Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: PFrBmfNwKvsnfjV9wNG3NJa7zijlOIqnKePOy/bBLNo=
Subject key identifier: AB:1A:18:D8:75:06:FE:A7:06:4E:3D:59:6C:09:51:4A:34:7E:0E:93
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 01A11E644C1BE4C3BDCCFDA267906FFD282B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0EE0
Signing time: Fri 09 Oct 2026 02:00:51 +0000
Manifest this update: Fri 09 Oct 2026 02:00:51 +0000
Manifest next update: Sat 10 Oct 2026 02:00:51 +0000
Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: VgSHGjenJZ4MTXoXfF1xdIMnkiTJdL5OkAOOgzR5Fs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:64:4c:1b:e4:c3:bd:cc:fd:a2:67:90:6f:fd:28:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Oct 9 02:00:51 2026 GMT
Not After : Oct 10 02:00:51 2026 GMT
Subject: CN=ab1a18d87506fea7064e3d596c09514a347e0e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:ff:1a:d3:7d:a2:4b:3b:56:4a:2d:9c:97:
55:16:ee:d5:50:fe:5c:db:52:cd:24:3d:c6:7d:9d:
46:52:f5:22:56:ac:b0:c6:1c:c0:22:4e:2f:27:87:
d4:0a:21:c2:0c:42:9c:9d:a0:03:61:40:76:ce:45:
29:a2:38:32:9f:82:0e:b6:66:ae:ed:1b:6b:da:d4:
56:61:f0:e3:c9:f0:e7:bf:9f:14:b1:c3:aa:79:b9:
e4:ae:fe:50:01:70:fe:29:43:8b:a1:f4:9a:3f:1d:
dc:34:84:f8:33:e5:d9:81:eb:65:90:f3:ca:9c:c8:
dc:1c:49:fe:83:64:3a:69:ec:54:ea:4d:9b:c9:7c:
88:2a:7b:a9:e7:d1:8c:93:b3:ae:36:4d:49:58:0e:
9a:e6:a3:0d:97:8d:6e:04:d4:87:f0:28:4f:20:4e:
28:7e:27:2f:a8:88:44:9e:01:be:94:b9:34:6a:5a:
6d:cd:65:6a:37:f3:c4:38:d0:af:81:e5:27:dc:0a:
78:66:b5:b7:58:af:a9:51:71:33:93:9b:fe:f3:49:
60:0a:85:fc:5e:25:ee:68:a0:22:41:70:e9:63:65:
54:83:21:99:31:fd:e1:b5:49:8b:ca:37:26:a7:19:
7f:8f:a3:53:37:ce:b8:61:01:6e:d3:82:8a:5e:f8:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:18:D8:75:06:FE:A7:06:4E:3D:59:6C:09:51:4A:34:7E:0E:93
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8e:ee:55:ac:66:be:2f:42:48:0e:1c:c7:20:9f:83:b8:25:
13:4d:e9:78:2a:40:d8:17:30:06:e6:7c:91:3d:d1:83:51:39:
3e:56:7e:f5:b6:eb:44:63:ca:21:98:47:96:4a:73:1c:12:7f:
a6:d0:0a:76:66:50:ed:19:f2:0a:cd:83:7e:de:9d:21:54:01:
32:7b:66:75:43:4d:0b:8d:e9:e2:38:31:ed:d8:5d:f8:21:08:
c9:f4:60:79:b1:9a:b1:3a:bd:1c:1a:ed:5e:21:ba:02:b3:dc:
86:e3:be:e8:45:02:43:8e:f2:e8:07:de:fa:36:81:48:df:76:
d6:cb:4d:e0:9f:59:34:21:a8:12:de:3f:79:89:9b:55:ea:ec:
bc:9b:40:91:26:50:e6:02:2f:b2:6a:e1:e7:b0:20:17:29:95:
e5:61:cb:4d:d4:6d:49:c0:78:6e:07:a8:2c:92:d5:31:9d:f0:
b8:81:0d:05:68:e6:8f:c7:ac:22:dc:1b:d6:fc:e0:2b:a3:cc:
a0:80:aa:65:b4:a9:aa:d8:a4:90:5b:73:a9:84:79:2b:e7:4d:
db:16:38:e7:61:c3:12:da:c1:2f:ec:96:23:fc:5c:85:0b:34:
55:a7:01:57:e5:11:b8:ea:08:44:f3:a6:c3:0f:e3:9d:f3:d5:
a4:ba:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:36:23 2026 by rpki-client