Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: qzodQJXrEW121Mb6Ce9ayFv4f+RXpsgblLHQaRcLYOQ=
Subject key identifier: 97:0B:2C:F7:F6:84:6C:2B:8E:83:A8:46:0B:0B:57:FD:F5:BA:6C:85
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019F84C35A73D6424466E32ACAB55EAB221E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 16A4
Signing time: Tue 21 Jul 2026 13:00:22 +0000
Manifest this update: Tue 21 Jul 2026 13:00:22 +0000
Manifest next update: Wed 22 Jul 2026 13:00:22 +0000
Files and hashes: 1: 2h_8VJcabHSDMCKwNPF09jw_Hf8.roa (hash: c7tBoia56lSI7zrOJCToiDaTHfoOdjooQhw4RuRBw4Y=)
2: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (hash: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao=)
3: QZlonf94vrWyMPOp87JAm_NWNqo.roa (hash: w6YhRh8acabp1x77SswHpUR6bqnL4nDuqC2pTtKcfFs=)
4: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (hash: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI=)
5: SpN8Ae02yCS4OsvaV0LVnRQu4n8.roa (hash: R6h5Q2EcPAyb3qsGG8N6McT5J+RVk0PixkSdyl6z20Y=)
6: esU4fsvjE_GKeZBwL9xIr9vckzE.roa (hash: iqFT9wVD2iFSuqGQNBizWBYxsH/4xrNP/ECuVx8b/i4=)
7: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (hash: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo=)
8: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: MZc0bx8szGmYeIeqMbh+AKuyvr39L1okzsK04F7Mmgo=)
9: xKxA9QME2V8f2RH3M46PbYUw4oY.roa (hash: thsfcGsSl3d+8qrEjeuctIXvk8eBzxGLHCJIT/WWbto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:5a:73:d6:42:44:66:e3:2a:ca:b5:5e:ab:22:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jul 21 13:00:22 2026 GMT
Not After : Jul 22 13:00:22 2026 GMT
Subject: CN=970b2cf7f6846c2b8e83a8460b0b57fdf5ba6c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:60:bf:38:e8:b2:e0:64:ec:b4:35:71:eb:
b4:f2:7c:55:0d:23:73:1c:65:4b:33:79:aa:1f:65:
7d:b4:38:3f:55:7e:aa:89:39:d7:94:aa:8d:97:69:
24:bf:af:b7:41:33:ce:74:cb:98:af:93:ec:e5:1e:
03:2c:af:fd:bd:8c:36:f3:37:db:3a:04:3e:d9:d5:
06:9d:ec:84:7f:21:69:2b:7f:e1:7c:45:dc:0a:84:
71:f6:92:a0:85:2a:a4:7a:06:7f:c1:61:d8:db:8f:
02:1c:c6:53:11:df:60:13:33:4f:1c:78:f8:96:93:
77:ef:57:db:e2:78:35:d5:74:bc:15:77:f9:8c:af:
06:9c:b7:25:13:fd:c1:45:ff:55:46:5b:20:a8:63:
53:98:b5:9e:52:65:1e:47:c9:e4:17:c0:80:a5:28:
95:43:93:20:65:13:b7:b6:01:03:ab:13:bc:20:3e:
4f:95:4e:11:91:60:4a:05:9e:15:ba:8c:1c:28:3b:
a8:7d:7f:a8:75:7e:b8:44:35:00:91:43:bd:59:98:
e9:c9:7e:20:b5:40:2f:18:ec:d1:48:32:aa:bd:12:
bd:a2:4c:94:50:38:ac:b8:22:0c:a2:0d:67:a9:e1:
37:1d:ce:92:08:9a:bc:72:6f:25:03:0b:ca:bd:07:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0B:2C:F7:F6:84:6C:2B:8E:83:A8:46:0B:0B:57:FD:F5:BA:6C:85
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a3:61:19:a9:52:ec:b7:dd:a6:7a:62:99:b1:af:9b:04:01:
3e:d0:66:fa:b3:dc:b5:c8:f1:c2:e5:af:5e:e4:57:84:75:24:
48:4c:3f:c8:b7:d8:ca:f8:32:c1:b6:4c:19:02:9f:50:1e:94:
f6:d7:b4:3a:e6:30:f9:95:63:04:54:3a:88:7b:e5:bc:27:90:
5d:bd:f0:9b:17:30:6e:10:9c:bd:5c:c7:46:36:f4:b8:0a:47:
d2:43:34:1f:ae:69:ff:b4:0d:d9:34:fa:ad:8f:10:da:7e:75:
c1:5b:5b:d4:71:f6:52:8a:dc:1b:98:cf:f4:c1:dc:fd:38:22:
52:ba:2b:22:5e:11:4a:cf:36:e6:cf:33:37:70:4f:b4:da:33:
6a:48:87:22:af:58:4e:d7:7b:da:a0:67:2b:6e:cb:d0:1b:c2:
fb:33:52:54:0f:f8:d9:d1:02:dc:72:ad:e8:20:66:9b:a4:cb:
8e:b3:52:f8:8b:7e:3e:cb:1b:2e:ad:6b:ea:e4:d2:29:1b:cc:
c8:b2:5a:cf:fb:dd:2c:24:d4:b3:05:78:a0:4e:51:4a:8c:6d:
23:f2:70:f3:fc:84:80:eb:a7:2a:ee:32:51:57:c6:80:de:24:
50:a4:88:61:dc:7a:4a:bf:f4:9a:d1:59:6d:fb:7e:7b:df:2d:
d9:ae:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:34:37 2026 by rpki-client