Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: moJtGZrglnAPHA8+KpUsxSUGCu1T2sSmmDcQx7fKsP4=
Subject key identifier: D9:C0:B6:94:D0:E9:2D:75:5A:24:66:5C:8D:36:E7:FE:66:2A:CE:8F
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 01A0BE7994CDD13D123BF93E12F4148A6A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1A61
Signing time: Sun 20 Sep 2026 11:00:34 +0000
Manifest this update: Sun 20 Sep 2026 11:00:34 +0000
Manifest next update: Mon 21 Sep 2026 11:00:34 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: By7I8jjbSqMahxdD4BS2SnbDr7c.asa (hash: QbgmQZT5PQ6E0YbuSg3smNh7SLEoa1rVnzwDnpMWc80=)
3: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: OsPKmoMUAD5l/z2OJYK1JQQB2/3GfzF/Eapyc/RWmaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:94:cd:d1:3d:12:3b:f9:3e:12:f4:14:8a:6a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Sep 20 11:00:34 2026 GMT
Not After : Sep 21 11:00:34 2026 GMT
Subject: CN=d9c0b694d0e92d755a24665c8d36e7fe662ace8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:11:d0:f6:eb:80:41:a4:93:81:68:fc:7a:
bf:d2:bc:5c:30:77:ba:e9:02:02:be:10:7a:b0:22:
f1:e9:54:91:2e:bd:6b:e1:88:0b:61:cc:65:ff:3e:
02:e3:03:cb:f3:d1:ea:c0:1a:fc:f2:01:21:d6:b5:
99:c6:1d:2f:ca:6e:c2:00:60:5a:87:99:a5:67:29:
bf:a3:5a:09:f4:97:11:b5:62:50:4d:da:40:a3:f7:
1e:29:52:d2:71:09:f3:80:2c:0b:0e:b8:7e:4b:c4:
6e:96:64:01:4b:52:ac:8e:26:a9:c2:23:08:d5:56:
46:52:5b:c8:4b:09:3c:ae:56:92:b6:b1:9e:6d:5c:
31:20:2d:d9:5b:d4:4f:14:ef:c5:00:d3:69:66:12:
35:6f:ec:64:f8:6c:fe:b9:f4:9d:d9:d1:8e:5e:bf:
8f:ab:75:80:e7:d7:e7:a0:c1:d2:aa:da:8b:3a:eb:
af:08:b8:f1:8d:a6:57:cd:23:bb:2d:5e:6b:42:20:
46:8b:46:53:d8:de:3c:27:cc:52:1d:41:b8:2a:91:
9d:3f:12:2e:8e:43:d3:4d:da:f0:90:33:bb:01:07:
d0:a1:ef:6a:54:cc:a4:20:3a:15:67:3a:51:0b:cf:
2f:c8:6c:46:f3:57:c0:e7:67:69:6e:08:98:3f:39:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C0:B6:94:D0:E9:2D:75:5A:24:66:5C:8D:36:E7:FE:66:2A:CE:8F
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0c:fc:69:6f:e0:50:e2:d9:9c:58:7d:13:bf:cc:c3:ab:07:
47:e3:09:39:48:df:ed:4d:50:c2:66:03:d5:a8:26:05:c3:79:
4f:35:cd:f4:fe:77:56:04:16:7c:cb:b3:60:af:f8:52:63:36:
55:45:e4:5d:f2:38:26:d3:93:05:eb:35:c8:17:fc:88:bc:1e:
7d:41:5f:5b:36:f5:83:15:c9:84:41:46:c5:86:b2:23:d6:93:
f1:95:c7:37:2d:dd:c5:c2:13:6c:32:0d:e7:d7:0f:8d:7f:49:
63:eb:f1:f9:3c:00:6c:de:b8:f7:f1:02:ad:1b:5a:a5:2d:42:
26:f9:24:cb:32:46:27:f7:8f:c2:50:b6:c6:01:9e:53:66:a2:
7e:e4:10:79:37:f8:e7:d5:37:3f:40:5b:3b:1b:61:ec:67:83:
b4:24:f3:35:b8:52:aa:fc:b8:71:d5:10:1d:c8:02:d2:29:ac:
1b:b2:64:bd:49:9b:2b:fa:2a:f9:a0:4f:04:b4:4d:5f:b3:8f:
86:af:fb:6a:5f:cd:a4:84:70:15:d6:14:40:4d:ff:50:be:16:
89:a1:97:35:72:97:ee:39:a7:7f:cc:63:4c:93:5c:d5:03:46:
f2:ca:ff:f2:c3:b2:2b:91:f5:10:99:13:95:99:0c:24:2e:e8:
b9:74:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:23:31 2026 by rpki-client