Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
File: olrSzhcYk-YHpyuunQVE_AHTCao.mft (raw, json)
Hash identifier: S9Exx84pKCYEz6WB537yhYFotRNqf341MEpvWOUTYAo=
Subject key identifier: FD:53:A4:75:73:94:64:CD:80:99:35:40:51:0E:B6:B5:A7:DA:22:B2
Authority key identifier: A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
Certificate issuer: /CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Certificate serial: 01A0257BA3013984496A7E4BE97E37EAB95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
Manifest number: 012E
Signing time: Fri 21 Aug 2026 18:00:54 +0000
Manifest this update: Fri 21 Aug 2026 18:00:54 +0000
Manifest next update: Sat 22 Aug 2026 18:00:54 +0000
Files and hashes: 1: hB7k-pSsmCCA65cdeBOLaQ0pu5c.roa (hash: VeZsd2ieUrYDf4TqpzlV6sh6N/ypni7g2R6QNYjKO6A=)
2: olrSzhcYk-YHpyuunQVE_AHTCao.crl (hash: WE+EzbpNYM9SxhST2ML73CDqMXkiS+E3cOtSphBv5ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:7b:a3:01:39:84:49:6a:7e:4b:e9:7e:37:ea:b9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Validity
Not Before: Aug 21 18:00:54 2026 GMT
Not After : Aug 22 18:00:54 2026 GMT
Subject: CN=fd53a475739464cd80993540510eb6b5a7da22b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:58:9e:14:e2:c1:79:07:d9:7a:95:d3:70:
04:34:59:d4:5f:b3:f0:5d:f8:85:ba:cd:f1:0f:e2:
da:7d:9b:cd:c1:bf:91:4b:22:45:04:e7:7c:23:82:
b6:b7:ed:f8:f0:33:08:d1:f3:ea:d6:a6:61:29:c8:
20:08:3a:df:a1:9a:f4:e0:07:c9:a9:93:eb:4e:11:
32:fe:a6:3c:db:29:c1:7e:e4:84:c4:bb:60:c8:70:
34:36:74:b0:d4:02:3b:cc:14:3c:09:c5:04:03:c3:
9c:f3:12:d4:da:c5:50:78:03:63:0e:13:13:18:f5:
66:4f:9a:16:98:78:a0:2a:5c:0b:03:9e:63:85:06:
47:e5:db:46:a6:88:ce:81:78:cb:e8:75:2f:d8:fd:
62:f8:8a:06:40:5c:f1:45:99:91:eb:82:b8:fe:78:
f9:aa:e4:09:e3:81:05:00:0a:66:c9:f0:5f:50:26:
f3:86:6d:3c:7b:50:38:76:43:ec:0b:f5:50:3c:8b:
f7:eb:66:99:6f:2c:ed:dc:c3:1a:fd:b9:c4:56:e6:
9a:aa:d5:c5:29:23:ad:44:d1:63:9b:3c:06:e9:5e:
64:33:90:e8:01:d0:16:d9:00:99:96:58:31:48:ce:
fa:1c:11:d3:46:73:da:8f:0e:61:59:d5:4d:06:ca:
05:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:A4:75:73:94:64:CD:80:99:35:40:51:0E:B6:B5:A7:DA:22:B2
X509v3 Authority Key Identifier:
keyid:A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2e:b4:aa:a8:ba:c4:76:79:4a:02:06:3e:39:83:6a:0a:4f:
3d:3b:bc:51:05:78:fc:8f:f5:3e:59:6f:b4:60:0c:43:0d:88:
81:68:ca:13:4b:1e:1b:7a:3d:1d:df:fe:e4:26:d8:fd:31:65:
01:bf:cb:3d:ef:f0:10:45:7f:d8:fb:4d:77:9f:0e:d6:b6:41:
c2:70:9e:9b:48:df:b9:04:30:c3:31:8c:c2:0b:dc:a1:09:43:
1d:16:eb:83:f0:27:90:6d:e5:0a:06:84:bd:41:dc:fe:5c:a1:
fa:63:54:b8:e0:9f:dc:2d:0a:b0:8c:af:56:54:27:4c:59:81:
ef:17:ae:25:b5:6a:28:51:db:36:5c:d5:82:10:d4:c4:18:f7:
32:1e:63:d9:f4:c1:fe:7d:da:6b:7c:1a:4c:86:92:8e:a9:fd:
a7:6e:ff:da:de:a0:b4:a0:89:90:39:e3:8c:45:39:7f:4c:bf:
3d:4f:51:82:e0:16:5a:96:7b:2b:87:9f:64:b4:ce:89:30:ab:
69:06:2d:f5:aa:e5:73:41:f6:2f:9a:1f:fc:92:3d:ff:7c:12:
79:f3:e0:4a:0f:5f:72:5a:0d:39:7f:75:eb:b0:74:60:30:a3:
d9:69:53:d4:d7:48:48:0c:18:df:74:1b:05:56:c5:23:b9:d7:
96:ce:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:24:01 2026 by rpki-client