Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: lsBFNDQ/2XaMfL+ha+ccq1jUNJAhF6D+9BC24x4kT7o=
Subject key identifier: CA:7D:9D:DD:B9:FB:2C:13:DD:AE:10:DF:34:73:6F:9C:3F:19:0B:20
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 019FA7500292F0B36C5B0CD956551B5363D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 06:01:06 +0000
Manifest this update: Tue 28 Jul 2026 06:01:06 +0000
Manifest next update: Wed 29 Jul 2026 06:01:06 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa (hash: w9lR4ON+b59p837ru2OLVhKsOC/JMVjvCSI6iRqeFUs=)
3: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: fuXiMsROiG5JJja6q5JQDb5/dFqRULLcBNeX0gFZuLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:50:02:92:f0:b3:6c:5b:0c:d9:56:55:1b:53:63:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Jul 28 06:01:06 2026 GMT
Not After : Jul 29 06:01:06 2026 GMT
Subject: CN=ca7d9dddb9fb2c13ddae10df34736f9c3f190b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:f6:f5:56:c7:36:e9:f9:75:45:25:2a:92:
de:16:f8:6f:69:48:b1:50:dd:0b:d4:15:48:e3:9d:
21:6f:95:64:db:18:52:79:17:22:27:5f:40:ae:1e:
79:05:27:46:50:75:47:7b:55:6e:59:43:1a:07:00:
c2:6a:fd:ba:a4:fc:c0:21:bc:14:92:3a:51:bc:df:
88:01:6d:ee:6b:a3:e1:00:c3:49:e1:24:69:47:dd:
e0:44:70:0c:4a:eb:2d:15:0b:54:ad:57:09:c2:38:
1d:ef:3d:34:27:66:bb:a6:4b:9d:96:2b:bc:ee:b0:
ab:88:ab:5d:97:2a:c9:6e:d6:04:f2:87:12:2c:f9:
8a:eb:4b:2d:59:1c:0b:67:d1:e3:46:78:1b:dd:ef:
d1:cd:cc:b6:ee:17:3b:c8:63:48:42:94:3a:0d:9e:
4e:79:c7:4d:64:22:a9:ee:bc:f5:3d:7d:1b:ab:c4:
5d:e4:41:ca:e0:3b:4d:00:1d:3a:46:36:e3:81:4e:
93:64:0b:8a:e9:d2:9c:f4:4f:45:ba:e8:90:93:94:
36:57:76:36:af:af:25:97:38:ae:bd:3a:b1:eb:6c:
b9:6a:fc:e5:7b:af:87:d0:39:cf:ac:b4:bf:3d:5c:
5c:10:e8:1a:1b:4c:dd:79:1b:98:fe:8f:7d:b6:af:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7D:9D:DD:B9:FB:2C:13:DD:AE:10:DF:34:73:6F:9C:3F:19:0B:20
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:eb:af:7e:43:8f:53:04:8c:c2:6f:5b:3e:bc:bf:8e:fb:6d:
07:e3:2a:43:07:d3:d7:ee:13:7d:45:0b:3b:2f:28:e6:e9:c4:
fc:3d:ea:89:44:35:12:e4:45:f8:91:5d:64:7d:19:e1:cd:5f:
3d:de:17:56:e8:8d:87:ad:91:b2:9a:12:0e:0c:6c:7a:24:e5:
c1:4b:a5:93:8e:2c:52:b0:b4:54:6c:b7:ca:ca:9e:1b:3e:a3:
6f:f6:87:69:b4:8e:bf:ec:6a:fa:8e:10:4d:d4:ee:8a:ed:5e:
08:5f:36:cb:52:36:62:74:2f:a7:e4:93:03:3d:b9:b4:c7:e3:
91:06:a4:a5:06:29:c2:50:c2:b6:16:2c:ef:61:e6:1a:84:29:
96:4a:0b:b8:a9:ed:a0:08:a2:b3:e9:16:b2:df:7e:3d:ab:0a:
0b:ff:1f:be:d0:7f:fe:85:df:22:3a:e6:72:33:71:09:ae:ef:
24:86:5d:10:4d:f3:ea:5f:36:e8:72:ab:24:fa:50:f1:d7:54:
8f:57:7c:70:5a:57:eb:e3:72:f6:94:27:4b:7e:42:ee:e2:5a:
ea:91:c0:10:90:af:fe:e5:51:08:91:dc:c9:72:48:1d:ef:4b:
a6:dc:b4:2c:f2:14:ac:5b:47:f1:20:4a:93:48:ed:84:d3:c0:
3d:dc:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:29 2026 by rpki-client