Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: UWJWJtD/2tC/ZMtoqZ+5w8bsY24MBcQ7PhDDZrkSSr4=
Subject key identifier: 0E:83:0C:CB:B0:D4:37:1C:B1:2D:13:8B:59:AC:80:91:BF:76:CB:A4
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 019D38D36C0488AF52A81256F0C5582F8308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: zPAusrouVRsoCh4WTix5xu1kbHqKh24oJihowE8gw/Y=)
2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6c:04:88:af:52:a8:12:56:f0:c5:58:2f:83:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=0e830ccbb0d4371cb12d138b59ac8091bf76cba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:df:16:11:22:f7:9a:a8:fc:e8:f4:a7:99:
9d:08:74:63:cd:ce:b5:b9:fc:69:4e:df:cf:4d:f6:
7b:92:ff:6e:0b:18:77:e0:0f:a1:ab:6f:5c:9c:47:
2c:e5:d0:44:5d:93:c8:3e:b2:cb:bc:b0:0a:35:59:
86:3c:0d:a6:c4:7d:6d:b5:de:67:0e:7f:ed:b2:90:
f8:69:0c:72:c7:a5:e5:83:d0:3b:02:86:49:8e:d2:
57:c7:c8:72:2d:4b:8d:21:a4:6d:23:98:13:23:31:
91:69:d7:17:c5:c7:ce:e2:71:d1:c3:38:d8:2d:54:
fa:2d:19:99:c4:e4:6f:5f:2e:9b:45:84:d6:6c:a1:
1c:60:4d:6d:1b:11:92:8c:8a:69:8d:43:db:7b:7c:
25:16:9b:e7:f6:f3:87:14:8b:49:cf:b4:9e:91:06:
fd:ad:da:ae:87:bb:99:c5:79:98:cf:67:09:8c:bb:
25:a7:59:0f:a5:eb:7b:38:79:67:cf:c1:8d:77:6f:
3a:57:ea:61:6b:f8:53:73:0f:7f:c1:eb:a2:91:d5:
02:1b:c2:ec:73:3a:65:c3:6f:8a:97:81:39:f6:13:
22:bd:3d:61:dc:38:f2:e9:2c:21:3f:eb:50:e3:c5:
21:9d:ff:b4:d6:60:d7:d7:b5:e8:15:5d:cc:27:f4:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:83:0C:CB:B0:D4:37:1C:B1:2D:13:8B:59:AC:80:91:BF:76:CB:A4
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3b:4d:28:e7:24:f6:eb:ba:67:d2:d5:1f:06:1a:c8:db:df:
bc:f7:e4:a1:e2:d1:ac:d6:d3:ce:f0:72:f9:68:e1:70:86:02:
ff:f2:85:a6:bd:cc:8a:4f:c4:c0:f9:f4:41:87:39:a3:34:de:
50:55:b9:36:4a:2a:7f:84:5e:69:93:94:98:ec:ee:09:5f:03:
d3:b2:ba:a3:73:ea:a2:26:38:e6:c9:8d:34:06:2d:74:7c:ce:
5a:ae:52:5a:38:9d:7c:b3:16:35:a1:9c:82:66:d6:71:9e:05:
aa:89:4a:83:8e:f0:50:75:10:6a:e4:cb:4a:89:aa:f8:ba:23:
52:47:74:a2:57:35:ee:da:3f:6d:b4:80:7b:bc:50:94:29:8a:
f0:25:cb:c7:50:b0:78:56:20:6b:32:3a:a6:5f:d1:68:8b:2f:
dd:d0:6c:a6:d9:3c:e3:4f:3a:ad:22:df:75:74:28:25:e0:c3:
a3:7f:10:ae:92:ce:9e:a0:f0:78:9f:01:3f:67:0b:72:04:07:
39:56:e3:94:73:44:fa:23:f9:74:fe:d9:20:4d:80:79:d2:5a:
25:b6:6c:54:52:04:20:ed:d7:5c:0e:ea:15:bd:99:d5:05:90:
a0:ef:bf:cd:6b:98:b0:b2:2a:12:25:6f:94:6e:00:6a:c1:49:
32:84:18:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:59 2026 by rpki-client