Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: G8ykkYfS4gNHiXJWA0xcMasG6dawjoq5d2ZL98SB9w0=
Subject key identifier: 13:8A:33:A8:4D:3B:AF:F4:59:DD:FB:50:51:19:DE:13:73:17:3C:E0
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 01A11F3F8DEA29E70A1B8D0A8AEBE4884AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 06:00:21 +0000
Manifest this update: Fri 09 Oct 2026 06:00:21 +0000
Manifest next update: Sat 10 Oct 2026 06:00:21 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: eB4NFLXx7CYlSH3MrSIpsSUOwU+dQxEkuPJiz193VTo=)
2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:3f:8d:ea:29:e7:0a:1b:8d:0a:8a:eb:e4:88:4a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Oct 9 06:00:21 2026 GMT
Not After : Oct 10 06:00:21 2026 GMT
Subject: CN=138a33a84d3baff459ddfb505119de1373173ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:dd:40:20:f7:46:72:86:4c:4c:49:ee:f3:
1a:0a:45:ad:7f:48:e6:51:4c:9b:26:41:26:43:c0:
f6:e5:6a:9d:6e:fd:88:bf:9f:2d:50:2c:65:eb:a9:
d4:a3:c7:9a:18:77:a6:f6:60:ed:bc:3a:24:83:59:
00:0d:9e:6f:f9:df:02:76:d0:0e:4c:6f:6d:5e:cb:
62:9d:0a:d1:7a:12:17:02:0a:55:46:e6:08:ce:b6:
74:a2:b7:eb:20:70:a7:5e:46:8e:cb:9b:d1:85:73:
95:c4:18:59:be:88:fa:19:be:5f:fb:cf:e6:00:64:
70:1f:e0:a2:23:fe:7a:eb:24:ea:9e:d1:ce:25:9f:
25:8e:86:72:f6:e5:c1:73:ec:75:2b:64:0d:a2:b3:
c9:4b:4a:54:24:90:69:3e:e2:14:0d:4d:94:92:9b:
3b:4b:48:93:9a:fa:43:56:56:a4:9a:b9:d3:3f:54:
a3:18:87:1f:3c:b5:df:c3:f5:35:94:33:fb:19:76:
b7:1c:1f:2d:5c:a0:79:23:f7:9b:6f:49:bb:22:9a:
d3:3d:1e:fd:92:50:37:ce:44:1c:66:6a:83:0f:fc:
4d:ce:b3:aa:52:41:3c:80:0d:27:81:e0:3e:0b:14:
ca:d5:7c:3a:7a:ed:0b:b9:cc:9f:8e:aa:4f:c7:24:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8A:33:A8:4D:3B:AF:F4:59:DD:FB:50:51:19:DE:13:73:17:3C:E0
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c2:9c:02:38:bb:a7:f7:6f:e9:38:00:02:a1:8d:e1:f4:0f:
4c:ea:b5:92:96:33:b2:78:a4:0a:b4:be:82:4f:b8:9d:c5:89:
15:c1:de:00:19:10:f5:f3:85:d2:e7:21:24:9e:f3:b0:c3:94:
b5:a0:18:6c:92:05:65:da:2e:ea:2f:d1:a6:67:f4:9b:98:3e:
3b:02:d1:e0:74:01:4e:29:96:cc:b8:2f:aa:e9:6d:b2:08:f4:
b1:cb:fa:41:07:f1:59:2f:96:bb:c5:bb:83:20:57:76:64:7a:
b7:17:af:89:cc:95:17:41:e7:6c:8c:b7:d3:69:88:6f:9d:f2:
a1:f4:f0:f9:22:bd:9d:e3:7e:09:7e:a1:4c:90:60:51:21:b0:
2d:7a:7b:3e:dd:18:a0:f5:9b:97:3a:95:fd:d1:7c:1a:b4:92:
0c:83:6e:e5:60:c7:28:de:d9:3c:9b:4c:a4:b2:91:60:a6:34:
80:e5:7b:84:38:46:9b:81:cd:ab:c3:5a:8a:a4:04:b2:5a:7f:
90:6d:dd:09:d0:73:37:ad:cb:09:63:1f:b4:8c:99:54:a5:45:
e5:b1:cd:72:ed:47:52:15:60:56:3f:a9:60:ac:55:9b:79:73:
d3:52:91:ee:1d:3f:d5:98:ac:91:fb:1c:cb:6d:5a:3a:8e:7b:
c8:0c:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:10:50 2026 by rpki-client