Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: 3BdbJhtb1sviMZDU+x8bYlqu13K1DWNRZ1VmXESCdtw=
Subject key identifier: EF:33:D6:8F:46:A5:B6:6C:47:E1:23:9C:4F:E7:CE:F5:91:01:B6:56
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 019F927FC858C5DDAA177E55DF8BBC0785E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0E13
Signing time: Fri 24 Jul 2026 05:01:15 +0000
Manifest this update: Fri 24 Jul 2026 05:01:15 +0000
Manifest next update: Sat 25 Jul 2026 05:01:15 +0000
Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: 8mim4NXLctUQYlNKs5Uv15RNKw0IfV1R8FWezejcYm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:c8:58:c5:dd:aa:17:7e:55:df:8b:bc:07:85:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Jul 24 05:01:15 2026 GMT
Not After : Jul 25 05:01:15 2026 GMT
Subject: CN=ef33d68f46a5b66c47e1239c4fe7cef59101b656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:91:ec:ef:c9:00:62:de:44:33:15:73:14:
cf:8e:68:7a:ca:74:9d:b6:5f:5a:45:78:e1:92:0d:
35:3e:85:f1:90:1c:c2:de:65:42:3e:95:ef:fb:52:
2a:eb:f4:65:9f:82:cc:8c:3c:88:b0:10:49:74:1d:
25:e4:a3:14:16:f4:5e:66:84:4a:1d:4b:89:d4:3d:
01:77:30:ec:8a:40:7c:eb:5a:4f:1b:73:e3:00:52:
4f:86:f9:d3:b1:69:4b:db:99:5c:30:7a:5d:3e:b4:
d0:c2:20:c7:0b:ac:0e:99:29:48:b7:c5:03:28:a4:
f0:e3:77:73:6a:25:e6:0f:84:d7:48:c5:0d:eb:f2:
a5:46:52:78:da:58:b9:35:8f:dd:b6:1c:cd:e3:c4:
0a:b8:03:76:ed:6d:22:08:40:4b:74:6a:43:e3:d6:
19:8b:8b:54:ce:97:fd:8e:a0:af:01:53:4e:27:1f:
ea:5f:29:8c:6e:36:0a:97:d7:94:6b:7b:32:33:5e:
51:4f:63:cd:27:f3:c0:32:60:86:98:7e:13:56:65:
db:c4:05:f4:c8:d1:38:ec:a1:6a:e7:a1:73:81:2d:
22:4e:2e:e6:d9:fc:a7:9c:3a:ff:0e:56:60:10:6a:
3d:3d:40:00:3b:50:e0:d0:e5:8d:ae:f1:19:75:c1:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:33:D6:8F:46:A5:B6:6C:47:E1:23:9C:4F:E7:CE:F5:91:01:B6:56
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3b:1b:26:24:97:57:6a:34:4f:96:6e:52:48:cf:fa:d1:1a:
e9:a8:79:15:f6:8b:9f:6c:1a:2a:bf:92:82:36:92:b5:42:77:
86:41:13:45:a1:b7:85:28:56:f1:02:ce:4c:d3:48:e1:6e:bf:
63:ee:8c:0a:bd:03:d3:23:ef:44:26:93:bb:1e:87:8f:18:41:
91:31:45:10:5f:fa:00:ee:a4:12:5a:6f:6c:4b:aa:3d:32:2f:
19:9b:c4:f0:63:51:18:67:63:cf:23:35:12:a3:46:95:58:9d:
98:e9:60:b1:25:e5:d7:1e:61:e9:3b:5f:3a:86:2f:be:1f:8b:
2b:fc:ae:a4:26:eb:ad:66:61:0c:d9:78:ee:7b:93:cc:14:d8:
26:a0:5c:58:f9:a4:4b:da:43:fb:82:26:48:40:8a:70:5b:f2:
c7:f6:59:82:6d:f0:33:d5:d5:88:c8:dd:40:96:61:7e:5f:aa:
ff:1d:da:05:8a:28:70:df:11:3e:c7:ad:81:6b:db:5b:03:5b:
1e:7b:91:e1:f6:36:95:e0:c4:b5:72:9f:fa:86:c2:2d:4b:bf:
4d:f1:c2:1a:c4:0f:5b:0f:cf:db:1c:e9:a3:8a:b0:98:bd:4c:
ae:07:2e:fb:18:db:cc:87:98:81:c8:f8:17:e0:11:8c:7c:9e:
81:cd:d6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:05 2026 by rpki-client