Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: +BaVCfgdN1HPqtJCqhgv/8rMLW981VrZzxCA4nl4Uv0=
Subject key identifier: C8:75:CC:B2:9F:DD:B3:42:C2:84:C4:0B:9A:A2:9C:09:7D:18:39:62
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 01A03A14B18000624E065C3D7ED064D4AFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1A1C
Signing time: Tue 25 Aug 2026 18:00:29 +0000
Manifest this update: Tue 25 Aug 2026 18:00:29 +0000
Manifest next update: Wed 26 Aug 2026 18:00:29 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa (hash: w9lR4ON+b59p837ru2OLVhKsOC/JMVjvCSI6iRqeFUs=)
3: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: lm2iwGNV7qgrJz8yGjddRRpAYv6vlfdygYg2yjCT0wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:14:b1:80:00:62:4e:06:5c:3d:7e:d0:64:d4:af:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Aug 25 18:00:29 2026 GMT
Not After : Aug 26 18:00:29 2026 GMT
Subject: CN=c875ccb29fddb342c284c40b9aa29c097d183962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:71:13:7f:2b:dd:71:3f:f3:d1:8e:5a:08:
2f:b5:44:ad:71:2c:53:6e:10:10:95:b0:23:b9:61:
7b:8b:bd:cf:0b:52:69:9f:55:61:7a:44:d7:5c:1e:
3e:95:ba:d3:e4:d9:7e:e8:24:e7:4e:33:dc:dc:c0:
f4:83:0d:ac:a3:14:33:91:8e:e6:f8:90:2b:51:45:
48:40:10:db:f8:c0:18:fe:be:a5:4d:08:1e:09:a7:
41:2e:cb:52:b9:53:15:c1:1a:7f:be:05:4f:6d:b6:
e7:d8:26:23:84:ad:68:93:13:16:c5:ab:3d:c2:c8:
68:16:42:83:36:18:f9:b6:02:70:c3:00:b8:db:0f:
cd:f2:8e:94:ee:06:75:00:c3:ba:5a:05:13:1d:0f:
be:27:d4:41:0c:9f:2c:04:67:1d:d3:89:61:66:2a:
35:73:a9:ec:10:72:be:c5:53:df:6d:94:c8:b3:c3:
18:50:59:8d:d4:96:75:45:b6:08:da:99:7a:f8:19:
51:ff:de:7c:4b:15:c5:68:be:9e:f7:9f:95:46:a8:
37:fc:90:b1:7c:38:34:7a:5d:44:4f:7d:e7:1a:5f:
7f:02:97:31:08:6c:38:45:8f:18:2b:a1:c5:4b:c7:
79:44:ec:7f:5d:3b:7e:0b:2e:71:4d:5f:4e:e9:ff:
7c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:75:CC:B2:9F:DD:B3:42:C2:84:C4:0B:9A:A2:9C:09:7D:18:39:62
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:eb:18:f0:06:29:e0:5b:55:43:04:66:3f:3b:48:16:c0:3e:
75:b9:84:75:df:b3:ee:4c:68:bc:7f:a8:63:e7:ae:d8:ba:a1:
f6:36:f6:df:56:17:4d:ee:97:e3:d2:34:c7:00:eb:52:00:00:
c8:11:1c:20:2d:9f:5f:fd:26:19:8d:07:b5:9c:79:6c:ed:03:
fc:90:05:df:31:d5:31:6e:90:ea:bb:38:46:ac:9c:9a:15:34:
2c:e2:12:31:76:5c:96:96:f6:a2:42:6c:c8:cb:24:fe:ea:be:
0c:72:b3:ef:13:13:37:93:cd:55:5c:87:2e:de:07:4b:3b:4f:
22:02:0a:0e:76:6f:d7:76:01:9d:e3:f4:7c:a5:f0:b0:e5:3a:
79:01:7e:b7:21:c5:11:b2:c3:3b:50:b2:f8:24:6e:16:20:9a:
bb:d5:73:80:92:0e:2f:a2:7c:7c:7c:ad:a4:34:7b:69:d5:61:
a6:a5:26:84:38:e1:52:3f:40:50:ea:75:0b:42:2f:a2:8c:0f:
60:9c:ca:82:c4:5a:1a:a0:08:e5:3e:7b:ee:ee:bd:e9:3b:15:
d3:6d:9b:10:21:cc:ec:f4:53:a3:7a:f5:b2:ce:96:63:80:0c:
e8:f8:7c:58:36:d5:0e:65:62:97:37:42:db:b3:f3:84:30:bf:
90:4e:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:41:04 2026 by rpki-client