Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: vF5PriWnHft3bF2Rf/vw2wU5UdmJmAY4X9ZztPom0B4=
Subject key identifier: 5A:8E:36:24:86:4C:3C:6A:D1:AB:25:32:A2:2E:AE:88:D7:92:60:CB
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 019EC3DC6033148B9EF83C66C635EAC4B4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0DA8
Signing time: Sun 14 Jun 2026 02:00:59 +0000
Manifest this update: Sun 14 Jun 2026 02:00:59 +0000
Manifest next update: Mon 15 Jun 2026 02:00:59 +0000
Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: 1CR9O3Jfu961vu4FaIviDkuo97aaZq5i6ZRIZHiSUwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:60:33:14:8b:9e:f8:3c:66:c6:35:ea:c4:b4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Jun 14 02:00:59 2026 GMT
Not After : Jun 15 02:00:59 2026 GMT
Subject: CN=5a8e3624864c3c6ad1ab2532a22eae88d79260cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:69:d8:d4:20:3a:c6:79:fb:f5:26:97:8c:99:
25:1e:98:b1:c5:6f:97:69:8f:16:80:e6:6d:25:0b:
97:f8:50:45:d1:c7:6c:e7:db:ca:1c:d0:bb:82:60:
f9:b5:f4:d9:f2:df:71:d8:6e:13:b1:c6:b2:ee:46:
36:84:a0:d7:f6:0b:ed:a1:20:4f:f2:82:89:90:96:
96:45:a2:42:60:3c:b5:55:64:3a:93:e1:17:97:0f:
3e:0a:27:74:02:e4:e3:15:cc:d0:35:13:89:ba:34:
8f:7b:c9:a1:14:97:14:40:8a:2b:ec:60:42:59:0b:
af:ec:04:8d:32:d3:2d:10:0c:99:14:ab:6c:a1:87:
47:c2:71:14:35:0c:3c:18:28:b4:1d:e5:2d:a8:3d:
6d:77:ee:c1:ff:6c:1d:d5:d9:93:b9:b0:d9:35:b6:
b0:68:07:6e:2f:b5:b9:06:08:d2:94:b2:cf:50:4d:
ab:9b:e4:8a:d2:5b:fc:f1:22:d1:02:3c:4c:31:23:
17:c9:f7:09:be:3f:59:07:f6:17:5e:b7:0d:28:6b:
f2:21:e7:f4:40:2b:42:79:9a:81:ca:21:0e:ef:44:
e7:b8:3c:df:e1:34:d3:db:6b:3d:e8:9f:60:76:b4:
62:c0:06:c2:b1:af:ca:82:07:4e:9b:d9:c4:b2:aa:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:36:24:86:4C:3C:6A:D1:AB:25:32:A2:2E:AE:88:D7:92:60:CB
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ae:f5:0b:94:dd:28:25:e3:6e:cb:4c:2e:f1:0f:24:ae:eb:
3d:c4:bd:9c:c5:28:f2:f4:02:9a:a7:84:63:d6:3a:5d:1f:70:
52:22:fb:76:67:db:e3:8e:68:b2:ba:56:b8:e9:45:42:d1:23:
97:64:00:d3:f9:82:e5:fc:7e:43:6f:72:fb:0b:c9:ca:4b:d1:
40:3a:99:22:36:15:a5:92:77:8a:7d:82:90:44:f6:92:2e:f3:
5c:2d:c1:97:71:93:de:1e:74:fc:e3:6b:3e:7b:3c:7b:1e:5a:
06:74:12:5b:7d:98:07:3c:11:27:d4:5a:0f:b7:1a:e8:ef:e4:
af:25:19:20:f9:87:db:a2:3b:1e:57:d6:fb:5d:45:b1:24:4a:
45:65:ae:d5:8e:08:eb:2f:f7:50:59:5b:55:e0:b9:a9:4d:2e:
a9:10:52:27:4e:3b:4a:f2:76:dc:7a:8a:fd:24:25:87:03:15:
48:93:b4:ca:99:78:d8:71:75:ef:ba:f5:c8:b9:58:20:cb:21:
97:35:d5:54:cf:73:5f:8f:ef:3b:58:b2:be:a6:e6:0e:ce:f2:
28:9c:d4:fe:5a:38:4d:d8:69:51:14:37:27:b5:8d:3b:ff:d3:
5b:49:70:2b:8b:57:09:17:49:b8:97:3a:7f:74:6d:77:9f:2f:
83:0d:4e:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7D3GAzFIue+DxmxjXqxLTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGNhNDRiNGFiNTQ1MzNmOGI1MTk2Y2Y5MmQ2OGRlYjhm
Y2M1ZTIwHhcNMjYwNjE0MDIwMDU5WhcNMjYwNjE1MDIwMDU5WjAzMTEwLwYDVQQD
Eyg1YThlMzYyNDg2NGMzYzZhZDFhYjI1MzJhMjJlYWU4OGQ3OTI2MGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12nY1CA6xnn79SaXjJklHpixxW+X
aY8WgOZtJQuX+FBF0cds59vKHNC7gmD5tfTZ8t9x2G4Tscay7kY2hKDX9gvtoSBP
8oKJkJaWRaJCYDy1VWQ6k+EXlw8+Cid0AuTjFczQNROJujSPe8mhFJcUQIor7GBC
WQuv7ASNMtMtEAyZFKtsoYdHwnEUNQw8GCi0HeUtqD1td+7B/2wd1dmTubDZNbaw
aAduL7W5BgjSlLLPUE2rm+SK0lv88SLRAjxMMSMXyfcJvj9ZB/YXXrcNKGvyIef0
QCtCeZqByiEO70TnuDzf4TTT22s96J9gdrRiwAbCsa/KggdOm9nEsqoEmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqONiSGTDxq0aslMqIurojXkmDLMB8GA1UdIwQY
MBaAFKHcpEtKtUUz+LUZbPktaN64/MXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYt
NTM4NmE3OWFkZTgwLzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYtNTM4NmE3OWFkZTgw
LzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq71C5Td
KCXjbstMLvEPJK7rPcS9nMUo8vQCmqeEY9Y6XR9wUiL7dmfb445osrpWuOlFQtEj
l2QA0/mC5fx+Q29y+wvJykvRQDqZIjYVpZJ3in2CkET2ki7zXC3Bl3GT3h50/ONr
Pns8ex5aBnQSW32YBzwRJ9RaD7ca6O/kryUZIPmH26I7HlfW+11FsSRKRWWu1Y4I
6y/3UFlbVeC5qU0uqRBSJ047SvJ23HqK/SQlhwMVSJO0ypl42HF177r1yLlYIMsh
lzXVVM9zX4/vO1iyvqbmDs7yKJzU/lo4TdhpURQ3J7WNO//TW0lwK4tXCRdJuJc6
f3Rtd58vgw1OuQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:41 2026 by rpki-client