Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: Wp6vjX6mgbJwhhRUEQUAS3Ub8q1/C8bGkJrzWkuO38U=
Subject key identifier: 3B:A5:25:5D:FB:50:C7:AE:35:81:43:6B:07:94:1F:72:A2:71:89:73
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 019CAAFD95D95DF64C99F543D50AFE64E087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0C92
Signing time: Sun 01 Mar 2026 20:01:11 +0000
Manifest this update: Sun 01 Mar 2026 20:01:11 +0000
Manifest next update: Mon 02 Mar 2026 20:01:11 +0000
Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: eP4k4f4dTCEMq1k92lrXtaQUqY903I1TWFs0QCAUwjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:95:d9:5d:f6:4c:99:f5:43:d5:0a:fe:64:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Mar 1 20:01:11 2026 GMT
Not After : Mar 2 20:01:11 2026 GMT
Subject: CN=3ba5255dfb50c7ae3581436b07941f72a2718973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:33:9b:aa:0d:68:5c:12:42:fd:8d:4e:1c:
c6:3e:31:57:66:b4:c5:e3:4b:77:94:e8:e1:2e:02:
95:71:65:fe:6b:ee:41:36:c7:eb:34:9e:10:88:18:
d9:2d:98:d2:97:89:5c:2c:5f:73:a3:a8:58:d2:88:
58:41:97:cf:11:5f:95:8c:cf:a5:9f:d4:ea:52:2d:
95:4f:d2:6d:aa:20:8d:4c:1b:4b:17:7b:be:5b:d0:
c3:da:f4:e0:c1:6e:ba:de:66:94:a5:a1:15:0b:4d:
7b:45:e3:60:a5:5c:fc:c2:8c:13:6c:e7:95:b1:7d:
12:4d:9f:59:84:59:5a:c6:ab:4a:c4:30:90:a5:d6:
24:a5:c0:03:fc:65:6b:9a:67:ef:e8:46:a0:85:49:
3b:68:48:d0:1f:96:b0:0c:9f:28:64:10:d5:8e:76:
5c:7f:57:d7:db:50:92:ec:be:8e:79:a4:bd:07:24:
fa:82:00:2b:1b:c6:5f:f8:6e:c8:74:e8:8d:26:e7:
d9:bf:3d:aa:65:ad:6c:ed:1e:f3:14:88:3f:f2:dc:
17:d0:23:d0:c3:bd:26:93:55:52:22:56:2a:3b:b2:
8e:d2:85:19:b5:4e:f1:6a:60:fa:a6:81:db:37:3b:
6c:89:0a:44:ff:13:ab:72:58:d0:55:2c:af:1a:2d:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A5:25:5D:FB:50:C7:AE:35:81:43:6B:07:94:1F:72:A2:71:89:73
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:84:ee:5f:c1:4b:ed:41:f2:cf:27:72:f5:89:74:3d:25:f1:
b9:16:14:52:e2:16:79:1d:f5:67:60:dd:03:50:b1:44:75:eb:
3a:d3:4f:04:1c:ba:dd:5f:6c:e4:c2:6b:e3:c0:6f:b1:4f:d3:
bb:d3:aa:5f:a7:88:31:29:c2:f9:39:0f:cf:f8:46:73:e0:9a:
88:65:06:16:b7:ea:c0:04:29:dc:87:f7:17:00:b0:8c:39:f8:
9e:29:14:52:c8:1e:56:46:b3:f0:b8:09:bd:ec:ca:38:8d:63:
d7:ce:f7:97:8d:38:7e:d8:45:3d:e1:1c:2b:65:d8:88:9b:f1:
dd:fc:f6:ad:56:e2:38:28:1c:f7:42:5c:2c:de:70:31:49:3f:
83:a5:eb:75:90:04:2f:77:8d:dd:a5:ec:0f:44:3d:11:8a:89:
6f:1a:c9:0f:e8:cb:22:4a:98:bb:e0:91:cf:63:89:14:56:59:
75:17:75:d6:88:b5:4b:69:e4:4f:c9:4c:2e:de:d5:45:e1:2a:
62:73:06:86:97:ea:08:9c:59:c1:96:98:fd:cb:92:2c:c8:ae:
92:9e:73:75:9e:ce:9f:27:2f:5c:ab:cd:e4:ef:7b:52:2a:f4:
f6:6e:36:4f:82:d4:0e:a3:5f:4f:1c:6d:3f:22:19:5e:dd:4e:
db:81:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:06 2026 by rpki-client