Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: BV0WVTxHzXK/D9ConaNm34vF43uZOPXGYg7zCDH24Oo=
Subject key identifier: 56:D9:66:DA:82:4C:08:29:BD:59:75:CD:6A:EF:F2:DF:9C:B1:6D:CB
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 019D262860545D6904948B9D91C723E2F7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 18:01:13 +0000
Manifest this update: Wed 25 Mar 2026 18:01:13 +0000
Manifest next update: Thu 26 Mar 2026 18:01:13 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa (hash: w9lR4ON+b59p837ru2OLVhKsOC/JMVjvCSI6iRqeFUs=)
3: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: DwG4BUw3G6zshmS3gv93mVKKwkJO4P1LNkjqleOluM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:60:54:5d:69:04:94:8b:9d:91:c7:23:e2:f7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Mar 25 18:01:13 2026 GMT
Not After : Mar 26 18:01:13 2026 GMT
Subject: CN=56d966da824c0829bd5975cd6aeff2df9cb16dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:5a:89:68:16:35:9d:f3:7e:b0:35:17:0e:
40:2d:91:91:47:a7:cc:79:a5:2d:6c:ff:cb:e6:5e:
21:57:f3:2d:01:83:b8:f9:1d:74:07:25:76:35:df:
f5:d9:ce:fd:bf:48:c2:83:da:8d:28:9f:12:74:e3:
7b:f8:94:57:cc:3d:7d:00:c1:bc:b7:bf:66:33:ca:
22:fe:c0:8d:df:c7:fb:e9:2b:17:57:9a:bf:43:f9:
cb:8e:89:79:62:9f:15:0a:15:e4:af:68:3e:94:e2:
6a:85:ee:c6:bf:37:43:b3:17:90:81:9b:04:9a:e6:
0e:ea:65:23:86:ff:1c:18:42:5b:15:8f:69:1a:1e:
8f:a4:81:1a:1d:04:d4:40:8f:56:78:75:e5:c5:59:
6a:ff:0d:8e:2a:b1:ea:d8:74:5e:a7:02:41:3d:0c:
db:bb:2a:75:74:aa:88:7a:ef:23:cf:a8:50:14:a3:
df:88:95:81:34:82:89:fb:c0:c0:9c:bd:a3:e6:f0:
b7:0d:18:10:29:fe:21:4d:77:4f:6b:8f:da:0a:63:
51:13:5f:b5:58:85:dd:e1:dd:66:62:7c:05:e5:1d:
b5:dd:ea:b1:b2:60:d9:97:83:3c:99:ef:56:dc:6b:
85:1e:48:c0:7a:7d:39:b7:ba:0b:d1:95:52:9d:e9:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D9:66:DA:82:4C:08:29:BD:59:75:CD:6A:EF:F2:DF:9C:B1:6D:CB
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e8:6a:5f:48:f1:ab:c1:cd:25:a7:bf:33:20:3c:91:f1:a7:
3e:5e:22:8c:ce:70:56:38:fc:53:0a:a8:16:c9:51:a9:43:2d:
d3:2e:e6:96:b1:e9:da:de:e2:f0:f4:66:f8:6e:d2:84:20:5b:
ba:85:43:7c:84:97:7a:86:79:8b:fe:84:2c:af:7c:36:65:2a:
07:8e:d4:38:a9:c8:79:65:74:a4:28:b1:3a:91:60:1a:58:5d:
94:97:37:05:c8:cc:02:37:d6:31:7d:31:79:19:cb:66:93:77:
e8:20:5d:38:3c:9c:6b:78:16:59:7b:0b:f3:d0:f5:2b:e6:29:
68:78:cf:1f:0e:20:2c:f3:c5:fe:74:8d:5e:65:6f:55:f5:6d:
39:9f:16:89:8f:6e:37:2c:b2:c0:bd:5d:8d:f0:cc:80:64:ad:
22:ed:0e:53:b2:35:74:c7:fa:f8:bd:ce:e1:47:e4:dc:46:ca:
f3:4e:98:5f:44:96:09:4e:bf:23:ad:3c:02:fe:a3:bf:a5:4d:
4e:71:ac:18:af:9d:2e:ce:3e:ae:3f:f5:35:0a:c6:6e:68:83:
a8:6c:47:64:3b:4b:b2:3d:3a:bd:d1:3e:87:bc:44:49:a8:83:
27:2d:3e:62:19:ec:b0:fc:a7:16:b1:ac:07:a6:42:92:b9:fc:
1b:14:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:36:57 2026 by rpki-client