Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
File: olrSzhcYk-YHpyuunQVE_AHTCao.mft (raw, json)
Hash identifier: r3jrJ+pvI8sSKas4QruSe3um3ydeI4F0waN6Hf5w1og=
Subject key identifier: 29:5A:A9:48:D7:FF:47:21:9D:75:E1:AD:07:CC:37:14:0C:1D:9B:87
Authority key identifier: A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
Certificate issuer: /CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Certificate serial: 01A114F3D55D798AB9EB87A0E1BDF9AD5215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
Manifest number: 01AA
Signing time: Wed 07 Oct 2026 06:01:26 +0000
Manifest this update: Wed 07 Oct 2026 06:01:26 +0000
Manifest next update: Thu 08 Oct 2026 06:01:26 +0000
Files and hashes: 1: hB7k-pSsmCCA65cdeBOLaQ0pu5c.roa (hash: VeZsd2ieUrYDf4TqpzlV6sh6N/ypni7g2R6QNYjKO6A=)
2: olrSzhcYk-YHpyuunQVE_AHTCao.crl (hash: bmXG0tOSfANouURPH+8mk+vvMntYWEvZ+fUVDdHBvd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:f3:d5:5d:79:8a:b9:eb:87:a0:e1:bd:f9:ad:52:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Validity
Not Before: Oct 7 06:01:26 2026 GMT
Not After : Oct 8 06:01:26 2026 GMT
Subject: CN=295aa948d7ff47219d75e1ad07cc37140c1d9b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:72:a5:31:6c:38:da:f5:b9:ba:d0:d3:12:
89:93:38:93:25:70:31:e1:66:fd:cb:0e:44:53:48:
93:27:1f:00:65:56:56:17:a2:0d:e1:2e:97:c8:ec:
c8:4d:61:68:35:56:98:92:1f:ce:ba:3d:40:dd:87:
07:76:8d:42:59:98:07:a3:d9:39:6d:ea:e4:28:cf:
a4:58:54:69:58:52:5c:40:25:63:ed:b9:e9:cc:06:
e9:2f:f0:64:39:00:72:7c:d0:bd:4a:b0:e3:01:6b:
5b:ff:fb:2c:c6:7f:03:55:1c:62:2b:d0:b5:9b:26:
22:5b:4e:79:5b:f5:20:36:04:93:f4:14:82:91:45:
e6:e8:07:ae:21:2a:9b:7f:bb:a0:d5:e7:e5:97:e1:
83:12:1f:ab:16:6f:47:1c:3d:b6:bf:99:9c:11:86:
8f:13:00:d7:e0:1b:68:bb:1c:ba:22:c8:bc:43:c1:
3f:20:17:9c:7d:4e:d0:c7:91:d2:b2:ae:49:bf:3f:
aa:fc:e6:31:a7:2e:60:af:46:c9:0b:7a:43:f7:6a:
08:8d:dc:2d:9d:c4:c9:5b:87:b2:88:90:e4:c0:be:
b7:97:95:b2:61:19:d1:af:fb:d0:e3:35:cc:82:25:
f9:86:2e:08:56:f7:f1:23:99:02:a1:95:89:03:a0:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5A:A9:48:D7:FF:47:21:9D:75:E1:AD:07:CC:37:14:0C:1D:9B:87
X509v3 Authority Key Identifier:
keyid:A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6f:5c:42:61:ce:23:ad:6e:2e:6f:0d:4e:f8:7c:15:71:14:
78:bc:af:f3:c3:30:4e:b1:b6:16:23:ea:7a:8d:81:89:f3:b2:
