Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: slleR+ygFvncUtN/SNiSj8w0G+Blg+WhU0fV41B+QWI=
Subject key identifier: 4A:CB:46:3A:50:C6:9B:3C:3D:04:21:09:97:A3:DD:24:D5:96:76:7C
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019CAAC6D0E2CCD1AD882CE9BCE06C55FCB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 152A
Signing time: Sun 01 Mar 2026 19:01:21 +0000
Manifest this update: Sun 01 Mar 2026 19:01:21 +0000
Manifest next update: Mon 02 Mar 2026 19:01:21 +0000
Files and hashes: 1: 2h_8VJcabHSDMCKwNPF09jw_Hf8.roa (hash: c7tBoia56lSI7zrOJCToiDaTHfoOdjooQhw4RuRBw4Y=)
2: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (hash: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao=)
3: QZlonf94vrWyMPOp87JAm_NWNqo.roa (hash: w6YhRh8acabp1x77SswHpUR6bqnL4nDuqC2pTtKcfFs=)
4: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (hash: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI=)
5: SpN8Ae02yCS4OsvaV0LVnRQu4n8.roa (hash: R6h5Q2EcPAyb3qsGG8N6McT5J+RVk0PixkSdyl6z20Y=)
6: esU4fsvjE_GKeZBwL9xIr9vckzE.roa (hash: iqFT9wVD2iFSuqGQNBizWBYxsH/4xrNP/ECuVx8b/i4=)
7: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (hash: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo=)
8: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: 4uKHR0kFXaxboh9ba6Z/AyW//EOjCHtqlQPDoNdPH48=)
9: xKxA9QME2V8f2RH3M46PbYUw4oY.roa (hash: thsfcGsSl3d+8qrEjeuctIXvk8eBzxGLHCJIT/WWbto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d0:e2:cc:d1:ad:88:2c:e9:bc:e0:6c:55:fc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Mar 1 19:01:21 2026 GMT
Not After : Mar 2 19:01:21 2026 GMT
Subject: CN=4acb463a50c69b3c3d04210997a3dd24d596767c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:bd:11:c2:ae:ff:a7:70:c5:dd:29:48:5c:
6a:c0:bf:aa:c6:df:48:1d:e7:d5:6d:ac:d0:0e:2a:
88:89:61:ef:5c:85:9c:32:e5:31:56:ba:d7:bd:fd:
5c:14:52:5f:af:22:36:5b:e4:9e:b9:97:40:fd:3a:
c6:f8:c4:ba:29:6f:16:f8:85:5c:ec:1b:a8:c1:d1:
ba:a2:57:55:f2:80:18:21:39:32:d6:69:30:d1:8f:
cc:06:c3:63:7d:95:d9:88:78:7a:ff:d3:dc:11:76:
66:90:88:98:f3:42:ca:53:4f:ed:85:1b:9e:70:d8:
18:a2:c4:66:9c:d1:20:60:80:9c:ed:df:1e:ea:98:
a7:29:ee:ee:b0:8e:9a:3c:3b:2b:ff:18:27:ab:45:
57:6f:5b:3f:9e:37:da:cc:ea:16:e0:53:c0:1b:f2:
54:5a:81:83:65:2f:a6:6b:bc:19:0d:25:7b:44:f0:
a8:55:00:26:e6:d4:b6:f5:e0:1a:4d:ba:f1:f8:05:
27:00:a1:fc:51:df:07:b0:da:72:0e:c9:b6:b9:65:
a3:ac:9f:d0:b0:54:65:fc:4f:99:8c:e8:81:a7:2f:
