Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: FbbW8LpfWuXlFDbPEhfFT57VKSg8gxSTPRKFN4XlPFE=
Subject key identifier: 06:69:45:B8:1E:CF:9A:CF:5D:DB:EF:09:66:B7:98:3B:4E:42:AA:9C
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 019D2884318B527223A27D589258D78BBC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0CD3
Signing time: Thu 26 Mar 2026 05:00:45 +0000
Manifest this update: Thu 26 Mar 2026 05:00:45 +0000
Manifest next update: Fri 27 Mar 2026 05:00:45 +0000
Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: QoGAuaSk6M9tY6xXF4XxYpYPzNRLXHsMzmSBqPbkZWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:31:8b:52:72:23:a2:7d:58:92:58:d7:8b:bc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Mar 26 05:00:45 2026 GMT
Not After : Mar 27 05:00:45 2026 GMT
Subject: CN=066945b81ecf9acf5ddbef0966b7983b4e42aa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:b4:fc:49:13:04:eb:b7:73:61:22:b6:6a:
af:a3:da:48:5f:dc:19:42:fd:8b:3d:ef:05:3f:38:
8f:bd:5d:c9:93:1d:a8:91:e0:2d:d6:6f:d5:ae:e9:
a1:4a:50:74:c2:ca:49:55:cf:22:12:c3:30:5a:0f:
11:a0:3e:54:62:23:b0:40:73:ad:4c:9c:e2:20:b4:
7a:5f:69:be:ec:59:0a:2a:a1:12:99:48:58:72:71:
1d:fd:54:24:22:64:e7:04:d8:96:45:1b:d9:cc:90:
c9:55:7c:c4:22:6f:a2:2c:7d:c5:3b:06:b0:c3:86:
db:df:f1:41:60:05:8a:63:94:12:b1:79:64:1f:28:
6e:a7:86:e2:ac:ec:84:12:71:4a:e9:f4:fd:10:e7:
63:4b:a1:1f:6a:2e:d1:f8:c2:ac:b1:a3:66:62:ab:
df:44:db:d3:83:36:41:3e:5e:d0:44:f2:93:a7:9d:
3d:19:d9:d2:6f:b6:01:50:53:32:8c:1e:77:bf:59:
53:ec:44:f1:50:c0:37:da:95:7f:b8:47:c0:f6:10:
16:90:d1:79:db:2b:13:98:1d:7c:d8:4d:d0:ce:3d:
8b:59:73:c7:f3:ae:b9:23:30:90:d4:f5:5f:20:e1:
0a:3b:03:76:81:a8:cf:62:83:2b:67:8a:90:da:c7:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:69:45:B8:1E:CF:9A:CF:5D:DB:EF:09:66:B7:98:3B:4E:42:AA:9C
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:04:4d:01:b5:7d:e1:5b:74:cf:93:00:61:7d:c7:e0:7c:6f:
d8:bc:61:bf:ce:9c:a1:36:1a:65:f0:a9:83:60:51:4f:c5:47:
4c:bf:b0:43:52:4a:5f:fe:9e:9c:3b:f2:a1:6f:a9:e4:f9:25:
fe:19:d3:b2:25:85:8f:1c:96:ac:35:d9:42:88:3d:01:71:72:
d7:10:34:84:91:2a:7f:20:f9:47:ea:56:64:a9:da:61:f7:9d:
45:f6:bb:c4:03:d9:21:9c:a6:3a:07:ae:31:24:0b:d3:a9:30:
0c:8d:94:29:f5:c6:40:f6:1b:8b:fa:af:26:97:14:de:89:2d:
cd:6f:0e:f3:b1:bf:11:c8:fb:6c:2d:05:b8:53:03:2a:da:1d:
44:87:1a:82:10:9d:f4:35:09:b0:a1:66:6d:18:4a:91:5d:1d:
c7:ba:48:35:d3:c3:c7:8a:f1:af:ed:a4:44:90:31:16:c5:48:
f7:b9:96:7e:92:0c:d3:c9:56:77:73:6c:1e:cd:61:52:45:f0:
d9:3a:57:79:c1:02:bc:31:6b:29:4b:51:3e:12:d9:c5:32:26:
8e:6a:88:0f:4f:04:16:84:46:ac:7a:75:32:59:0e:eb:5e:05:
17:18:36:ee:51:8c:68:f2:e1:94:23:71:35:58:8b:29:18:02:
88:21:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:39 2026 by rpki-client