Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: uzdlCM+IYoAtPCbWB5YszYmKk6KiILVocHPzXuE+wNY=
Subject key identifier: 4E:C3:FE:87:C2:A3:37:2F:BD:B9:13:13:83:9E:41:4E:09:44:C5:3C
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 019D3789189FCD63049D5D3C4FB3B0589CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 03:00:24 +0000
Manifest this update: Sun 29 Mar 2026 03:00:24 +0000
Manifest next update: Mon 30 Mar 2026 03:00:24 +0000
Files and hashes: 1: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (hash: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38=)
2: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (hash: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80=)
3: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: m6h+9Kx9yBs3OZV1tv/0g+EzlKxmvAJsAVi1bWmO63o=)
4: tQUf77NTQrBxw1fcSdCVANHeaJc.roa (hash: CFQEHCkhPkChPEYjQ/kOlbiTx1FtdSWfctFe9uQ1V1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:18:9f:cd:63:04:9d:5d:3c:4f:b3:b0:58:9c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Mar 29 03:00:24 2026 GMT
Not After : Mar 30 03:00:24 2026 GMT
Subject: CN=4ec3fe87c2a3372fbdb91313839e414e0944c53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:a8:04:99:01:99:7b:da:de:6a:a5:2b:33:
83:fa:b6:0f:f1:83:ea:99:08:1b:7c:c8:26:6e:64:
98:c9:33:a0:04:bf:70:81:ad:f8:a6:b1:9d:6e:d8:
6d:4b:d3:7b:e8:75:40:d2:97:39:2d:17:2f:3a:32:
ee:2a:3b:8b:af:b5:e4:71:17:d9:51:52:3d:81:41:
80:00:6c:35:a4:8e:a1:7b:55:d7:14:53:7f:02:26:
03:68:63:d9:c3:e2:93:a4:c3:aa:70:f7:de:17:36:
0a:6a:46:3a:24:30:ca:a5:5b:a0:02:32:bc:51:bc:
4a:09:b7:ad:da:97:63:9d:30:10:c4:f8:e0:16:26:
68:a1:ea:b0:07:06:79:9e:3a:51:a7:cb:e7:f0:75:
b3:74:a0:ab:e7:6d:f7:11:f0:2d:fd:3a:57:33:ce:
18:8d:32:9a:53:85:85:3b:83:57:55:d1:9e:6f:a1:
d9:ec:3d:35:e7:88:19:49:ca:93:7a:16:37:10:bd:
c7:ce:7a:72:49:be:04:07:b7:4e:a5:8f:8f:ab:0c:
23:80:20:49:3d:1b:25:6e:3b:af:c3:7c:6c:5e:07:
be:e9:33:8c:98:ba:99:54:04:f9:ca:a3:81:aa:09:
df:5c:22:fd:28:07:b8:03:d1:c0:c0:cb:b9:81:5a:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C3:FE:87:C2:A3:37:2F:BD:B9:13:13:83:9E:41:4E:09:44:C5:3C
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c5:d3:0d:16:df:47:b7:01:13:2a:eb:d1:da:fe:eb:c0:df:
e0:00:25:2e:38:f6:e4:be:31:24:51:39:25:c3:13:50:c2:36:
06:d3:fa:da:18:96:3d:ed:35:66:23:f8:b3:64:29:c1:d9:37:
cf:c5:cc:e9:40:f1:f4:9f:17:61:d9:a3:75:99:63:07:9f:99:
7e:9f:93:31:71:17:63:00:d6:a7:b1:5c:96:e6:68:b5:e0:04:
62:b2:57:b5:f0:63:38:42:a1:65:41:33:6b:2c:24:b7:61:8f:
c0:00:4e:c4:17:1c:84:34:0c:70:d3:31:3b:ac:7e:07:d4:25:
f8:6b:5f:79:34:10:d5:cd:9f:b7:aa:c3:9e:97:3b:fe:80:b8:
c6:83:8a:ac:e7:b6:f9:05:fc:1b:56:2e:43:5e:27:58:68:6c:
c4:1f:00:f2:fc:e7:27:3a:32:57:eb:5b:2e:0d:dd:ab:e1:b8:
71:8c:85:7f:d2:af:57:c9:f8:29:b1:66:a8:f1:3b:10:44:26:
c0:64:cd:d3:47:1d:98:f2:6d:6b:b8:3c:71:99:74:fc:5d:41:
6b:cb:a3:20:78:fd:cd:7b:e6:c0:6e:4c:f3:0e:31:7f:17:e1:
cd:68:66:a1:36:ca:8d:a0:d9:a5:a4:6f:53:a7:70:bb:a0:d9:
2f:11:c4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:50 2026 by rpki-client