Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: y7WC+UPAoCJE6sIAqU+cMa1PRaXPp7+MkgrBE5jLj+Q=
Subject key identifier: 69:06:95:77:75:5B:AF:54:27:DA:A0:EF:7E:82:AF:69:F0:97:EC:00
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 019FAD891C4814147953D2C4A3368E760DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0E21
Signing time: Wed 29 Jul 2026 11:01:11 +0000
Manifest this update: Wed 29 Jul 2026 11:01:11 +0000
Manifest next update: Thu 30 Jul 2026 11:01:11 +0000
Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: IGWse0+lgx91q97VpgWS4MwyF/cz4F/7xaMOGHHTXbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:89:1c:48:14:14:79:53:d2:c4:a3:36:8e:76:0d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Jul 29 11:01:11 2026 GMT
Not After : Jul 30 11:01:11 2026 GMT
Subject: CN=69069577755baf5427daa0ef7e82af69f097ec00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:91:2c:a5:b5:7e:33:8c:f6:a9:6c:70:26:
97:b2:5b:7c:89:49:4c:28:be:94:3d:67:6d:25:ed:
e9:5c:d4:9d:c7:b1:ec:13:30:fe:e7:51:2a:c4:6d:
99:02:5e:ef:2f:9a:cc:86:63:60:5d:df:d1:60:50:
ba:15:12:56:d4:26:05:b4:8a:dc:cd:14:ad:1e:e3:
07:8b:4c:61:fb:0a:c4:ea:fc:cc:3c:0f:7b:8a:19:
d0:43:8b:59:c1:0b:1a:ad:6b:48:ca:de:3c:ad:00:
65:a0:a9:cf:0c:f0:4e:42:ff:7f:fd:8f:8a:d9:76:
df:d3:4e:d7:35:4d:d1:61:17:f5:fc:10:c9:33:d2:
f0:3e:c0:ca:cc:26:47:6b:2d:fe:88:d9:de:93:eb:
37:8d:df:6b:59:c9:ee:06:b5:8e:c8:21:90:0f:d6:
fc:24:2e:b3:66:85:6c:53:7a:2e:51:75:14:99:cb:
8d:2c:46:8d:6c:e5:1c:d4:3a:ea:68:76:04:b0:7f:
7a:0a:0c:f8:28:bd:8a:cf:e1:71:b9:ef:a4:86:ff:
d6:76:2c:2b:f7:57:2d:76:c0:34:33:cf:1e:27:a9:
68:32:ca:dd:d0:81:c8:dd:4f:49:a4:79:b4:6e:b9:
7a:83:aa:ac:e0:c8:fb:46:fd:b4:93:b8:fb:4c:c8:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:95:77:75:5B:AF:54:27:DA:A0:EF:7E:82:AF:69:F0:97:EC:00
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:0d:9a:aa:8b:f5:07:b0:a4:8b:0f:31:c9:67:89:04:17:
d0:42:f5:1d:f7:0a:fd:86:ea:ca:ea:35:d5:3e:6b:b7:49:ce:
71:8c:ab:a8:66:df:83:e6:8e:16:59:8a:46:a8:b3:ea:2f:6c:
41:5a:42:93:be:2a:27:7f:5f:5d:8d:d4:31:ff:5e:3f:cf:fb:
33:ed:8b:65:4c:ae:c0:ce:3a:eb:04:29:63:4c:3f:e9:ae:7e:
98:de:07:71:f5:cd:98:fa:8f:36:50:69:9f:a4:49:31:69:9c:
1d:52:9e:b9:bd:48:2f:b0:36:72:0c:92:0e:01:89:0b:a3:d1:
b4:89:f2:f4:04:61:a9:09:99:db:96:df:4f:e8:fb:12:c6:57:
bc:0b:2a:de:60:98:34:d2:a4:cf:04:c2:16:bb:91:87:fb:5a:
e5:a4:dd:c1:32:b9:9e:8c:99:c1:57:23:eb:23:92:f9:be:00:
a0:ee:69:97:02:41:15:02:cf:d8:6d:ca:91:ac:23:f5:4b:f5:
91:09:ea:f9:4c:e3:fe:19:23:f5:6d:1f:be:c4:d2:80:2b:ed:
b3:bc:91:c8:69:74:0c:b2:5f:19:c6:c0:05:b1:71:bb:1c:52:
c3:50:58:ca:8e:7b:0f:96:73:11:a6:52:ff:91:aa:8a:10:6a:
a9:02:9c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:52 2026 by rpki-client