Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: ulEWPhH+JqwR3T1ydvkTK/QJY4OIctYIuh5oSPzQdfQ=
Subject key identifier: EC:39:0A:7B:90:F9:35:EF:11:E8:8B:43:7D:86:C7:3B:C0:23:84:89
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 01A1A970C9042C623B9C84D45D764BBF0A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1ADB
Signing time: Thu 05 Nov 2026 02:01:43 +0000
Manifest this update: Thu 05 Nov 2026 02:01:43 +0000
Manifest next update: Fri 06 Nov 2026 02:01:43 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: D9aPLVC+XAYAcODHAKM5YsOOME1anQ54qnPc2ly8+tc=)
3: sv4jPw8xvRL7alqQbykvVBnrddY.asa (hash: 6CBIbHzAa2IyyyXqG5RUrkxIDW1XdmFjdzCGTUJmVhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:c9:04:2c:62:3b:9c:84:d4:5d:76:4b:bf:0a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Nov 5 02:01:43 2026 GMT
Not After : Nov 6 02:01:43 2026 GMT
Subject: CN=ec390a7b90f935ef11e88b437d86c73bc0238489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:4f:3c:1e:ab:18:98:28:af:88:3e:54:b5:
25:1d:a4:48:be:05:f4:cb:f1:7f:d3:a4:f5:94:6e:
9f:2f:df:86:3f:66:93:00:93:8b:23:4d:eb:68:d8:
28:9b:76:66:dd:51:34:3d:3d:2b:29:06:62:62:f7:
71:73:d2:b6:8e:cc:16:3f:27:c9:ee:e0:f7:bb:0e:
3a:d2:e3:e3:ce:66:4b:f7:48:31:e7:1b:92:df:e8:
5c:39:7c:47:af:54:5f:b4:e2:70:6c:16:fd:6b:ec:
50:6f:62:a3:86:cf:79:8e:47:da:8a:9f:b1:09:c0:
88:f6:f2:11:cf:de:1a:91:40:79:81:0c:b7:9c:fd:
70:1f:70:fb:14:ab:98:73:ef:2b:14:e4:1d:ae:64:
7e:fc:a6:5d:ec:87:fc:97:a2:38:df:1a:a7:9d:3a:
f3:14:20:9b:c9:1d:30:99:88:04:1b:ae:fc:16:cd:
1e:a9:3f:cd:61:91:69:c7:60:f4:4d:8d:a2:df:1b:
66:5a:fd:a7:31:54:76:20:f0:56:a7:51:47:4d:04:
9d:39:59:68:3b:9c:16:36:5e:c1:9b:80:fb:6a:85:
da:16:52:ef:7a:07:9d:f8:6b:11:cf:e5:e1:5c:76:
6e:90:20:2a:64:3a:df:ac:63:cc:27:3a:38:63:13:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:39:0A:7B:90:F9:35:EF:11:E8:8B:43:7D:86:C7:3B:C0:23:84:89
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:14:c1:b3:54:bb:4d:e4:d8:e1:4d:62:63:9c:fb:54:6d:6e:
6f:98:f9:76:9a:8a:a2:48:01:60:ba:ee:55:5b:89:66:40:72:
aa:ce:84:3e:43:a3:0d:5d:3c:92:63:85:72:56:6c:72:9c:bd:
dc:8c:6c:34:82:88:a5:d2:b7:28:7b:78:f2:6b:47:2f:78:5d:
ad:92:d1:40:8b:ad:7c:6e:4d:e6:6a:56:ea:c6:8a:4f:f0:09:
db:f7:72:fb:17:46:83:12:b0:8d:3b:a0:dc:70:04:ed:83:f9:
32:ef:e2:dc:e3:ef:f7:c9:7b:1a:ac:43:91:5b:ce:f3:87:9a:
95:13:e8:14:0e:ad:ea:b7:5d:b9:ae:74:a8:83:66:11:68:50:
5b:01:90:65:ba:53:06:9f:92:1f:ae:0b:00:48:1d:a3:b8:37:
24:49:81:56:40:be:cc:b7:3b:d4:d6:43:f4:60:dc:64:3f:5b:
e4:17:da:83:35:fb:32:3d:18:0a:5b:b7:56:27:e0:0d:da:42:
b4:cc:32:37:11:e5:69:f2:1b:7e:55:b7:23:46:89:34:7e:35:
74:ff:66:eb:9d:f3:fb:96:02:a6:57:62:80:7f:d4:19:2b:57:
e1:f5:9d:d3:a4:01:67:b7:4b:32:9c:af:97:08:41:b6:e4:b8:
2e:28:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:18:44 2026 by rpki-client