Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: b68C5/KcytZT3/xrjOSf+GjNx6nf3nZ/0W7Atz/QuUI=
Subject key identifier: 44:8A:47:62:C4:D3:B5:F5:D2:2B:94:4C:54:72:50:D0:86:28:10:09
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 019F130AA0A37352323CD858F8F6B63606A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0DD1
Signing time: Mon 29 Jun 2026 11:01:31 +0000
Manifest this update: Mon 29 Jun 2026 11:01:31 +0000
Manifest next update: Tue 30 Jun 2026 11:01:31 +0000
Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: NmSswZD5gmAd1JsD83BIpZZrG30U922rh0GC+fUmo1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:a0:a3:73:52:32:3c:d8:58:f8:f6:b6:36:06:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Jun 29 11:01:31 2026 GMT
Not After : Jun 30 11:01:31 2026 GMT
Subject: CN=448a4762c4d3b5f5d22b944c547250d086281009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:bd:37:c4:f9:75:38:b4:96:de:28:b1:60:
88:5f:6d:24:ef:02:c0:1b:fc:8f:1e:de:34:e7:e7:
5b:07:9d:5a:fd:9b:be:d4:1f:1d:71:df:51:92:d7:
c8:e8:e6:c3:35:f4:bc:94:e9:14:ee:5f:75:76:78:
66:06:a2:16:db:ac:15:86:64:c2:8c:5f:ea:9d:58:
42:ed:c8:99:b9:08:bf:f9:41:56:f8:19:88:8c:c5:
23:32:d0:d8:f5:ca:be:df:b4:06:3d:57:c9:d6:dd:
de:1d:eb:09:d9:95:47:c8:52:87:9f:3f:d6:9f:ea:
49:83:a0:4e:c8:8f:c7:e4:6d:3b:b3:41:ce:b8:5c:
9f:f4:c2:b5:12:65:ad:c1:e2:70:84:1c:a5:4d:38:
c2:09:6d:5e:36:c7:24:32:12:13:21:e2:3a:f1:1f:
67:31:dd:40:50:a2:70:e6:57:33:87:25:48:09:65:
0a:66:88:e2:91:cc:68:ae:bb:dd:4d:a6:3d:36:04:
56:cc:7d:6c:f1:91:b2:c0:3e:47:50:9f:ce:97:c6:
fa:b2:d9:47:5d:2b:d1:4e:8a:60:5b:9b:76:c4:bc:
63:1b:1c:88:a1:5a:79:f6:46:2b:1c:77:23:2a:93:
d5:2d:bb:d9:22:2c:74:0e:8d:08:a8:8f:63:95:8a:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8A:47:62:C4:D3:B5:F5:D2:2B:94:4C:54:72:50:D0:86:28:10:09
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5a:88:64:99:af:b8:dd:c5:9e:c0:a9:d1:ae:d5:63:ae:a4:
e6:d8:00:99:79:03:35:ee:00:be:35:ab:ca:66:5f:e0:cb:d0:
22:b4:6f:0d:51:3f:72:3a:44:58:8c:4e:a3:be:01:09:e8:d9:
66:b0:4e:6a:ad:2f:1a:84:56:15:ff:6b:52:f4:df:fc:77:a4:
a8:79:e4:25:86:7c:39:bf:aa:2f:d5:c6:89:6e:ac:36:c8:1c:
81:e9:33:69:2e:89:f9:78:14:5c:64:c1:19:8d:0d:3c:bf:59:
54:de:2d:89:35:63:eb:5d:64:62:a5:39:d7:06:ba:8c:a0:7c:
60:79:d6:45:99:ee:30:61:2e:ed:76:32:75:f6:d4:bd:e5:7c:
35:03:28:30:8b:e6:d5:95:3a:6d:ac:f3:72:ba:fe:c6:5e:27:
8d:ee:c6:8e:8c:33:7c:3e:17:5d:3c:da:c2:d6:3b:c7:e1:80:
3e:48:df:ae:0c:f8:f4:b0:d2:1d:42:bc:1e:3a:91:42:a5:96:
13:4e:37:cb:a5:29:6f:8c:a5:0b:4c:80:65:9c:8e:07:3a:d7:
b0:ab:aa:4e:d5:68:58:3d:05:00:4b:5f:70:ab:b5:e5:89:6f:
cd:b9:a2:66:66:63:c8:ef:90:64:9b:78:18:58:79:d7:11:cc:
2f:49:df:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TCqCjc1IyPNhY+Pa2NgaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGNhNDRiNGFiNTQ1MzNmOGI1MTk2Y2Y5MmQ2OGRlYjhm
Y2M1ZTIwHhcNMjYwNjI5MTEwMTMxWhcNMjYwNjMwMTEwMTMxWjAzMTEwLwYDVQQD
Eyg0NDhhNDc2MmM0ZDNiNWY1ZDIyYjk0NGM1NDcyNTBkMDg2MjgxMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOK9N8T5dTi0lt4osWCIX20k7wLA
G/yPHt405+dbB51a/Zu+1B8dcd9RktfI6ObDNfS8lOkU7l91dnhmBqIW26wVhmTC
jF/qnVhC7ciZuQi/+UFW+BmIjMUjMtDY9cq+37QGPVfJ1t3eHesJ2ZVHyFKHnz/W
n+pJg6BOyI/H5G07s0HOuFyf9MK1EmWtweJwhBylTTjCCW1eNsckMhITIeI68R9n
Md1AUKJw5lczhyVICWUKZojikcxorrvdTaY9NgRWzH1s8ZGywD5HUJ/Ol8b6stlH
XSvRTopgW5t2xLxjGxyIoVp59kYrHHcjKpPVLbvZIix0Do0IqI9jlYpN0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESKR2LE07X10iuUTFRyUNCGKBAJMB8GA1UdIwQY
MBaAFKHcpEtKtUUz+LUZbPktaN64/MXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYt
NTM4NmE3OWFkZTgwLzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYtNTM4NmE3OWFkZTgw
LzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFqIZJmv
uN3FnsCp0a7VY66k5tgAmXkDNe4AvjWrymZf4MvQIrRvDVE/cjpEWIxOo74BCejZ
ZrBOaq0vGoRWFf9rUvTf/HekqHnkJYZ8Ob+qL9XGiW6sNsgcgekzaS6J+XgUXGTB
GY0NPL9ZVN4tiTVj611kYqU51wa6jKB8YHnWRZnuMGEu7XYydfbUveV8NQMoMIvm
1ZU6bazzcrr+xl4nje7GjowzfD4XXTzawtY7x+GAPkjfrgz49LDSHUK8HjqRQqWW
E043y6Upb4ylC0yAZZyOBzrXsKuqTtVoWD0FAEtfcKu15YlvzbmiZmZjyO+QZJt4
GFh51xHML0nfKQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 16:37:22 2026 by rpki-client