Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: qFjfsIpaQP79F43pevz/tQrqTcnO89ygXEBId7z9p5w=
Subject key identifier: 64:D2:9F:D3:0C:2E:94:75:EB:BA:F5:FD:22:32:EC:22:2D:EC:7D:0D
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 019D98184C9AAD6D3CCEA86EBBBCB26A638B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 21:00:22 +0000
Manifest this update: Thu 16 Apr 2026 21:00:22 +0000
Manifest next update: Fri 17 Apr 2026 21:00:22 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa (hash: w9lR4ON+b59p837ru2OLVhKsOC/JMVjvCSI6iRqeFUs=)
3: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: QO91EWeiaCOBbya+2h4pOhhuj260KhRd3LV4fACa3KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:4c:9a:ad:6d:3c:ce:a8:6e:bb:bc:b2:6a:63:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Apr 16 21:00:22 2026 GMT
Not After : Apr 17 21:00:22 2026 GMT
Subject: CN=64d29fd30c2e9475ebbaf5fd2232ec222dec7d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:be:b9:a7:dc:24:6f:52:67:6d:b8:0b:ce:
5f:f3:7a:04:06:7b:35:42:20:65:4b:7b:7e:d3:10:
b3:5e:97:89:8a:f7:0f:6f:95:78:ba:ba:a7:1f:16:
3a:f6:6b:15:6d:46:a5:57:a4:f1:8f:98:6c:a1:73:
13:fd:0f:8b:3d:f0:1f:cc:1e:07:83:18:f5:d0:89:
e8:f8:99:5a:56:60:89:b4:40:0e:d0:bf:ea:9a:cd:
a4:fe:5b:3d:aa:ff:c3:b1:ce:5d:03:a7:eb:75:f2:
ac:31:9b:10:de:6f:e8:0f:12:a2:14:ae:6b:28:6b:
bc:71:19:69:6e:06:40:27:62:ef:5d:e3:8f:6b:e5:
94:df:1f:d3:92:5d:72:5e:4f:53:20:a5:1d:70:4e:
c5:25:70:2b:82:08:2a:e5:c2:a4:3f:6c:c8:b9:fe:
a4:6c:4b:67:25:8d:1c:5b:1a:15:1d:29:5f:7e:fc:
a3:47:da:84:ae:9f:de:e1:f7:7f:74:74:50:ba:49:
47:f3:8b:cb:db:ca:45:fa:d6:06:13:0e:a8:0e:4c:
44:ff:e2:ec:3c:e1:96:bb:a6:cc:c9:4c:54:68:8d:
7b:48:5e:aa:0a:83:c8:32:60:a7:20:77:a1:ee:45:
e9:0c:be:75:1f:82:f0:22:8e:af:20:8e:7a:19:58:
61:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D2:9F:D3:0C:2E:94:75:EB:BA:F5:FD:22:32:EC:22:2D:EC:7D:0D
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f5:0a:3a:4d:ee:20:3a:71:95:5d:5b:8a:f0:f3:e6:f2:62:
85:57:08:7e:39:a9:0d:bd:d5:1e:9f:33:9d:e0:6d:b6:7a:3f:
5e:5e:40:6c:43:39:a6:96:70:b7:0d:14:60:2c:6a:e4:a6:8f:
06:85:0d:59:0a:f5:e2:d6:ba:12:29:81:88:c5:d7:30:2b:a5:
30:77:77:9f:16:d4:32:8f:37:09:6a:92:03:17:45:3e:7c:60:
40:29:a1:23:87:6d:1c:fb:87:fd:18:9b:0e:65:60:1c:d5:2b:
bf:cd:4b:c2:51:96:d9:21:64:cc:1a:11:7a:0f:a1:35:4f:46:
7c:b7:c5:09:e1:2a:8a:f2:3f:0c:d9:7e:40:5e:9d:af:b8:78:
dd:36:36:e2:ab:2e:a0:b5:04:43:95:34:ef:eb:a1:6e:10:0e:
4c:f8:04:85:72:50:fd:0f:1c:bf:a1:5d:63:06:d9:63:f6:9c:
c0:3f:cb:66:84:c5:30:da:6f:c6:9f:25:04:01:79:f8:8f:10:
e2:0e:2d:cb:19:82:e0:e6:c8:c0:9e:61:97:ce:38:80:09:f5:
b2:fa:e7:b3:8c:06:fb:15:3b:43:ba:5c:bd:34:89:20:e4:8f:
db:54:08:c6:e0:29:fb:8e:c7:8a:14:f9:48:31:e1:d6:72:dc:
33:bd:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:55 2026 by rpki-client