Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: 4c3SUzTN3saPqvTnr51/bawhRklF4ZQAF+dWKHj6aBs=
Subject key identifier: A4:29:69:83:72:FA:40:09:25:B9:47:3A:9F:0C:E2:23:3E:91:7A:15
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 019CA8A0F5B402ECF3CB71997BA202F48280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 09:00:46 +0000
Manifest this update: Sun 01 Mar 2026 09:00:46 +0000
Manifest next update: Mon 02 Mar 2026 09:00:46 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa (hash: w9lR4ON+b59p837ru2OLVhKsOC/JMVjvCSI6iRqeFUs=)
3: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: W4EJSqlCGNdwll8D+1mnYoYx91pGD8nlkShVMmTKJrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:f5:b4:02:ec:f3:cb:71:99:7b:a2:02:f4:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Mar 1 09:00:46 2026 GMT
Not After : Mar 2 09:00:46 2026 GMT
Subject: CN=a429698372fa400925b9473a9f0ce2233e917a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:da:f1:21:44:80:fb:52:e0:c0:fc:6d:f5:
59:09:04:3b:0b:94:6b:aa:30:5c:19:55:97:6e:30:
31:63:35:40:4f:1e:11:53:ad:db:82:32:4c:7a:82:
c6:20:f2:79:84:f9:3f:f0:66:e7:a4:75:4a:ff:51:
db:f6:60:16:9b:67:c2:a7:33:ec:3c:ed:7d:bf:74:
6d:83:76:fa:91:58:3e:4a:a6:c2:5a:6b:a1:63:9a:
37:aa:32:87:89:30:fb:0d:1d:1a:79:3b:fb:08:e0:
01:c4:d0:60:52:b7:58:ff:d4:24:9b:0f:fa:21:c9:
0e:9c:b0:d2:c7:a2:c3:52:c1:7e:08:3d:ed:af:85:
80:cc:9e:51:a9:88:ba:c4:2b:88:9d:02:e0:49:31:
a5:59:56:48:a1:45:29:6e:f7:25:44:47:43:2f:ed:
28:8a:91:af:3c:dd:e3:69:85:3c:dd:de:6d:c1:86:
a0:5f:fd:c4:21:67:53:dd:41:fd:61:62:f9:dc:02:
d8:2a:4f:ea:a7:60:35:6a:a4:1c:a9:8d:a3:f8:26:
e7:4b:e5:4c:88:60:84:fc:12:dd:06:97:66:bb:07:
b3:c9:85:e9:16:77:48:15:b6:4e:ae:e9:36:b9:e3:
4d:a1:76:a9:58:e2:b5:bc:60:62:76:a0:3b:1a:e4:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:69:83:72:FA:40:09:25:B9:47:3A:9F:0C:E2:23:3E:91:7A:15
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:70:13:c0:12:fb:36:80:d6:e9:8f:44:5f:4a:62:68:f6:79:
15:bc:96:87:02:10:ca:42:96:21:5b:8e:01:14:08:1f:55:0c:
4a:6d:e5:b5:e7:49:2c:52:ed:04:ff:84:1d:02:e9:4c:ed:59:
c9:83:57:08:cb:9d:44:72:5d:f8:d6:da:35:da:ef:17:a7:5e:
26:db:a1:f7:82:c1:48:ba:e3:fc:b1:68:a9:89:2e:f7:9c:48:
cf:de:4f:09:e2:51:2f:77:59:96:00:f9:95:e4:06:f1:44:70:
2d:83:e6:f4:59:d9:fa:36:47:f9:23:e5:47:de:16:be:a7:6c:
55:1d:de:06:52:07:0d:1d:ab:ef:1f:9b:cc:d8:af:b4:b7:a4:
b6:39:f2:bf:b2:b2:a3:8d:9f:f8:9c:85:e9:be:b1:89:3c:54:
8a:61:3f:d2:79:4a:ca:4c:5a:27:1f:66:d1:4e:9e:4d:2c:5d:
79:25:1d:ce:a0:59:f3:cc:df:b8:f1:be:36:b6:9a:b9:18:59:
b0:9b:d5:60:c1:7a:2b:07:2a:1b:cf:0d:20:9d:38:c8:4d:8d:
c7:0f:f8:3c:c9:2f:81:2a:99:5f:d0:64:98:2c:6c:cf:10:4e:
e9:2d:0c:3c:13:42:55:df:16:66:17:42:ec:63:e6:5f:b9:9d:
ec:d6:85:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:27 2026 by rpki-client