Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: dJD2+1s0JIg5z86kIkCNtlFEkaXMUP260WAy2oH3pu0=
Subject key identifier: EB:2E:7C:94:52:51:6C:69:36:20:A7:82:0D:57:80:A5:27:9E:19:C9
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019F90599F5FB95315365822B1F4438B3019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 16AA
Signing time: Thu 23 Jul 2026 19:00:20 +0000
Manifest this update: Thu 23 Jul 2026 19:00:20 +0000
Manifest next update: Fri 24 Jul 2026 19:00:20 +0000
Files and hashes: 1: 2h_8VJcabHSDMCKwNPF09jw_Hf8.roa (hash: c7tBoia56lSI7zrOJCToiDaTHfoOdjooQhw4RuRBw4Y=)
2: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (hash: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao=)
3: QZlonf94vrWyMPOp87JAm_NWNqo.roa (hash: w6YhRh8acabp1x77SswHpUR6bqnL4nDuqC2pTtKcfFs=)
4: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (hash: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI=)
5: SpN8Ae02yCS4OsvaV0LVnRQu4n8.roa (hash: R6h5Q2EcPAyb3qsGG8N6McT5J+RVk0PixkSdyl6z20Y=)
6: esU4fsvjE_GKeZBwL9xIr9vckzE.roa (hash: iqFT9wVD2iFSuqGQNBizWBYxsH/4xrNP/ECuVx8b/i4=)
7: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (hash: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo=)
8: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: xl0Ttg50AG+i8gUqtAleJLXuRwDtq5CbcXvvPm5i6N8=)
9: xKxA9QME2V8f2RH3M46PbYUw4oY.roa (hash: thsfcGsSl3d+8qrEjeuctIXvk8eBzxGLHCJIT/WWbto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:9f:5f:b9:53:15:36:58:22:b1:f4:43:8b:30:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jul 23 19:00:20 2026 GMT
Not After : Jul 24 19:00:20 2026 GMT
Subject: CN=eb2e7c9452516c693620a7820d5780a5279e19c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:4a:c0:fd:6b:b5:c8:1e:a5:57:e5:0e:53:
33:38:70:6e:8c:c9:60:6e:8e:89:ad:d0:50:e7:2d:
31:ac:c6:af:61:4d:e8:89:f0:f7:74:dd:c4:cc:d2:
9f:b4:6b:cd:0b:2c:77:c0:ee:21:9b:57:fe:8e:70:
04:46:55:25:34:93:95:cc:b3:e5:9d:56:b4:ea:be:
e4:1c:b7:aa:f1:bb:cb:84:02:1d:4a:72:37:88:15:
6e:3c:ca:b0:33:d8:e5:3a:cf:10:66:d1:5d:d7:1d:
bd:ca:cf:0b:ac:bd:be:09:25:5b:c5:7c:18:b5:2b:
c6:68:fa:47:9f:f9:ef:fe:8f:5c:b2:d0:7a:ea:fd:
c0:fb:27:79:dc:d7:bb:86:dd:44:d5:5e:ed:c5:ac:
b9:c6:85:62:d7:21:c3:06:81:d9:29:70:e0:37:20:
5d:45:88:24:42:b4:31:ec:db:09:a2:b7:96:6a:70:
2e:c2:7d:90:01:f4:74:e5:4f:43:3e:7a:1a:e5:6f:
19:24:13:01:57:3c:30:2b:68:a5:62:08:68:6b:59:
8f:70:b0:87:c9:c5:4f:35:fe:34:49:30:c0:05:80:
d8:96:2a:b3:8f:ac:d4:ae:ee:ea:1f:48:3f:71:d9:
60:ca:8b:96:90:33:a4:35:4a:cf:4e:43:a4:d0:46:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:7C:94:52:51:6C:69:36:20:A7:82:0D:57:80:A5:27:9E:19:C9
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8e:5f:f3:fd:32:7b:4f:dd:6a:10:c6:55:e8:9f:6d:72:ea:
cc:3c:09:b5:e8:b4:59:16:43:d1:92:91:53:87:8a:21:1b:68:
1e:a5:d6:d6:7e:ae:e6:51:19:fc:51:63:b5:86:f5:24:69:0d:
af:8c:82:16:e2:c3:45:ba:df:8e:03:cf:b8:58:f0:09:b1:fe:
d6:14:0e:29:02:aa:b4:fc:00:05:dd:93:c5:21:63:85:2e:70:
bf:7d:26:dd:a0:36:ad:0a:e4:c6:68:5e:36:9c:ac:59:12:06:
00:29:dc:4d:3e:0a:6e:e8:73:84:e1:76:97:6e:fa:8b:cf:c9:
7f:43:35:94:45:fc:75:7e:b1:18:e1:2a:07:b6:cd:91:39:4b:
45:12:43:f3:2e:b2:8c:a0:fa:69:52:c1:9a:3b:12:ed:d2:53:
40:9f:55:74:d7:fc:9f:9f:6d:ee:99:65:00:9d:bf:a5:74:4f:
3a:b6:bc:8b:cf:0d:93:a7:1f:74:0d:d4:d5:0a:d6:ca:e0:58:
ba:85:d0:04:a9:0f:0a:21:f1:f6:44:02:4e:1c:36:85:11:99:
cf:8f:3c:12:12:73:68:b5:e7:72:d1:0c:63:8f:3f:77:9e:0f:
7b:a8:2d:d4:59:4e:f4:df:8c:ad:e5:7c:c4:36:4a:d7:9c:c8:
77:63:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:38:08 2026 by rpki-client