Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: 2fNQA5oh6s/YBP2/n9xFQMgq6k9jjWFCr0X69c52yx4=
Subject key identifier: B4:52:52:C4:3D:FB:25:38:2D:7A:98:78:F4:BD:16:EC:41:C4:B0:C1
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 01A13E9519475E53679769D557317C1DD9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 0B83
Signing time: Thu 15 Oct 2026 08:02:00 +0000
Manifest this update: Thu 15 Oct 2026 08:02:00 +0000
Manifest next update: Fri 16 Oct 2026 08:02:00 +0000
Files and hashes: 1: BtxvHCilSqt_99RwN54PMNqlIS8.roa (hash: FhEZYVel7CDKvGsL+NRAOlWLOkmBn5nDe2CgOk2RwyA=)
2: EK8_5y78AGqLmo0GGbxPtwvU6u4.roa (hash: DqcP+OCR4Q8YT44CeNIv9TZZJCGpzkYEM44m3rG+1XM=)
3: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: wPLDVBgxnASj0e8LzSO9y4GUlgsdxjYhmGz/pVVSbog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:19:47:5e:53:67:97:69:d5:57:31:7c:1d:d9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Oct 15 08:02:00 2026 GMT
Not After : Oct 16 08:02:00 2026 GMT
Subject: CN=b45252c43dfb25382d7a9878f4bd16ec41c4b0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:bf:a7:1f:1a:58:3c:15:c2:17:4c:70:7e:
a2:41:fc:46:c9:e6:21:71:93:e3:37:2b:b3:1e:57:
09:36:33:8f:93:48:ba:04:87:a5:fd:d3:4b:12:9a:
0f:b2:45:ea:d4:f4:b2:17:23:74:af:ab:78:25:67:
a8:89:d0:8e:a3:56:76:53:5a:02:b6:34:57:24:3f:
9f:19:00:a1:47:ad:91:43:e5:57:6d:8d:51:38:44:
cc:da:3f:55:3a:0d:d8:6f:a5:02:fa:40:d6:87:a6:
d0:54:14:67:e4:23:1f:72:1b:b6:f2:2e:de:24:b3:
c6:cc:36:84:a2:01:89:df:83:a0:80:dc:89:b1:39:
3c:77:74:5e:1e:f1:4f:52:99:87:44:ab:46:5d:c1:
17:0a:1d:de:8a:65:5d:2d:a6:db:16:cf:3b:e7:4f:
d7:b8:c0:e1:5b:a0:eb:46:78:49:db:7b:c4:2f:84:
8b:e7:3e:f3:c2:40:97:f9:93:8b:0b:04:3b:f6:7f:
c5:78:74:03:0b:3c:6f:51:e3:f5:1a:43:8c:ff:eb:
c1:9e:e5:3f:1b:83:b0:41:91:db:7e:7f:d7:9d:4b:
af:72:4d:9f:1c:6f:01:f4:88:2c:4e:20:7e:6e:7f:
3e:bf:81:f8:c3:ea:db:11:c1:6c:d1:fb:f2:c8:f5:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:52:52:C4:3D:FB:25:38:2D:7A:98:78:F4:BD:16:EC:41:C4:B0:C1
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7f:9c:31:6a:f2:d7:e5:05:11:e7:58:8d:26:c3:8c:84:71:
d8:04:71:d8:db:f1:11:17:de:8c:b8:b6:ed:a2:79:bd:fb:f7:
dc:1d:fe:57:ee:d5:c5:3a:ed:13:33:6f:a0:fb:67:e0:fd:6c:
ce:46:0d:28:de:14:64:b5:c6:11:4a:7d:69:0f:86:ae:0b:9e:
0a:ca:3b:77:d6:45:84:eb:40:aa:77:84:52:4c:73:f4:d9:3f:
a6:fb:0f:67:b8:02:f2:9c:6a:99:d4:c0:8d:17:94:b3:2d:e1:
80:13:ef:65:eb:32:59:56:6b:26:6a:ff:8a:1d:1d:bb:ce:f1:
cc:ef:15:2f:ca:56:4c:60:17:c2:3a:9f:6d:2d:5d:f7:eb:c4:
98:7b:9e:c1:1b:9a:d2:0a:54:9e:fa:ec:7e:74:9c:a6:c7:69:
d8:d7:f9:45:5c:69:fc:88:e9:1b:82:21:92:4b:e0:bb:74:16:
bb:0e:6f:3f:b4:51:37:3e:c9:5a:a9:64:c3:8a:ca:42:a3:56:
e7:3c:c1:4a:0f:05:00:3f:4c:42:47:fb:68:ab:b1:8f:c8:89:
82:c4:ea:ba:14:aa:3c:4c:02:74:9f:37:1a:c0:08:01:31:81:
f0:82:16:f1:94:fb:d1:b8:3d:03:f9:fb:88:aa:e2:e9:5c:47:
fb:33:d9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:55 2026 by rpki-client