Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: eWud+mjVih45P1Le8hjrOxBfajF5+O0hCR4T61K657E=
Subject key identifier: 5B:07:E6:54:28:12:C6:2F:50:53:C0:18:60:E9:1F:BC:59:B0:EE:9E
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 01A06C82B21BCCFF85BE1FEB644CB6407175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 171C
Signing time: Fri 04 Sep 2026 13:01:39 +0000
Manifest this update: Fri 04 Sep 2026 13:01:39 +0000
Manifest next update: Sat 05 Sep 2026 13:01:39 +0000
Files and hashes: 1: 2h_8VJcabHSDMCKwNPF09jw_Hf8.roa (hash: c7tBoia56lSI7zrOJCToiDaTHfoOdjooQhw4RuRBw4Y=)
2: 2olaVDhNeiiP_OOryqJU2C7ExIg.roa (hash: CFBBBaMUmCumEjhXa9EZ5QF+S88qsB/FZwclsZncEao=)
3: QZlonf94vrWyMPOp87JAm_NWNqo.roa (hash: w6YhRh8acabp1x77SswHpUR6bqnL4nDuqC2pTtKcfFs=)
4: RVIXwLiPYVV46x_SokJjK4dp3OI.roa (hash: uNt446qIJ1irJog4FynTK7I6Qj9x6JyOZdVR8VicpsI=)
5: SpN8Ae02yCS4OsvaV0LVnRQu4n8.roa (hash: R6h5Q2EcPAyb3qsGG8N6McT5J+RVk0PixkSdyl6z20Y=)
6: esU4fsvjE_GKeZBwL9xIr9vckzE.roa (hash: iqFT9wVD2iFSuqGQNBizWBYxsH/4xrNP/ECuVx8b/i4=)
7: kOm60nL452mtiYNcQ1MeyFmOk_o.roa (hash: I2UQMu6hqrbitekzOex2s4TwNRegO405AEsyAGOsafo=)
8: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: K9c/RvZUQEFx9W6Dr3SQG4nPUJFUoL1R5MoueVY/kcE=)
9: xKxA9QME2V8f2RH3M46PbYUw4oY.roa (hash: thsfcGsSl3d+8qrEjeuctIXvk8eBzxGLHCJIT/WWbto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:82:b2:1b:cc:ff:85:be:1f:eb:64:4c:b6:40:71:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Sep 4 13:01:39 2026 GMT
Not After : Sep 5 13:01:39 2026 GMT
Subject: CN=5b07e6542812c62f5053c01860e91fbc59b0ee9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:73:5b:8c:cd:65:29:b5:d8:f5:31:69:8b:
65:4e:0e:98:6a:de:f1:27:f2:f9:da:77:30:f6:ae:
1d:04:00:e5:c9:8b:9b:e6:66:7a:cd:15:bb:17:8d:
d2:e7:5a:df:1f:1a:bf:11:23:46:e1:7f:84:33:43:
ac:5b:55:f6:af:ea:60:67:6e:a0:91:f9:17:5a:f1:
c3:fa:4b:48:65:13:52:6f:fe:14:f5:1a:31:8c:58:
e4:44:3c:ac:39:a9:d8:5d:83:a5:19:5a:f6:6d:03:
c4:6b:e0:53:f6:2c:8a:cf:d2:cf:c3:db:63:27:25:
f8:de:13:9b:54:07:c2:6f:dc:b4:33:18:28:1e:bf:
ea:14:1d:b4:a1:2e:d5:e6:6a:92:3e:5c:4b:ac:bb:
b9:ac:e7:0d:a5:15:d8:13:df:7c:42:38:08:98:1c:
aa:86:4e:8b:d7:84:35:86:4a:f1:20:d4:35:49:31:
0e:5c:0b:a3:5d:33:77:d7:fe:f9:d4:c7:f1:4d:99:
ae:50:33:76:1d:28:c4:f2:58:4b:cb:e0:17:a1:50:
b2:46:73:44:e2:94:31:ce:08:9e:ce:aa:ba:1f:e3:
66:e5:35:c4:36:64:fb:66:72:53:49:79:65:63:a3:
27:7e:14:4a:b2:0f:9e:80:8f:8f:29:bb:70:c2:81:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:E6:54:28:12:C6:2F:50:53:C0:18:60:E9:1F:BC:59:B0:EE:9E
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:10:c4:74:be:b7:b9:81:75:b0:65:6f:21:d3:0a:ec:76:3e:
54:8f:c5:1e:eb:5e:e3:9a:6f:7c:95:66:5d:7f:05:cc:09:04:
23:3e:43:4d:0a:ef:25:99:81:09:f7:f3:4c:1a:91:62:0d:c3:
21:44:5e:6f:88:db:74:7b:b9:2c:5f:76:0d:77:58:c0:f4:73:
b5:ad:2b:5e:90:aa:c9:59:79:66:57:9a:07:fb:59:b6:1e:c9:
fe:6a:b3:be:53:34:15:d8:3a:62:a6:7b:15:9f:41:e2:21:35:
63:11:99:08:22:df:b8:6f:1a:10:38:ee:e0:7a:cb:7d:c9:f6:
b6:e2:ef:f6:c9:a8:0b:ac:1f:46:5e:82:2f:8d:94:b8:ee:09:
9c:f1:f1:34:34:f0:12:7b:27:dd:52:37:f4:0e:98:45:3b:75:
f2:5c:31:2c:0d:f2:d5:9b:cb:17:f4:4d:b6:ac:54:2d:e6:a2:
35:b1:52:d8:21:38:2f:23:21:ab:18:d7:62:46:44:2d:07:f8:
c4:dc:4c:98:2a:50:24:4e:ae:72:da:da:b5:3f:42:69:37:19:
41:3e:16:72:39:d4:d3:d5:f2:2e:fc:59:09:72:cc:3e:db:42:
7d:c6:06:d3:d7:6e:65:2b:98:f6:76:82:2a:8d:8d:4e:85:2f:
be:f7:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:13:29 2026 by rpki-client