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (hash: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao=)
3: QZlonf94vrWyMPOp87JAm_NWNqo.roa (hash: w6YhRh8acabp1x77SswHpUR6bqnL4nDuqC2pTtKcfFs=)
4: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (hash: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI=)
5: SpN8Ae02yCS4OsvaV0LVnRQu4n8.roa (hash: R6h5Q2EcPAyb3qsGG8N6McT5J+RVk0PixkSdyl6z20Y=)
6: esU4fsvjE_GKeZBwL9xIr9vckzE.roa (hash: iqFT9wVD2iFSuqGQNBizWBYxsH/4xrNP/ECuVx8b/i4=)
7: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (hash: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo=)
8: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: wk92IGccPa5EVyYGhTJWpXikkx8ujAQG6SH8YaYxyPw=)
9: xKxA9QME2V8f2RH3M46PbYUw4oY.roa (hash: thsfcGsSl3d+8qrEjeuctIXvk8eBzxGLHCJIT/WWbto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ce:88:58:bd:d9:4a:6d:50:9d:7d:ec:51:2a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: May 12 19:01:29 2026 GMT
Not After : May 13 19:01:29 2026 GMT
Subject: CN=95f47a1a53f08e0e5a7058edd0fd7eeffc96af55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:9d:ab:01:80:b3:a6:f8:95:1d:a0:a5:be:
bc:85:51:3d:d6:52:b5:fa:c2:ac:3e:f3:f1:5c:37:
d0:d8:d7:8d:4d:7b:4d:b1:f4:6f:66:84:8b:7a:bd:
c1:7e:7e:ef:77:ec:e7:fe:98:83:31:50:c4:69:e8:
db:ab:7e:cf:6f:9e:12:c4:1f:95:43:05:1e:7c:c1:
37:39:35:48:a4:47:8a:dd:02:3c:71:e2:be:2c:44:
96:ec:15:31:9c:f6:a2:5b:1f:7c:70:3f:c4:60:c4:
a2:25:09:77:f8:35:4e:b3:d1:40:45:81:c0:97:70:
c5:88:5f:b9:a4:3b:c0:19:5e:db:f3:e9:fe:13:c4:
60:af:c0:2d:ba:e3:ba:9b:d5:d2:cb:0c:bb:21:87:
8b:04:c1:ad:b1:51:fb:31:c1:52:b3:d2:50:4c:e7:
52:15:b8:64:85:de:43:b8:dc:c5:f5:72:29:a8:4f:
0e:34:cb:3e:64:80:bd:2d:6e:09:32:99:ec:ae:b1:
35:4f:c1:ba:7f:f8:0e:4f:5c:85:bc:fb:57:d8:a2:
04:91:2e:66:01:7a:8e:ec:41:41:bd:4b:4a:e6:72:
ea:07:ff:ac:cb:68:9f:6b:ce:01:6a:2e:eb:ce:c0:
15:3b:53:57:f6:7a:1b:d1:db:75:fb:68:e8:c5:ad:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F4:7A:1A:53:F0:8E:0E:5A:70:58:ED:D0:FD:7E:EF:FC:96:AF:55
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:88:a1:1f:d2:26:b2:78:c5:84:6e:98:d7:7f:c4:63:13:e6:
b5:b3:38:27:79:18:32:8c:6b:01:36:6e:ab:96:33:0a:72:d5:
49:17:67:62:12:60:03:2e:ff:e5:0c:2f:ef:4d:39:40:ae:4b:
33:a5:e2:15:32:9a:7a:2f:42:fa:65:08:d4:8f:40:a6:85:26:
5a:9a:d2:1b:4a:12:0e:f1:e3:26:1e:79:26:dd:81:1d:b5:89:
50:2f:1b:74:d5:e7:22:eb:31:98:73:1a:ec:b2:e4:28:eb:8f:
c0:51:e8:21:4b:1d:b2:77:66:fa:66:31:ce:37:ef:87:9a:e6:
3a:de:19:c5:9e:68:a2:f4:b8:e3:c4:b2:4a:f7:8f:6d:13:6f:
82:e9:ed:5b:e8:e2:dc:5c:fa:be:43:cc:b0:1e:08:76:1d:7b:
a1:75:59:e3:b0:3b:34:8f:c0:84:84:b6:7f:77:7f:3b:42:9c:
2d:70:da:ea:b5:0a:b1:47:4a:2a:69:13:fe:07:c5:4e:78:1d:
e3:c4:e1:ce:de:04:7c:3b:62:51:d6:9e:6e:24:96:1f:29:45:
4a:5c:d8:69:9f:bc:72:38:37:c1:c3:2e:b5:b1:22:ff:85:4e:
bf:f6:ab:fe:70:4e:e3:be:48:1b:e9:00:44:a6:d1:75:dd:65:
9d:df:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:02 2026 by rpki-client