Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: ncVPXZAxhHhw/vcVC1db5v2fcoW9WjunhWtIDAehZdE=
Subject key identifier: 84:82:EA:1E:04:59:66:EC:EB:6F:53:63:66:5B:37:52:13:7D:95:10
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 019E1D596B76BD00A1ACFC790CFBFDC6CA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 18:00:59 +0000
Manifest this update: Tue 12 May 2026 18:00:59 +0000
Manifest next update: Wed 13 May 2026 18:00:59 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa (hash: w9lR4ON+b59p837ru2OLVhKsOC/JMVjvCSI6iRqeFUs=)
3: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: 7RpU3/FUmPRXDk2I7NdnZ1QL08C7nurhjg7cFkxdTy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:6b:76:bd:00:a1:ac:fc:79:0c:fb:fd:c6:ca:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: May 12 18:00:59 2026 GMT
Not After : May 13 18:00:59 2026 GMT
Subject: CN=8482ea1e045966eceb6f5363665b3752137d9510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:40:f2:7f:d7:44:6e:74:a0:78:2b:0b:7a:
71:af:79:3c:03:15:ce:f1:93:e7:47:35:9e:ea:12:
6d:0e:99:9f:d6:ee:15:4c:ee:e5:24:e8:6a:2d:8d:
87:b3:9f:d8:8f:07:36:c1:70:bd:b5:24:a7:85:79:
2d:10:04:22:a1:a2:f3:42:fc:02:75:1d:e5:f9:e0:
8f:c4:92:a7:7e:4b:8c:8d:4b:22:24:50:bf:ca:5b:
13:02:ad:d6:a5:fa:40:25:ed:91:6d:0b:dc:f1:a0:
2e:a4:84:0b:24:b5:7d:ae:24:84:0d:fb:02:69:35:
ba:ec:38:9d:86:a1:bb:75:5e:43:13:f8:f7:67:92:
35:31:61:12:7f:fc:82:a6:d4:ef:54:0d:ef:62:95:
ce:c6:66:82:7d:a4:01:d1:02:a3:13:5d:37:f3:82:
5f:e6:11:fc:e4:b0:fe:38:66:79:70:a0:d3:89:79:
04:84:6e:53:fe:37:28:f7:d7:75:83:87:2d:04:2a:
92:31:7c:8e:39:7f:2d:89:b6:80:f0:56:8f:be:63:
d8:42:de:94:08:5c:1b:1f:b3:ee:c5:95:1d:60:ad:
30:f4:1e:1c:e4:2a:e8:35:0b:c6:75:d1:7f:c6:19:
de:c2:19:5c:00:af:df:3a:58:7f:4a:5e:77:4d:6d:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:82:EA:1E:04:59:66:EC:EB:6F:53:63:66:5B:37:52:13:7D:95:10
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:97:40:2f:1c:2b:64:bd:a8:99:d3:f3:f6:de:9c:e3:63:83:
5f:19:13:12:1d:b5:f4:1a:79:81:6f:fa:66:73:ac:a8:af:26:
6c:9f:9c:bd:a1:49:3c:2d:b0:5a:39:07:5a:6b:2f:f9:9e:bb:
c8:45:96:06:24:a5:a4:a0:fa:dd:5d:70:21:30:18:b6:4c:b5:
ba:4f:ac:74:68:b0:4a:88:ac:9c:85:d7:0e:11:d6:c8:30:4f:
81:e4:00:6c:8d:d2:cb:5e:b7:70:37:dd:66:a3:72:a1:80:72:
d0:71:04:e9:2b:df:58:e1:90:70:e3:3f:9f:de:2d:a9:cd:57:
34:8d:0e:92:d0:05:0a:0c:3b:10:5b:27:44:8b:02:9a:19:9a:
9c:5b:b2:3e:de:c6:f6:8e:20:96:24:e2:2b:a9:b9:5a:2d:a4:
69:3d:e5:b8:be:a6:ae:72:eb:f2:c5:fc:63:bc:b8:41:f0:44:
d4:41:a6:36:bb:c8:23:92:ca:90:d8:2a:3c:83:11:cf:30:c4:
51:5d:6d:9b:b2:53:ed:1c:89:dd:5d:93:3f:1c:d3:d4:81:c3:
66:76:40:90:d1:d9:3d:e8:4a:54:f4:4f:f9:72:3a:63:25:31:
a2:42:ba:bb:a4:2e:98:87:41:0e:ba:c3:ea:29:c7:28:ff:1e:
62:48:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:16 2026 by rpki-client