Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: RpW+pbNvFTD28DzLwhSsoacwHBgc1cPvZw5JoDQZduA=
Subject key identifier: C9:21:45:E5:F5:7D:E6:B6:27:A2:83:2D:C2:98:5F:C6:18:CA:82:DB
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 019F8E34CADE5BA6F8A8A6424F2E10BADD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 09:00:51 +0000
Manifest this update: Thu 23 Jul 2026 09:00:51 +0000
Manifest next update: Fri 24 Jul 2026 09:00:51 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa (hash: w9lR4ON+b59p837ru2OLVhKsOC/JMVjvCSI6iRqeFUs=)
3: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: gKXXni6A244hqrj90hP/xxXeisDYzSLXTQparAvhgRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:ca:de:5b:a6:f8:a8:a6:42:4f:2e:10:ba:dd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Jul 23 09:00:51 2026 GMT
Not After : Jul 24 09:00:51 2026 GMT
Subject: CN=c92145e5f57de6b627a2832dc2985fc618ca82db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:9d:14:fa:04:0e:cf:92:c2:10:47:ed:be:
98:51:97:53:01:ad:52:b9:61:1c:6e:96:db:4b:36:
82:9a:83:41:95:86:a2:9b:fb:51:9d:64:77:70:ab:
16:c4:b0:a5:cf:c4:ff:8a:03:3f:38:a3:cd:ea:a8:
b5:2a:68:76:6d:4d:21:7d:75:0b:9c:fa:42:f4:d6:
7a:78:ef:a2:41:af:b3:7d:da:6a:1d:a0:75:c8:36:
45:83:f8:30:60:4e:78:54:86:a1:ea:aa:cb:7f:a1:
92:db:bc:12:92:5c:b8:5e:0d:3b:5b:63:a8:95:6c:
7b:aa:96:93:8b:4b:c3:c6:73:ef:7e:44:43:e7:0f:
da:56:ed:64:b8:92:bc:ac:93:e3:0b:a7:f5:91:c9:
6d:cf:52:9b:3c:17:40:56:9a:2f:60:d0:09:24:de:
5a:85:65:16:64:0e:3c:9c:94:38:96:91:69:cd:07:
ae:67:86:49:63:2c:16:1b:25:02:92:ff:e2:9f:3c:
fa:5e:22:d3:33:ba:4c:b1:f9:58:21:09:09:65:a1:
dc:f1:08:1d:48:ad:9d:20:24:7f:0a:ee:a9:12:aa:
89:88:b6:2b:b0:74:c4:4b:8f:eb:50:4b:78:f3:3c:
81:ce:8f:d5:34:a8:b3:93:af:51:8d:ff:c0:8d:18:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:45:E5:F5:7D:E6:B6:27:A2:83:2D:C2:98:5F:C6:18:CA:82:DB
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:69:4f:de:4b:fe:6d:58:ff:41:ea:52:0d:c3:6e:f3:20:16:
06:41:cc:78:c6:cd:ed:1f:3e:03:61:b9:eb:fd:3a:d6:50:c7:
a4:b4:25:94:3b:3e:61:21:31:db:74:9d:cd:4d:d4:85:9d:56:
70:c0:d1:45:3d:6f:34:f5:52:6d:f3:cf:23:7c:e8:33:2f:f3:
62:fb:b1:02:06:ed:15:7d:1c:f9:d2:fb:21:9a:56:70:12:ed:
4f:ac:a8:26:45:03:60:d7:59:8c:97:b5:65:ac:8b:e5:58:00:
28:37:0d:f4:15:be:12:3e:27:8f:cd:98:f4:44:9c:b5:7d:40:
c9:df:21:1c:df:0b:f0:9b:ae:74:a3:9c:3f:38:0c:5f:13:d5:
42:a5:5a:17:ce:3d:8f:b3:84:aa:a5:49:04:23:f4:b9:e2:0c:
1e:0c:4d:a2:2e:86:52:6c:fe:8a:0d:ca:58:98:c7:d6:54:5b:
95:b3:62:03:a9:fb:b1:aa:c2:77:cd:3a:3a:ed:87:7f:0f:7f:
5e:32:30:af:c2:50:d3:0f:82:89:bc:a6:94:41:6b:b7:8c:8b:
6e:fd:86:a7:08:24:9e:e7:b9:b7:6b:77:26:b5:b2:b0:a3:54:
dd:d7:cb:d7:17:2f:cb:4c:01:03:5c:9b:9d:68:6e:66:fb:a5:
62:32:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:58 2026 by rpki-client