Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: zjauEjtp88L2oAV44MMXBUwwHXsoCRZrp+4LNPCi/RM=
Subject key identifier: 1C:9A:8F:83:F7:12:A7:67:43:E9:25:5E:98:73:2B:4C:AA:03:07:8B
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 01A15F9F1D32AF8CF7459A4D11656C2AD0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 1ABB
Signing time: Wed 21 Oct 2026 18:00:25 +0000
Manifest this update: Wed 21 Oct 2026 18:00:25 +0000
Manifest next update: Thu 22 Oct 2026 18:00:25 +0000
Files and hashes: 1: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (hash: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38=)
2: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (hash: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80=)
3: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: LBZvQv6Mn4By4ueqp++ya63aaVo0UnnsfQwSlRHGxEo=)
4: tQUf77NTQrBxw1fcSdCVANHeaJc.roa (hash: CFQEHCkhPkChPEYjQ/kOlbiTx1FtdSWfctFe9uQ1V1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:9f:1d:32:af:8c:f7:45:9a:4d:11:65:6c:2a:d0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Oct 21 18:00:25 2026 GMT
Not After : Oct 22 18:00:25 2026 GMT
Subject: CN=1c9a8f83f712a76743e9255e98732b4caa03078b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:cf:08:f6:5a:c9:e3:2b:55:1d:49:00:21:
27:18:04:9e:0c:2f:e6:b5:d4:e6:72:3c:bb:73:2d:
eb:94:23:42:1f:b9:b0:57:e2:fc:73:eb:e2:36:dc:
ec:e4:97:e3:02:11:8d:27:6b:5e:46:94:e9:ba:2c:
72:b8:ac:c2:5a:aa:ea:02:c9:dd:c2:9e:4d:44:c7:
c2:de:1a:0d:d5:c1:27:fe:ee:9b:b5:ff:24:1c:a4:
a2:5f:06:4c:a2:ff:05:82:4a:78:81:e8:91:4f:fe:
13:1d:68:37:01:01:39:e1:d9:71:a4:3b:bc:1d:0d:
2c:e0:4d:64:a1:9b:fe:1c:80:2b:36:6c:cc:b4:98:
ee:fc:12:dc:d0:5e:9b:ff:a4:27:b9:94:62:99:d1:
88:1e:4e:68:0f:64:93:a5:b7:b4:32:9b:53:03:a1:
08:b0:0e:b3:f8:52:23:a9:ae:6d:ca:88:23:fe:e5:
56:a3:33:05:9d:24:78:de:4f:d0:34:1f:18:31:c7:
6a:8d:22:84:c4:4f:a1:e1:ed:91:c5:ca:96:07:2b:
85:f1:09:11:76:a8:2a:86:e5:4a:b8:f8:5a:8a:49:
ad:4e:c3:59:8a:3a:c1:26:8c:6d:6c:1c:73:9f:63:
3b:cd:10:c2:51:83:e9:42:1b:66:39:44:3e:d3:2b:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9A:8F:83:F7:12:A7:67:43:E9:25:5E:98:73:2B:4C:AA:03:07:8B
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e7:8f:01:53:b8:25:4d:1f:ec:dc:3c:06:7a:3d:53:e2:dc:
ce:6c:2a:1a:54:cc:7e:00:52:ff:06:09:2c:d9:4a:c1:30:47:
13:4c:8c:0c:be:ca:c6:e7:12:1d:f3:ec:b8:fb:b3:55:21:58:
c7:40:45:2d:bb:33:f8:5b:5f:11:f4:f4:b9:a5:64:d8:de:75:
fa:ad:a0:04:f3:a8:25:4b:61:17:af:68:88:48:bc:e7:21:4c:
46:f8:89:69:60:14:a0:ec:41:bd:33:6d:53:07:f1:b5:91:e8:
fd:ca:cf:6a:13:4f:fd:f0:57:c5:1a:bb:5f:cd:9e:7e:c5:4f:
f8:e4:d0:ca:35:e6:58:34:a1:20:1a:bf:2e:24:09:60:5f:77:
6b:bd:64:d3:c8:4b:8a:85:14:e3:ba:73:db:58:0e:bb:96:c0:
ac:4f:f3:b1:fb:8f:c7:24:13:27:98:6c:e4:0d:a1:5f:ce:43:
e1:95:a1:d5:26:d0:b4:92:db:aa:a0:e0:2e:4d:e0:2a:98:51:
79:50:69:30:14:9f:60:d9:ca:18:d0:db:7b:b4:87:c0:62:42:
dc:a6:8f:0d:0e:e5:87:9c:80:f0:40:54:ac:5b:66:3e:26:8a:
59:2a:b4:63:6b:a8:f1:b0:3c:78:d3:48:4e:a9:71:62:97:00:
b6:e9:3c:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFfnx0yr4z3RZpNEWVsKtDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjU5ZGFlZGQ0M2NjOTU3NWFjMzU5NTNlM2YzOTZlMjFi
YjZkODAwHhcNMjYxMDIxMTgwMDI1WhcNMjYxMDIyMTgwMDI1WjAzMTEwLwYDVQQD
EygxYzlhOGY4M2Y3MTJhNzY3NDNlOTI1NWU5ODczMmI0Y2FhMDMwNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlILPCPZayeMrVR1JACEnGASeDC/m
tdTmcjy7cy3rlCNCH7mwV+L8c+viNtzs5JfjAhGNJ2teRpTpuixyuKzCWqrqAsnd
wp5NRMfC3hoN1cEn/u6btf8kHKSiXwZMov8Fgkp4geiRT/4THWg3AQE54dlxpDu8
HQ0s4E1koZv+HIArNmzMtJju/BLc0F6b/6QnuZRimdGIHk5oD2STpbe0MptTA6EI
sA6z+FIjqa5tyogj/uVWozMFnSR43k/QNB8YMcdqjSKExE+h4e2RxcqWByuF8QkR
dqgqhuVKuPhaikmtTsNZijrBJoxtbBxzn2M7zRDCUYPpQhtmOUQ+0ytUowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByaj4P3EqdnQ+klXphzK0yqAweLMB8GA1UdIwQY
MBaAFDi1na7dQ8yVdaw1lT4/OW4hu22AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMt
N2EwZjcyY2JiMmQ1LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80MzMxMjctZTJjZi00MWExLTk5MTMtN2EwZjcyY2JiMmQ1
LzEvT0xXZHJ0MUR6SlYxckRXVlBqODViaUc3YllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+ePAVO4
JU0f7Nw8Bno9U+LczmwqGlTMfgBS/wYJLNlKwTBHE0yMDL7KxucSHfPsuPuzVSFY
x0BFLbsz+FtfEfT0uaVk2N51+q2gBPOoJUthF69oiEi85yFMRviJaWAUoOxBvTNt
UwfxtZHo/crPahNP/fBXxRq7X82efsVP+OTQyjXmWDShIBq/LiQJYF93a71k08hL
ioUU47pz21gOu5bArE/zsfuPxyQTJ5hs5A2hX85D4ZWh1SbQtJLbqqDgLk3gKphR
eVBpMBSfYNnKGNDbe7SHwGJC3KaPDQ7lh5yA8EBUrFtmPiaKWSq0Y2uo8bA8eNNI
TqlxYpcAtuk8RQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:51:23 2026 by rpki-client