Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: oOSOmn4pIwdSH4X57/pjMC37btdMmzJTDpvsq/kWFnE=
Subject key identifier: E5:49:37:67:6E:BF:9B:2D:96:99:AD:19:FD:22:70:BD:3B:AE:9F:29
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 01A0E2872DD5ECCD074AA0E3CCCE1F1B5AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0EC1
Signing time: Sun 27 Sep 2026 11:01:44 +0000
Manifest this update: Sun 27 Sep 2026 11:01:44 +0000
Manifest next update: Mon 28 Sep 2026 11:01:44 +0000
Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: /2cZh00XXV6SLceRnuMCZLfft3vRJivs5vgAlo7VUV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 11:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:87:2d:d5:ec:cd:07:4a:a0:e3:cc:ce:1f:1b:5a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Sep 27 11:01:44 2026 GMT
Not After : Sep 28 11:01:44 2026 GMT
Subject: CN=e54937676ebf9b2d9699ad19fd2270bd3bae9f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:52:3b:d2:ae:c8:15:81:0f:35:fb:e9:3b:
be:cd:8f:67:ab:f5:6b:bb:30:74:92:48:e1:67:6b:
82:01:a6:0c:a5:0c:5b:0f:f1:d2:9f:6a:fe:e2:94:
12:fd:ff:24:27:6d:c7:9f:a4:d0:b4:38:9a:90:8f:
b5:4d:9c:40:e5:e8:0c:11:00:2c:b0:48:26:69:ee:
00:52:14:eb:0f:6b:3e:e2:25:a3:18:72:c7:4a:1c:
2a:60:ae:6f:a8:86:7c:49:a5:ec:a4:19:62:aa:cb:
cf:97:91:29:6e:34:2f:b4:9f:ef:b4:bb:89:05:7a:
e9:9c:05:7a:58:99:ab:ac:df:4a:36:bd:67:66:97:
32:82:d4:1c:c6:1f:95:09:44:4f:b7:07:07:24:0a:
59:73:49:4a:84:c5:b3:39:5a:f7:49:66:ed:17:ae:
e9:b5:f5:32:0e:cf:cc:f7:9d:96:63:5d:59:68:90:
e8:26:ea:b0:f7:57:e5:38:ae:8e:e1:81:fa:c9:10:
c2:88:cf:8a:6e:ad:eb:d5:4a:53:72:de:93:05:4e:
3c:90:0a:59:b8:eb:ae:56:e0:6f:b8:17:57:62:86:
fa:53:98:c3:d7:24:67:c6:96:2b:d6:e0:ff:f1:28:
8d:cb:12:4b:46:96:c6:a4:5d:89:e2:b3:4e:11:78:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:49:37:67:6E:BF:9B:2D:96:99:AD:19:FD:22:70:BD:3B:AE:9F:29
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1b:92:9c:91:f2:99:8b:19:43:85:3d:59:14:a5:99:7e:58:
00:81:7c:3d:6e:eb:ef:7d:20:0b:bf:8d:27:bd:6c:27:5a:0f:
b1:de:44:4f:18:46:07:f3:54:20:b4:23:b1:59:0f:75:c1:05:
20:05:34:0d:ac:2f:23:52:86:a5:aa:51:3b:7c:14:64:19:ff:
9e:48:e9:15:7f:32:8e:5d:ea:01:a2:c8:02:03:e3:d4:d5:fc:
47:29:97:ea:d1:b1:fe:bd:ec:45:e4:ae:83:b1:2b:70:ae:22:
8d:e2:9d:23:5a:59:9e:05:52:1e:49:39:e4:56:8b:f2:16:6e:
0d:37:05:b8:d4:9d:45:85:e2:60:f9:43:ce:c3:e0:da:cb:a6:
dd:87:21:21:97:d0:0d:29:88:b1:fa:bf:3a:62:06:83:a5:d6:
bd:f5:6f:2b:aa:95:2a:92:8b:48:db:64:a2:5b:62:40:d0:1f:
36:aa:15:c3:8e:f0:cd:fc:4a:17:6d:4b:1c:6f:c7:cc:da:b5:
91:fe:ed:91:5c:82:0f:21:99:36:9b:f2:a9:c7:73:58:2c:9a:
79:01:4a:2b:b0:84:ec:b7:cf:6e:29:1a:63:f9:97:0b:a9:26:
83:1d:f5:f6:98:88:fd:86:b4:30:18:69:a8:49:14:5e:b7:99:
31:f5:93:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:33:37 2026 by rpki-client