
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
File: OLB6ACu3vw06zI3UqV8jesYf1ng.mft (raw, json)
Hash identifier: eYUYXqX+ZUXetAGpkqWI66tXczEBVxQIYlZBArr9cms=
Subject key identifier: 7A:29:AB:4D:60:9F:D6:40:C8:99:EC:4F:89:CC:6E:1B:4F:B3:30:27
Authority key identifier: 38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78
Certificate issuer: /CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678
Certificate serial: 019D38D2DE8CD6CFE21B3B7266917E84BBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
Manifest number: 93
Signing time: Sun 29 Mar 2026 09:00:36 +0000
Manifest this update: Sun 29 Mar 2026 09:00:36 +0000
Manifest next update: Mon 30 Mar 2026 09:00:36 +0000
Files and hashes: 1: OLB6ACu3vw06zI3UqV8jesYf1ng.crl (hash: 7T2U5+aCX7g8YXrezL+1x5O/7O/iUN5QpzaBBPEMzKg=)
2: X9K0l2rCyvUlNf67QetfDPsKTvk.roa (hash: SYfx2ip5BHRTUDDyhzpCkqxXM0rSgBrsGDJc73Lx6mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:de:8c:d6:cf:e2:1b:3b:72:66:91:7e:84:bb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678
Validity
Not Before: Mar 29 09:00:36 2026 GMT
Not After : Mar 30 09:00:36 2026 GMT
Subject: CN=7a29ab4d609fd640c899ec4f89cc6e1b4fb33027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:21:28:9d:4a:2c:4c:28:1a:3a:17:f4:5f:
8a:ee:7e:67:9b:3b:b0:52:ad:fa:4b:1a:d0:7a:ba:
a6:e8:c2:1b:64:3e:73:4c:e0:e5:c5:1a:96:7a:d5:
45:5a:12:57:75:58:7a:9e:1a:81:4a:ce:d9:2e:d1:
57:c0:32:68:bc:17:d4:b2:5e:6c:f9:0a:61:6c:69:
5c:ec:5a:aa:84:70:4a:9a:8e:6a:79:2e:ca:e9:83:
a3:e2:7f:5d:d6:a6:3c:53:46:c7:04:f6:50:29:42:
93:72:f0:fe:a5:b0:a6:0b:4a:2b:4d:2a:be:a7:3a:
dd:4a:6d:70:dc:e9:a1:ff:cb:e2:5c:53:d4:f6:6c:
e6:83:5e:04:fe:49:d6:1c:01:83:4a:a8:5d:cf:6e:
b3:f2:b0:a4:f6:c8:ff:ee:8a:33:ee:19:89:fa:ca:
dc:9e:7e:d0:90:e4:75:e5:45:fb:3d:03:47:b7:b4:
6d:12:5a:a8:c9:ad:12:4e:48:dd:68:e8:13:52:29:
ef:36:82:65:e8:8f:70:a2:fd:c9:59:8c:42:e3:f7:
ac:b4:ac:b8:ec:5a:ea:0c:f6:41:07:52:56:c5:04:
ad:c6:11:b1:22:ef:ae:37:40:b1:70:ab:85:b2:f4:
41:6a:b0:de:fe:56:bc:58:0a:08:29:d7:d7:29:82:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:AB:4D:60:9F:D6:40:C8:99:EC:4F:89:CC:6E:1B:4F:B3:30:27
X509v3 Authority Key Identifier:
keyid:38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:23:c4:0b:7a:4d:37:a9:f2:90:59:7f:7b:21:c2:9f:53:97:
f2:0f:9a:01:06:d4:b0:37:69:71:a2:da:14:40:8b:99:82:d2:
99:df:61:87:df:56:d1:33:63:c3:27:d5:5e:2d:77:ba:f0:a9:
98:d5:7f:12:45:88:78:21:e0:2b:ff:2d:1c:35:82:e6:45:8e:
2d:36:1d:a8:98:cc:ab:b0:1a:0a:07:e0:87:f4:05:c1:10:6c:
4f:0c:16:1d:12:16:12:20:e6:c1:2c:95:59:a6:1c:0f:18:33:
4d:f0:d6:02:ab:9d:e9:7b:33:03:83:92:e2:c9:b3:3b:18:e5:
1e:2a:44:be:76:da:d8:62:a4:e7:25:36:68:da:20:26:b5:e1:
ef:62:b1:84:17:02:93:e4:f5:57:2f:3f:a4:03:01:3a:52:86:
0d:4f:1a:b8:84:b5:76:f4:be:68:68:30:58:94:8f:6e:93:b0:
65:b7:de:98:66:d5:4c:ec:39:fb:9b:9f:7f:ed:7d:17:83:d1:
e2:c5:70:30:9e:d1:27:dd:32:5b:49:df:cc:90:9d:7b:c8:82:
2f:4b:b6:08:7f:cd:60:43:35:6f:fa:98:5e:53:c3:c7:75:16:
f7:69:22:70:c4:fa:76:cc:5c:cc:c6:c2:b6:ed:4d:4d:92:68:
3b:cb:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:04 2026 by rpki-client