2a:1e:4a:d8:b6:38:d9:26:0f:69:68:53:d0:49:f0:48:f4:5e:
32:56:d7:14:ba:50:56:8a:9c:f1:b3:b5:13:8b:7f:42:f5:b0:
7a:6b:f8:ca:6f:f3:89:45:a1:54:0a:22:68:84:a6:b2:ae:bf:
34:1f:b2:cf:cc:07:f8:aa:f9:6d:7f:83:a3:6a:84:2f:a8:d4:
03:4c:b6:2b:13:93:bb:3d:79:f6:f6:49:23:60:81:6d:bf:80:
15:c2:74:4a:5c:c5:ad:56:30:3c:bc:2c:1f:75:fe:c1:66:04:
31:20:ce:32:cd:49:60:57:ff:4f:15:64:1c:e3:68:3b:78:80:
53:33:60:f1:bd:43:fe:00:f5:f0:14:31:5d:5a:cd:64:a3:6c:
8f:0a:bc:55:23:81:f5:d5:53:3a:47:86:90:88:cb:d8:81:75:
64:cd:45:98:0e:bd:6b:80:07:f2:ed:3b:8d:b4:12:a8:db:cf:
46:9d:2f:c5:fe:70:f2:eb:5b:36:26:1f:19:a2:88:e6:c2:72:
fe:21:1e:ba:e5:d2:e6:42:3a:d8:83:f4:fd:ae:5f:e5:4d:95:
f1:6a:17:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEU89VdeYq564eg4b35rVIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNWFkMmNlMTcxODkzZTYwN2E3MmJhZTlkMDU0NGZjMDFk
MzA5YWEwHhcNMjYxMDA3MDYwMTI2WhcNMjYxMDA4MDYwMTI2WjAzMTEwLwYDVQQD
EygyOTVhYTk0OGQ3ZmY0NzIxOWQ3NWUxYWQwN2NjMzcxNDBjMWQ5Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt49ypTFsONr1ubrQ0xKJkziTJXAx
4Wb9yw5EU0iTJx8AZVZWF6IN4S6XyOzITWFoNVaYkh/Ouj1A3YcHdo1CWZgHo9k5
berkKM+kWFRpWFJcQCVj7bnpzAbpL/BkOQByfNC9SrDjAWtb//ssxn8DVRxiK9C1
myYiW055W/UgNgST9BSCkUXm6AeuISqbf7ug1efll+GDEh+rFm9HHD22v5mcEYaP
EwDX4Btouxy6Isi8Q8E/IBecfU7Qx5HSsq5Jvz+q/OYxpy5gr0bJC3pD92oIjdwt
ncTJW4eyiJDkwL63l5WyYRnRr/vQ4zXMgiX5hi4IVvfxI5kCoZWJA6BUDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClaqUjX/0chnXXhrQfMNxQMHZuHMB8GA1UdIwQY
MBaAFKJa0s4XGJPmB6crrp0FRPwB0wmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xyU3poY1lrLVlIcHl1dW5RVkVfQUhUQ2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82NjM0NTMtY2Y5Mi00OTE1LWFmMjYt
ZDJmMWNlYmI2M2FhLzEvb2xyU3poY1lrLVlIcHl1dW5RVkVfQUhUQ2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82NjM0NTMtY2Y5Mi00OTE1LWFmMjYtZDJmMWNlYmI2M2Fh
LzEvb2xyU3poY1lrLVlIcHl1dW5RVkVfQUhUQ2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW29cQmHO
I61uLm8NTvh8FXEUeLyv88MwTrG2FiPqeo2BifOyKh5K2LY42SYPaWhT0EnwSPRe
MlbXFLpQVoqc8bO1E4t/QvWwemv4ym/ziUWhVAoiaISmsq6/NB+yz8wH+Kr5bX+D
o2qEL6jUA0y2KxOTuz159vZJI2CBbb+AFcJ0SlzFrVYwPLwsH3X+wWYEMSDOMs1J
YFf/TxVkHONoO3iAUzNg8b1D/gD18BQxXVrNZKNsjwq8VSOB9dVTOkeGkIjL2IF1
ZM1FmA69a4AH8u07jbQSqNvPRp0vxf5w8utbNiYfGaKI5sJy/iEeuuXS5kI62IP0
/a5f5U2V8WoXbw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:24:41 2026 by rpki-client