Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: fmACeu670RbinVfqYUXqD+Qq+b1vV2rnGGieNAG5ASA=
Subject key identifier: 5F:03:2B:51:DD:7D:6C:B5:DB:0A:B2:87:E3:FB:65:03:9A:9B:AA:54
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 01A0C55787031A05137F4E9D8C987D3E6261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 174A
Signing time: Mon 21 Sep 2026 19:00:42 +0000
Manifest this update: Mon 21 Sep 2026 19:00:42 +0000
Manifest next update: Tue 22 Sep 2026 19:00:42 +0000
Files and hashes: 1: 2h_8VJcabHSDMCKwNPF09jw_Hf8.roa (hash: c7tBoia56lSI7zrOJCToiDaTHfoOdjooQhw4RuRBw4Y=)
2: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (hash: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao=)
3: QZlonf94vrWyMPOp87JAm_NWNqo.roa (hash: w6YhRh8acabp1x77SswHpUR6bqnL4nDuqC2pTtKcfFs=)
4: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (hash: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI=)
5: SpN8Ae02yCS4OsvaV0LVnRQu4n8.roa (hash: R6h5Q2EcPAyb3qsGG8N6McT5J+RVk0PixkSdyl6z20Y=)
6: esU4fsvjE_GKeZBwL9xIr9vckzE.roa (hash: iqFT9wVD2iFSuqGQNBizWBYxsH/4xrNP/ECuVx8b/i4=)
7: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (hash: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo=)
8: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: kdsnmB+aI6mVRygqe9FN3Ln552ngVXomxq/0fjyqBuE=)
9: xKxA9QME2V8f2RH3M46PbYUw4oY.roa (hash: thsfcGsSl3d+8qrEjeuctIXvk8eBzxGLHCJIT/WWbto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:87:03:1a:05:13:7f:4e:9d:8c:98:7d:3e:62:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Sep 21 19:00:42 2026 GMT
Not After : Sep 22 19:00:42 2026 GMT
Subject: CN=5f032b51dd7d6cb5db0ab287e3fb65039a9baa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:38:0b:49:22:9a:c6:7d:69:25:fd:e7:d8:
90:46:a3:ef:3f:af:40:df:fa:bb:3a:7d:ae:c4:68:
8a:6a:24:15:57:4d:9b:53:78:8e:a2:e0:c7:d0:84:
5f:f6:91:68:6f:ba:17:bc:8d:52:80:4c:8c:4f:bf:
6c:17:11:4b:64:68:b2:ca:56:ad:9d:7d:4c:c7:b6:
b6:33:a1:f0:92:d6:68:00:88:d4:95:c8:51:4a:40:
74:15:d5:2f:a3:79:26:04:91:4d:77:94:bb:03:dc:
d3:61:d3:36:b0:48:be:44:5c:0f:83:28:1e:e5:74:
14:38:62:40:c2:0c:b1:b5:fe:86:a4:6d:0c:88:00:
cc:46:70:8e:39:5c:a5:2d:cd:15:54:d9:19:c2:45:
a1:d6:61:68:86:67:ff:ba:e4:b6:49:e3:f6:f2:d3:
27:34:26:08:30:b4:31:f2:a4:06:12:c4:c9:fe:0e:
3f:c8:6f:35:41:6d:b7:07:86:b5:f8:f3:9d:3d:bd:
78:2c:1c:d6:ad:83:9c:ad:af:f8:61:52:d0:24:cb:
de:53:7f:bf:e0:9e:ee:2e:83:9b:d2:8e:0e:aa:de:
