Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: TM6IjeUQEtLvh1LTxpV4x0AZ+w1XDpQgZyaG0RXzBc8=
Subject key identifier: 28:08:98:7C:CB:FD:78:C3:0B:78:FB:71:2B:3C:B6:7F:83:AC:43:34
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 019D9A750237A4EF8DAD93BDEEC7D123AC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0D0E
Signing time: Fri 17 Apr 2026 08:00:52 +0000
Manifest this update: Fri 17 Apr 2026 08:00:52 +0000
Manifest next update: Sat 18 Apr 2026 08:00:52 +0000
Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: vJVM4cSSfwXqe/oSo19mwYVYJ8+hioNuV0ccsVsUKFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:02:37:a4:ef:8d:ad:93:bd:ee:c7:d1:23:ac:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Apr 17 08:00:52 2026 GMT
Not After : Apr 18 08:00:52 2026 GMT
Subject: CN=2808987ccbfd78c30b78fb712b3cb67f83ac4334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:36:d8:00:5b:e5:30:1b:84:f3:95:ea:fe:
be:d2:8e:3f:26:49:7f:6b:89:6a:40:91:53:5c:77:
b9:a8:0e:2b:bf:68:98:56:f1:d7:d0:4c:9b:ec:8e:
7c:05:80:a5:74:1c:0e:e8:42:3b:1e:15:2d:06:a5:
d4:6c:5b:8b:23:09:ce:e1:58:3c:12:e0:6d:50:79:
9c:09:bb:7c:99:22:a7:5f:97:8b:3c:11:1a:fd:80:
be:3e:50:55:ee:2f:9b:53:e7:94:b5:77:b4:c5:f2:
8b:58:20:0e:23:69:3c:80:e6:5d:75:4e:f0:3c:56:
3b:95:85:3f:10:3b:96:a5:aa:30:4d:08:41:37:c8:
38:97:6e:8f:2b:f0:ea:75:f0:96:58:85:27:a9:51:
53:0e:d2:2f:65:b4:59:b8:73:92:a3:ff:82:ec:2e:
7d:9f:25:f1:e3:33:63:c2:90:52:2a:e1:73:48:76:
a7:df:20:f2:95:08:76:5d:54:f6:96:3f:db:1c:70:
3a:27:2b:94:e9:4f:f7:78:57:78:aa:29:b6:f4:e2:
12:b2:80:05:23:8f:65:e7:33:5a:ea:6f:59:80:42:
10:55:f8:5d:6f:d8:37:40:da:4b:eb:c5:09:11:07:
b6:32:b5:0b:40:7b:cb:eb:2c:e2:41:18:0d:de:d6:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:98:7C:CB:FD:78:C3:0B:78:FB:71:2B:3C:B6:7F:83:AC:43:34
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:08:54:52:de:71:72:ec:b5:88:70:26:0a:ea:9f:cf:83:e6:
1b:5f:0a:de:ab:4a:de:01:a1:34:1f:ea:85:f4:94:e2:05:56:
05:47:e5:fd:32:ba:77:80:df:ff:58:f0:c1:8d:13:29:8f:65:
29:41:6f:10:6f:f8:bd:71:35:94:2b:31:09:67:f9:0b:db:9f:
18:7b:bd:ee:df:37:87:2b:93:2e:3a:30:fd:2e:74:6f:94:14:
10:9b:d7:17:f5:2f:b3:68:d7:00:cf:f5:56:5e:de:69:4b:fb:
ec:c5:8a:1f:1f:a4:72:c4:9a:4c:a6:09:d0:05:15:ed:12:08:
fc:ff:bd:59:d3:7e:e0:79:0f:fe:75:0d:f9:0d:e2:0b:c5:34:
f6:89:07:b1:06:e1:63:94:2a:03:eb:70:a6:2c:34:9f:5b:53:
5c:af:8b:f1:25:42:9b:61:6c:1c:6e:19:e9:e6:49:39:79:d7:
30:19:62:fa:4b:87:53:f4:79:fa:bb:fc:97:f6:d1:32:aa:21:
c3:d7:14:83:3f:06:14:b3:86:c2:5b:ef:52:5f:d6:18:84:d1:
23:9c:5e:df:c7:40:ce:9d:6c:c5:b0:9e:74:6b:92:79:94:d9:
fd:37:fc:4c:b1:0e:92:04:90:3c:e2:92:ed:e7:ea:d9:9d:a8:
46:64:8b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:40 2026 by rpki-client