Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: TD3nZqb59ZN8wvQcAcbTa0hJVQ7c6KzCuXlT/ikhTkM=
Subject key identifier: 3B:E5:E9:FD:D1:11:D2:F8:39:92:56:4E:18:5E:90:99:D3:B4:68:44
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 019E295DFB936EEFE6AD9F092894B5AC6BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0D58
Signing time: Fri 15 May 2026 02:01:25 +0000
Manifest this update: Fri 15 May 2026 02:01:25 +0000
Manifest next update: Sat 16 May 2026 02:01:25 +0000
Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: pjQNr4mAMvNHMz0NcNqD9ml4B8yEq/pvnGnrKpqcxt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:fb:93:6e:ef:e6:ad:9f:09:28:94:b5:ac:6b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: May 15 02:01:25 2026 GMT
Not After : May 16 02:01:25 2026 GMT
Subject: CN=3be5e9fdd111d2f83992564e185e9099d3b46844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:b8:bb:a3:11:62:02:07:15:81:aa:fb:bc:
7f:0c:77:bb:f6:4d:b1:b5:5f:07:eb:3e:74:c7:f7:
2c:f1:16:36:e8:e9:59:e3:60:95:ef:5f:22:f6:27:
f7:3c:37:20:4f:9c:11:82:49:3e:87:88:b5:75:af:
81:3e:f1:4d:ea:c0:67:4b:c8:51:f2:d7:27:6f:9a:
99:3f:fa:5f:8f:9e:29:13:9c:c5:ae:ce:15:76:39:
9a:8c:a6:e1:ed:72:a7:83:9f:7e:cf:bd:15:81:b6:
ec:88:08:a6:db:d2:56:22:a2:63:65:e5:9f:ce:8b:
ef:b5:e2:46:fe:ce:c8:b5:12:5f:7a:f6:45:af:b3:
a6:43:3d:27:10:20:e1:d9:1f:c2:73:ad:99:94:ab:
3c:ee:6e:44:f1:8b:6c:62:87:cd:14:c4:4f:b4:93:
4b:e7:42:29:a5:f1:a9:20:35:76:2a:7f:85:0f:84:
b5:c5:5d:31:68:51:55:09:34:6b:54:b8:b7:10:48:
34:ea:cf:b3:cf:83:55:1e:b3:0f:37:05:65:48:4f:
5f:14:5e:a9:d7:b1:5f:d1:76:6d:c2:c7:b7:8f:a1:
2f:f2:aa:64:0f:ad:e7:4a:aa:00:a8:cb:d2:2c:85:
49:26:04:b0:fe:50:a3:7b:68:1f:a0:8b:40:c5:52:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:E9:FD:D1:11:D2:F8:39:92:56:4E:18:5E:90:99:D3:B4:68:44
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ba:c7:2e:2a:79:45:9d:b6:55:aa:dd:b8:ca:50:5b:11:12:
82:30:4e:58:66:de:bb:a1:2e:6f:a4:b7:b9:d0:02:c7:ad:93:
d8:26:48:c2:df:39:19:23:f4:52:62:e3:f6:59:d9:e1:82:d1:
83:08:27:43:25:42:7d:7a:15:5c:dd:a0:15:21:b7:10:74:46:
6d:fd:4a:d2:33:b7:8f:da:70:d0:6f:db:75:48:29:e7:b1:ea:
85:d1:08:b4:c0:c5:b3:c4:91:bf:26:3f:c4:ca:75:7a:1a:33:
45:4e:4c:aa:06:6b:6b:e7:0d:ec:a3:9d:29:d8:16:9b:69:a3:
5e:56:59:e6:c3:7f:91:9a:26:e4:69:b2:40:ea:d9:ed:a9:6a:
2c:73:fd:84:d6:d4:a1:63:1d:4d:51:8c:dc:66:d7:34:f5:3e:
a5:72:04:d7:ab:d6:2e:df:a8:be:ed:86:f8:9c:b1:42:2e:5b:
18:c6:5e:ac:2a:3c:c5:b7:2a:84:a7:cc:93:fe:3a:2d:98:3f:
2b:e8:f9:82:90:27:f2:22:78:47:22:74:79:0b:53:de:3f:43:
03:df:23:8f:bd:be:4a:d6:64:20:1a:a3:d0:3e:83:18:50:ca:
6f:03:74:de:0e:50:bf:7f:4f:b9:e7:f1:35:da:e7:d1:8d:54:
dd:d7:18:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXfuTbu/mrZ8JKJS1rGv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGNhNDRiNGFiNTQ1MzNmOGI1MTk2Y2Y5MmQ2OGRlYjhm
Y2M1ZTIwHhcNMjYwNTE1MDIwMTI1WhcNMjYwNTE2MDIwMTI1WjAzMTEwLwYDVQQD
EygzYmU1ZTlmZGQxMTFkMmY4Mzk5MjU2NGUxODVlOTA5OWQzYjQ2ODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuK4u6MRYgIHFYGq+7x/DHe79k2x
tV8H6z50x/cs8RY26OlZ42CV718i9if3PDcgT5wRgkk+h4i1da+BPvFN6sBnS8hR
8tcnb5qZP/pfj54pE5zFrs4VdjmajKbh7XKng59+z70VgbbsiAim29JWIqJjZeWf
zovvteJG/s7ItRJfevZFr7OmQz0nECDh2R/Cc62ZlKs87m5E8YtsYofNFMRPtJNL
50IppfGpIDV2Kn+FD4S1xV0xaFFVCTRrVLi3EEg06s+zz4NVHrMPNwVlSE9fFF6p
17Ff0XZtwse3j6Ev8qpkD63nSqoAqMvSLIVJJgSw/lCje2gfoItAxVLMQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvl6f3REdL4OZJWThhekJnTtGhEMB8GA1UdIwQY
MBaAFKHcpEtKtUUz+LUZbPktaN64/MXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYt
NTM4NmE3OWFkZTgwLzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYtNTM4NmE3OWFkZTgw
LzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrrHLip5
RZ22VarduMpQWxESgjBOWGbeu6Eub6S3udACx62T2CZIwt85GSP0UmLj9lnZ4YLR
gwgnQyVCfXoVXN2gFSG3EHRGbf1K0jO3j9pw0G/bdUgp57HqhdEItMDFs8SRvyY/
xMp1ehozRU5MqgZra+cN7KOdKdgWm2mjXlZZ5sN/kZom5GmyQOrZ7alqLHP9hNbU
oWMdTVGM3GbXNPU+pXIE16vWLt+ovu2G+JyxQi5bGMZerCo8xbcqhKfMk/46LZg/
K+j5gpAn8iJ4RyJ0eQtT3j9DA98jj72+StZkIBqj0D6DGFDKbwN03g5Qv39Puefx
Ndrn0Y1U3dcY0w==
-----END CERTIFICATE-----
Generated at Fri May 15 11:18:23 2026 by rpki-client