d9:e2:03:04:08:9c:45:41:a5:fd:8a:d6:b8:b5:8e:
be:ec:39:ec:03:04:f3:f0:be:1e:cc:da:78:df:51:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:03:2B:51:DD:7D:6C:B5:DB:0A:B2:87:E3:FB:65:03:9A:9B:AA:54
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3f:33:01:51:bb:19:18:9a:54:d7:e6:81:fd:05:bf:aa:7c:
40:81:68:c8:05:a6:83:46:1f:20:0b:01:32:7a:bd:b9:2c:9a:
7d:95:d0:ce:9b:a7:a9:ba:cc:1b:13:a6:7e:00:d9:48:c6:a7:
5b:8e:9e:68:e8:f3:9c:f1:12:9d:f4:b5:c1:1f:fb:78:70:03:
d0:e1:25:94:3c:58:0f:79:ad:d7:ce:a5:16:ae:97:55:e0:7d:
aa:5c:12:14:9b:fa:32:46:8f:34:ec:0e:4a:4b:88:53:6e:f8:
d3:3c:0f:fb:2f:9a:42:b9:f4:e3:3a:d4:b2:93:b0:0e:47:fe:
34:98:e6:de:ce:eb:eb:81:b8:a6:59:c4:71:74:df:e5:b3:6c:
3b:82:80:3c:50:f8:48:31:d8:1a:7e:9d:21:98:45:a8:16:c8:
f6:46:df:b1:85:91:b2:92:ad:34:d9:91:2a:51:e6:ad:e8:c6:
e4:da:19:2a:d8:4e:b5:22:90:44:a4:79:74:fe:ff:a6:75:1f:
d1:70:73:46:97:e7:49:13:6c:87:5c:67:0d:2e:f1:95:32:cf:
99:73:ec:f0:a0:f1:e3:e3:6e:ba:41:1d:67:de:13:96:46:c5:
39:8a:f1:c4:fb:7b:30:08:17:2e:ad:63:6b:e5:4f:7e:33:27:
80:fc:18:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV4cDGgUTf06djJh9PmJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5
NmM1M2EwHhcNMjYwOTIxMTkwMDQyWhcNMjYwOTIyMTkwMDQyWjAzMTEwLwYDVQQD
Eyg1ZjAzMmI1MWRkN2Q2Y2I1ZGIwYWIyODdlM2ZiNjUwMzlhOWJhYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozI4C0kimsZ9aSX959iQRqPvP69A
3/q7On2uxGiKaiQVV02bU3iOouDH0IRf9pFob7oXvI1SgEyMT79sFxFLZGiyylat
nX1Mx7a2M6HwktZoAIjUlchRSkB0FdUvo3kmBJFNd5S7A9zTYdM2sEi+RFwPgyge
5XQUOGJAwgyxtf6GpG0MiADMRnCOOVylLc0VVNkZwkWh1mFohmf/uuS2SeP28tMn
NCYIMLQx8qQGEsTJ/g4/yG81QW23B4a1+POdPb14LBzWrYOcra/4YVLQJMveU3+/
4J7uLoOb0o4Oqt7Z4gMECJxFQaX9ita4tY6+7DnsAwTz8L4ezNp431EJKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8DK1HdfWy12wqyh+P7ZQOam6pUMB8GA1UdIwQY
MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt
NzA2MTM1NmJlZjFiLzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi
LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAij8zAVG7
GRiaVNfmgf0Fv6p8QIFoyAWmg0YfIAsBMnq9uSyafZXQzpunqbrMGxOmfgDZSMan
W46eaOjznPESnfS1wR/7eHAD0OEllDxYD3mt186lFq6XVeB9qlwSFJv6MkaPNOwO
SkuIU2740zwP+y+aQrn04zrUspOwDkf+NJjm3s7r64G4plnEcXTf5bNsO4KAPFD4
SDHYGn6dIZhFqBbI9kbfsYWRspKtNNmRKlHmrejG5NoZKthOtSKQRKR5dP7/pnUf
0XBzRpfnSRNsh1xnDS7xlTLPmXPs8KDx4+NuukEdZ94TlkbFOYrxxPt7MAgXLq1j
a+VPfjMngPwYgg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:16:52 2026 by rpki-client