Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: fdIjpHHr0a/Xo7NUw8uq0/6zmrVSO5QFCkvuovUDYlc=
Subject key identifier: 9F:3B:6C:05:86:D8:A3:22:06:F0:36:28:00:8C:EC:43:2B:20:BF:40
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019D9A3DE157CD24D10469F06888DA202B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 15A6
Signing time: Fri 17 Apr 2026 07:00:39 +0000
Manifest this update: Fri 17 Apr 2026 07:00:39 +0000
Manifest next update: Sat 18 Apr 2026 07:00:39 +0000
Files and hashes: 1: 2h_8VJcabHSDMCKwNPF09jw_Hf8.roa (hash: c7tBoia56lSI7zrOJCToiDaTHfoOdjooQhw4RuRBw4Y=)
2: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (hash: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao=)
3: QZlonf94vrWyMPOp87JAm_NWNqo.roa (hash: w6YhRh8acabp1x77SswHpUR6bqnL4nDuqC2pTtKcfFs=)
4: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (hash: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI=)
5: SpN8Ae02yCS4OsvaV0LVnRQu4n8.roa (hash: R6h5Q2EcPAyb3qsGG8N6McT5J+RVk0PixkSdyl6z20Y=)
6: esU4fsvjE_GKeZBwL9xIr9vckzE.roa (hash: iqFT9wVD2iFSuqGQNBizWBYxsH/4xrNP/ECuVx8b/i4=)
7: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (hash: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo=)
8: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: Mru88whKjRb7R4jeDBqRJ3GEj/tLotgrjgOc8ZXOu1U=)
9: xKxA9QME2V8f2RH3M46PbYUw4oY.roa (hash: thsfcGsSl3d+8qrEjeuctIXvk8eBzxGLHCJIT/WWbto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e1:57:cd:24:d1:04:69:f0:68:88:da:20:2b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Apr 17 07:00:39 2026 GMT
Not After : Apr 18 07:00:39 2026 GMT
Subject: CN=9f3b6c0586d8a32206f03628008cec432b20bf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:57:d5:b9:15:49:10:b7:c8:54:64:4f:4c:fa:
7c:c8:4d:ec:54:b5:bb:78:83:1a:ed:8b:57:ca:dc:
df:f8:95:3c:c2:38:70:0c:02:49:71:38:0c:08:d3:
37:11:3d:be:22:70:bc:51:3d:bc:b6:63:7f:30:0f:
67:69:d1:17:c5:61:95:3b:cd:aa:7b:94:ab:bc:63:
be:e8:9e:a4:5d:10:48:cf:c0:44:30:03:79:91:6d:
c3:7d:13:63:81:a0:f6:76:8a:a5:29:6d:bd:a5:2a:
94:7a:d7:9d:2b:40:b8:e9:5e:68:94:b1:02:f3:0b:
fb:16:67:6a:bd:0b:2a:96:5f:89:33:35:14:85:ef:
3c:cd:27:47:e5:9b:33:bd:09:95:b8:a7:4c:cd:ac:
90:fa:da:0b:d1:70:ad:eb:25:cc:70:78:f8:b4:50:
c8:43:96:24:c9:15:9c:d7:2c:13:fa:85:5b:40:cf:
3e:b8:f6:5a:ad:d0:ca:4f:68:c7:06:65:ec:ae:f9:
27:03:a7:a1:25:ed:85:0f:96:4c:a3:a7:34:02:20:
61:2e:8d:d5:2d:5a:e1:b8:01:6d:fa:2b:44:b5:f8:
d9:3c:53:f7:34:29:f5:bc:f4:f3:e5:cf:e7:4b:29:
fb:a7:89:ca:ea:cb:41:47:94:be:37:41:9d:56:d1:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:6C:05:86:D8:A3:22:06:F0:36:28:00:8C:EC:43:2B:20:BF:40
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:76:f4:52:80:60:81:4b:c4:2f:1c:a0:3e:ac:30:c5:2a:23:
8d:6f:6f:45:78:3a:98:81:47:76:69:69:04:58:70:ba:e3:7a:
f5:6c:b3:bc:73:9c:1f:6a:61:f7:84:a1:3e:91:3e:2b:d5:1b:
0e:bf:09:6e:ce:e3:1e:26:1a:ca:f9:f2:10:bf:bc:4e:fe:b4:
1b:54:6a:b4:5b:e3:96:24:c5:3f:bd:b8:6c:78:81:38:a0:06:
4b:8c:62:67:39:bb:08:f1:f4:1f:71:b0:c8:7c:cc:9d:7e:20:
55:02:2e:1c:d1:a8:96:7f:d7:5e:41:a7:a7:ae:8d:56:01:6a:
de:a4:ee:ff:4b:cd:f1:05:28:2d:4e:ed:4f:c2:8b:7b:83:7e:
9b:46:b6:50:14:57:ea:da:46:7c:01:95:e5:67:cd:ff:c2:22:
44:93:f4:c1:b3:a4:a8:fc:47:ba:86:a5:32:b6:4e:88:84:8c:
2e:92:82:03:fe:61:3e:60:48:b3:e7:a5:5e:65:9a:a7:0a:da:
2e:eb:8d:8d:64:b2:55:45:89:0b:e4:b7:b4:e6:c7:57:94:a6:
eb:ee:2b:98:70:05:a8:3f:fa:50:6f:a7:6b:bf:7c:26:48:1f:
f7:26:93:3e:92:92:a8:aa:6a:3f:da:1c:a0:d9:d7:8f:62:c0:
07:68:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:25 2026 by rpki-client