Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: QKBu0125HBDJ9F0isT7FZ2Ctpbc8DtrOk9ZdtRYzclU=
Subject key identifier: 59:A9:03:89:14:6D:A2:52:39:98:3F:CE:CC:AD:27:47:EE:6C:0E:DC
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019FA786296200A48B9E07D101140AC1DC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 16B6
Signing time: Tue 28 Jul 2026 07:00:15 +0000
Manifest this update: Tue 28 Jul 2026 07:00:15 +0000
Manifest next update: Wed 29 Jul 2026 07:00:15 +0000
Files and hashes: 1: 2h_8VJcabHSDMCKwNPF09jw_Hf8.roa (hash: c7tBoia56lSI7zrOJCToiDaTHfoOdjooQhw4RuRBw4Y=)
2: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (hash: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao=)
3: QZlonf94vrWyMPOp87JAm_NWNqo.roa (hash: w6YhRh8acabp1x77SswHpUR6bqnL4nDuqC2pTtKcfFs=)
4: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (hash: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI=)
5: SpN8Ae02yCS4OsvaV0LVnRQu4n8.roa (hash: R6h5Q2EcPAyb3qsGG8N6McT5J+RVk0PixkSdyl6z20Y=)
6: esU4fsvjE_GKeZBwL9xIr9vckzE.roa (hash: iqFT9wVD2iFSuqGQNBizWBYxsH/4xrNP/ECuVx8b/i4=)
7: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (hash: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo=)
8: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: WbXH3O2Xymu/0V5UbPkQ6qCgbUMhXu1KIkyfy6sq2qM=)
9: xKxA9QME2V8f2RH3M46PbYUw4oY.roa (hash: thsfcGsSl3d+8qrEjeuctIXvk8eBzxGLHCJIT/WWbto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:29:62:00:a4:8b:9e:07:d1:01:14:0a:c1:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jul 28 07:00:15 2026 GMT
Not After : Jul 29 07:00:15 2026 GMT
Subject: CN=59a90389146da25239983fceccad2747ee6c0edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:91:ba:30:ad:24:bb:e7:80:e3:8c:95:8b:
4d:13:41:77:92:5a:b2:0d:5f:90:dd:41:c6:d0:6d:
93:24:7d:3a:9a:e6:30:13:0c:60:53:35:19:29:c5:
5e:59:bb:00:ec:bd:42:9c:03:13:91:fa:e8:4c:c4:
55:9b:21:f0:29:3f:8b:47:9a:c8:70:a3:a1:f7:ee:
15:cd:69:02:ca:27:47:4a:81:ab:b9:17:37:f3:09:
5a:ee:6a:b0:76:9e:35:74:41:d7:a1:3b:23:4c:2a:
01:28:49:ce:07:8f:7d:ef:28:43:ec:4c:f6:1c:1d:
13:92:c0:20:cf:97:34:e7:fc:c0:70:68:8f:c4:3b:
4b:1c:3b:d1:28:e1:be:02:5a:23:82:1b:cd:e0:29:
0f:b4:04:78:ca:41:ab:ef:fa:61:43:d6:7b:f0:e8:
32:c5:31:43:22:6c:ab:c4:c6:cb:eb:07:0d:e2:6b:
39:ff:90:05:8e:1d:71:0b:be:a2:97:c5:c8:7f:73:
8f:33:32:7f:a4:a9:c2:75:cd:67:f6:1b:49:2c:c0:
70:91:de:9b:17:3a:60:81:b4:a3:3d:5c:17:c3:73:
48:02:50:7c:59:2f:ad:78:5a:e7:52:73:27:45:23:
39:39:54:e9:ce:e8:ac:79:d1:45:34:ab:39:85:ca:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:03:89:14:6D:A2:52:39:98:3F:CE:CC:AD:27:47:EE:6C:0E:DC
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e8:f0:5e:d9:16:51:0b:b8:c3:bb:5e:f1:5f:5f:71:2f:c7:
46:53:2b:31:d4:8e:5a:2b:5b:2f:e2:55:34:08:46:27:52:d8:
67:b3:72:5d:19:30:36:6a:42:40:0f:fc:66:c8:93:0a:c0:36:
a8:08:f7:e3:b5:5a:7f:55:d1:a9:ed:79:1f:73:f0:1b:0e:16:
e9:68:be:e1:fd:37:e4:61:d7:2b:fd:49:60:6b:c0:67:16:bd:
cb:a4:f1:f2:72:e0:26:5f:e2:2b:d9:ec:79:02:18:ee:36:56:
20:75:1a:67:ac:c9:0a:c1:de:8e:24:c7:36:51:51:05:37:81:
71:d1:38:52:0d:3b:68:b7:11:78:0d:96:0b:20:12:c4:9d:fc:
6a:8f:a7:06:7a:50:b9:af:55:e9:48:dc:a2:58:aa:24:59:5b:
44:66:a2:dc:04:72:aa:39:c5:d2:81:0e:57:96:ca:ee:a3:aa:
0f:d0:75:fc:66:f1:3f:04:7a:8f:a6:2f:39:6b:c6:9a:f0:f4:
4d:39:31:d7:78:17:ba:d5:d6:1c:92:65:d1:b0:56:33:b1:ef:
30:05:01:99:ee:f3:0e:a3:62:29:c1:c5:f4:dc:5f:65:a3:aa:
d8:08:06:78:79:d4:29:5d:f6:cc:2d:bc:07:1a:00:c3:f4:97:
c1:dc:1a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:07:00 2026 by rpki-client