Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: 3O5b7IdSxoXmrpa0ldlOdKr+jRIeIX2QfdM20WuXKq4=
Subject key identifier: 0E:02:F8:26:6C:05:D1:3F:2A:FF:55:01:46:5A:10:95:F5:F4:5F:30
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 01A0D3B8F030166D9DC6B95650BCF6278B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 14:01:47 +0000
Manifest this update: Thu 24 Sep 2026 14:01:47 +0000
Manifest next update: Fri 25 Sep 2026 14:01:47 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: By7I8jjbSqMahxdD4BS2SnbDr7c.asa (hash: QbgmQZT5PQ6E0YbuSg3smNh7SLEoa1rVnzwDnpMWc80=)
3: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: tbDBV47o7id18A06OlQD8LB2QnJA7kF+u3J8ihThTZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:f0:30:16:6d:9d:c6:b9:56:50:bc:f6:27:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Sep 24 14:01:47 2026 GMT
Not After : Sep 25 14:01:47 2026 GMT
Subject: CN=0e02f8266c05d13f2aff5501465a1095f5f45f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:ec:23:08:b0:07:3d:ca:74:4d:6f:dc:65:
61:6c:98:2e:ec:a9:f6:0b:2e:be:7e:f2:50:d8:a7:
5e:5c:aa:61:03:a1:5d:76:03:44:0c:d2:93:83:78:
48:0f:3b:0e:1c:30:10:5f:5c:4c:9c:d1:25:a5:48:
4c:50:41:88:30:c4:ca:61:d8:6e:11:d2:f8:5e:89:
d8:82:f7:34:e2:f5:8a:31:32:7b:06:35:3a:66:ba:
1b:f5:3c:6b:38:4a:97:d6:48:11:33:3b:d6:56:a0:
75:59:1d:35:4e:c5:7f:5a:3f:f4:70:a4:e7:b1:c8:
a0:52:13:bd:ec:91:16:0e:f1:31:63:07:9e:05:1b:
8f:04:d8:47:f9:78:ff:dc:2a:4d:87:ff:93:58:c9:
e6:47:de:81:03:11:0c:c3:c9:7f:8c:56:f6:a5:d8:
cb:ad:4c:3b:95:ae:03:54:cd:c3:01:01:65:77:78:
2c:dc:11:8e:59:64:8e:70:07:76:b0:9e:f2:c0:85:
33:69:4e:c7:ba:a9:63:0a:6e:71:21:66:c8:a7:90:
a3:c8:45:91:06:9e:aa:19:cc:8b:a3:f6:fb:4f:9c:
50:bc:25:2a:ab:43:1d:da:dd:b6:34:96:8e:37:43:
fe:d2:15:37:97:3e:a5:71:32:ef:11:cd:35:0b:07:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:F8:26:6C:05:D1:3F:2A:FF:55:01:46:5A:10:95:F5:F4:5F:30
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:60:5c:f9:fe:f2:f7:10:9b:9c:04:71:b2:4a:f3:e6:0e:96:
82:42:b9:cb:2d:0b:7b:de:16:9a:df:c0:f6:65:2d:43:d0:56:
24:66:56:ef:f7:53:73:c1:1e:8f:44:93:e0:51:bd:13:09:be:
9e:ef:d3:92:bc:02:50:ba:d4:a8:36:f2:cc:e5:d8:f0:fc:97:
0a:33:c4:1f:95:ac:d2:b3:ed:89:ee:84:1a:87:82:01:e0:76:
0c:f2:99:67:87:f0:17:be:9c:91:b8:e5:ec:7c:1b:f5:3f:17:
bb:7d:bb:98:44:75:42:6d:83:35:68:ba:49:c1:f0:e1:07:82:
dd:17:55:25:33:d8:4e:cb:32:71:2c:14:43:7f:89:3e:fe:d6:
6e:4a:ea:33:c5:3c:9e:11:53:9e:3d:0f:21:9b:9a:34:dc:45:
b3:78:1f:77:b8:99:73:fa:ee:c6:be:83:4f:09:3a:55:f3:1f:
47:4c:5f:0a:8d:72:99:da:f1:82:bc:58:8d:60:60:94:75:10:
70:a0:a2:39:50:bb:4a:d4:a6:8e:0f:b4:69:6c:fb:c9:6f:51:
9c:d2:a8:87:17:ca:ab:4f:e5:1d:16:40:04:a5:1d:80:e5:09:
6c:29:8a:3e:5c:db:8f:41:4f:3d:a9:6f:f5:5d:47:29:27:4e:
f9:65:57:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuPAwFm2dxrlWULz2J4s7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZDQzYzI2NDY4ODE5YzA3YjE5MjUxMTVmZTQ5MjFmODQy
MDNkMTYwHhcNMjYwOTI0MTQwMTQ3WhcNMjYwOTI1MTQwMTQ3WjAzMTEwLwYDVQQD
EygwZTAyZjgyNjZjMDVkMTNmMmFmZjU1MDE0NjVhMTA5NWY1ZjQ1ZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFnsIwiwBz3KdE1v3GVhbJgu7Kn2
Cy6+fvJQ2KdeXKphA6FddgNEDNKTg3hIDzsOHDAQX1xMnNElpUhMUEGIMMTKYdhu
EdL4XonYgvc04vWKMTJ7BjU6Zrob9TxrOEqX1kgRMzvWVqB1WR01TsV/Wj/0cKTn
scigUhO97JEWDvExYweeBRuPBNhH+Xj/3CpNh/+TWMnmR96BAxEMw8l/jFb2pdjL
rUw7la4DVM3DAQFld3gs3BGOWWSOcAd2sJ7ywIUzaU7HuqljCm5xIWbIp5CjyEWR
Bp6qGcyLo/b7T5xQvCUqq0Md2t22NJaON0P+0hU3lz6lcTLvEc01CwcGswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4C+CZsBdE/Kv9VAUZaEJX19F8wMB8GA1UdIwQY
MBaAFDnUPCZGiBnAexklEV/kkh+EID0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmZjMDEtYTU4Zi00ZjcwLWE0MDQt
YWJmMGVhMDdlZmFmLzEvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZmZjMDEtYTU4Zi00ZjcwLWE0MDQtYWJmMGVhMDdlZmFm
LzEvT2RROEprYUlHY0I3R1NVUlgtU1NINFFnUFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGBc+f7y
9xCbnARxskrz5g6WgkK5yy0Le94Wmt/A9mUtQ9BWJGZW7/dTc8Eej0ST4FG9Ewm+
nu/TkrwCULrUqDbyzOXY8PyXCjPEH5Ws0rPtie6EGoeCAeB2DPKZZ4fwF76ckbjl
7Hwb9T8Xu327mER1Qm2DNWi6ScHw4QeC3RdVJTPYTssycSwUQ3+JPv7WbkrqM8U8
nhFTnj0PIZuaNNxFs3gfd7iZc/ruxr6DTwk6VfMfR0xfCo1ymdrxgrxYjWBglHUQ
cKCiOVC7StSmjg+0aWz7yW9RnNKohxfKq0/lHRZABKUdgOUJbCmKPlzbj0FPPalv
9V1HKSdO+WVXYg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:55:27 2026 by rpki-client