dd:af:6d:53:d9:59:88:dc:06:ff:10:7d:f4:f0:9d:
16:18:b9:57:0c:a2:2d:4a:95:f7:89:25:4f:52:c4:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CB:46:3A:50:C6:9B:3C:3D:04:21:09:97:A3:DD:24:D5:96:76:7C
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5a:34:15:33:52:f1:11:20:b5:71:06:e1:d8:c6:b8:93:ad:
a9:1d:3f:58:16:81:cb:aa:3e:58:33:b4:bf:ed:14:a0:94:1b:
46:85:fd:62:bf:f3:35:02:f0:8d:d4:78:29:99:b9:6f:1f:f0:
34:0a:db:49:91:6e:33:73:d4:03:8d:65:41:f6:58:42:7b:e0:
18:dc:3e:b1:c3:4e:67:64:49:c4:aa:b7:0a:78:4b:6d:76:5a:
0f:0e:6b:fe:94:5a:3e:ea:7b:df:0e:75:62:02:df:de:e6:92:
16:bd:b8:76:15:b8:d5:f7:1f:0e:45:fb:33:73:6b:38:07:41:
6b:be:39:af:39:48:f1:31:86:39:60:57:97:e4:3f:0d:e7:83:
d4:75:30:2d:1c:3a:49:ca:a6:b8:da:39:85:6a:66:53:75:fe:
5a:33:c1:95:d6:69:61:5e:3f:74:16:3b:8f:61:84:57:0a:81:
06:32:a1:d1:a1:55:fd:ff:06:dd:b2:84:23:2c:70:cf:2c:da:
31:a5:12:e6:78:3b:92:ed:ae:c3:7b:2b:2f:ee:70:e2:24:82:
ac:f2:91:49:81:06:48:fd:92:2b:b5:f2:0c:85:96:be:e7:28:
b7:36:6a:7a:2f:28:32:ff:90:09:f9:a0:cf:1b:5d:2c:fa:08:
c8:67:e2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxtDizNGtiCzpvOBsVfyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5
NmM1M2EwHhcNMjYwMzAxMTkwMTIxWhcNMjYwMzAyMTkwMTIxWjAzMTEwLwYDVQQD
Eyg0YWNiNDYzYTUwYzY5YjNjM2QwNDIxMDk5N2EzZGQyNGQ1OTY3NjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4S9EcKu/6dwxd0pSFxqwL+qxt9I
HefVbazQDiqIiWHvXIWcMuUxVrrXvf1cFFJfryI2W+SeuZdA/TrG+MS6KW8W+IVc
7BuowdG6oldV8oAYITky1mkw0Y/MBsNjfZXZiHh6/9PcEXZmkIiY80LKU0/thRue
cNgYosRmnNEgYICc7d8e6pinKe7usI6aPDsr/xgnq0VXb1s/njfazOoW4FPAG/JU
WoGDZS+ma7wZDSV7RPCoVQAm5tS29eAaTbrx+AUnAKH8Ud8HsNpyDsm2uWWjrJ/Q
sFRl/E+ZjOiBpy/dr21T2VmI3Ab/EH308J0WGLlXDKItSpX3iSVPUsQI4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErLRjpQxps8PQQhCZej3STVlnZ8MB8GA1UdIwQY
MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt
NzA2MTM1NmJlZjFiLzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi
LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVo0FTNS
8REgtXEG4djGuJOtqR0/WBaBy6o+WDO0v+0UoJQbRoX9Yr/zNQLwjdR4KZm5bx/w
NArbSZFuM3PUA41lQfZYQnvgGNw+scNOZ2RJxKq3CnhLbXZaDw5r/pRaPup73w51
YgLf3uaSFr24dhW41fcfDkX7M3NrOAdBa745rzlI8TGGOWBXl+Q/DeeD1HUwLRw6
ScqmuNo5hWpmU3X+WjPBldZpYV4/dBY7j2GEVwqBBjKh0aFV/f8G3bKEIyxwzyza
MaUS5ng7ku2uw3srL+5w4iSCrPKRSYEGSP2SK7XyDIWWvucotzZqei8oMv+QCfmg
zxtdLPoIyGfifg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:07 2026 by rpki-client