Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: j/kq5bD256V8iyrCLAw8Mo3QJTDXnnqaYjdIvRDYavk=
Subject key identifier: F9:38:7D:4D:C8:68:08:5C:0A:81:E5:CC:5A:07:5F:75:3E:01:91:8A
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 019EBDA35C6D739DBC1720428957AF4CDE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 21:01:00 +0000
Manifest this update: Fri 12 Jun 2026 21:01:00 +0000
Manifest next update: Sat 13 Jun 2026 21:01:00 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa (hash: w9lR4ON+b59p837ru2OLVhKsOC/JMVjvCSI6iRqeFUs=)
3: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: nZOzu41ZduJa6fM/mMdur7geLwpdbF8AScpUuI8Ug5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:5c:6d:73:9d:bc:17:20:42:89:57:af:4c:de:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Jun 12 21:01:00 2026 GMT
Not After : Jun 13 21:01:00 2026 GMT
Subject: CN=f9387d4dc868085c0a81e5cc5a075f753e01918a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:af:a2:ae:c2:fc:b4:29:7c:fd:9e:88:85:b1:
65:49:cd:22:36:70:af:0c:83:b1:94:2d:4b:8c:f4:
8c:d9:5f:aa:c6:b9:6d:8f:71:79:61:57:c0:13:27:
5d:28:cf:bc:06:8f:95:b9:54:b8:bc:4b:fd:67:7f:
7e:76:72:c3:f2:d6:9f:29:f2:b9:9a:63:c2:0a:0b:
3b:80:3f:d8:9a:cd:4c:64:0e:88:cb:ee:42:ac:02:
90:1f:c4:9a:12:ce:d2:c2:91:54:3e:5f:1f:9e:8f:
60:d9:fe:ec:f9:78:12:72:0c:e4:88:5e:b9:b0:93:
83:10:a6:47:16:f0:8f:81:98:6f:de:2d:a4:e6:b9:
89:ec:9f:b8:78:b3:02:c3:24:eb:fa:91:7f:04:68:
5d:c2:60:e7:49:f7:7d:85:e7:e9:f8:99:65:4b:42:
99:b0:1c:1a:32:1f:da:3c:be:1a:06:2b:88:a3:0c:
eb:83:b2:02:2e:65:c6:89:34:2f:e4:69:13:2f:25:
4a:67:db:a9:ae:12:95:b9:98:4d:5d:5c:46:6a:63:
ee:b1:61:de:e9:4a:91:03:8c:06:e4:0f:88:8d:22:
ed:f0:ca:81:95:76:b1:92:fa:7c:89:5f:8d:88:8b:
27:72:cd:50:8a:fd:da:29:4b:f9:bd:27:af:b3:89:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:38:7D:4D:C8:68:08:5C:0A:81:E5:CC:5A:07:5F:75:3E:01:91:8A
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:29:e9:1d:ad:02:4e:21:d7:e2:32:d7:9d:e0:dd:53:db:b7:
a7:bc:fb:42:83:69:ea:b8:83:38:1f:ec:96:9c:31:a6:01:b3:
64:a1:c5:5b:0e:e9:10:2c:0f:97:fa:bc:9f:d0:31:c5:aa:f2:
9c:44:65:43:5e:c1:6e:50:dd:71:46:51:21:2f:66:fa:4e:80:
38:69:27:b8:7a:85:0e:09:1e:03:33:a5:8c:ff:6c:0b:e2:2e:
16:45:6f:f3:be:3a:e8:fb:0f:02:02:91:52:06:5c:62:b3:3f:
7f:98:1e:0d:c1:2c:17:43:8e:bc:1e:3f:f2:db:af:69:6c:67:
ee:1e:c5:51:ba:7f:5e:f9:5d:56:38:ac:29:7f:40:2f:a2:45:
65:92:54:c0:98:ae:25:b0:f7:b6:aa:30:14:73:d8:53:bd:42:
c5:ee:de:89:e1:0f:89:7e:8f:71:57:0a:fd:8f:85:be:41:06:
10:9f:02:71:fd:5b:3c:42:c2:7f:b0:f8:df:45:45:36:62:bd:
9b:89:96:d3:61:f5:ec:71:2d:b6:09:a9:a9:63:7e:6b:22:fb:
30:69:9c:98:ab:9e:67:18:11:17:98:3b:e4:41:d3:ed:be:08:
44:45:63:e9:03:c1:95:71:b9:d7:80:05:ea:77:1d:09:fa:da:
46:13:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:27:42 2026 by rpki-client