Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: 9VZ0D/ssZWsS6OvJddGb00D4/i1GVrEs0kONH3pQZ7c=
Subject key identifier: 75:5D:88:27:7B:60:BF:25:86:5E:71:74:EB:6B:7A:41:80:6E:7F:DE
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019E4EEB5189E258D522A07C037EA4D821B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0EAC
Signing time: Fri 22 May 2026 09:01:45 +0000
Manifest this update: Fri 22 May 2026 09:01:45 +0000
Manifest next update: Sat 23 May 2026 09:01:45 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: Woffn7hjlkI8JGAoX5i1Ck0YxGXdIl/aFgUfxDhbwX0=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:eb:51:89:e2:58:d5:22:a0:7c:03:7e:a4:d8:21:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: May 22 09:01:45 2026 GMT
Not After : May 23 09:01:45 2026 GMT
Subject: CN=755d88277b60bf25865e7174eb6b7a41806e7fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:36:35:ec:c3:e7:77:cf:11:70:3c:bf:e9:
d7:ed:18:93:ee:99:95:f6:85:d4:59:8f:c6:5d:ae:
95:25:21:29:77:c4:cf:98:aa:d9:b5:a3:21:69:20:
b2:f9:4b:d0:1e:60:35:6b:fa:a5:36:8c:3d:2e:30:
60:65:15:a7:3e:25:c6:e3:4e:a5:96:d0:bd:8f:1c:
cf:7e:ef:8a:8b:20:98:48:05:9e:27:c3:15:ad:51:
d0:e0:d4:97:c6:aa:0e:05:a4:c8:95:1a:24:8d:03:
94:1a:d8:52:96:77:40:e5:38:c6:0f:ec:17:b2:3b:
59:9e:24:67:08:b5:2a:59:8f:4d:88:1c:d5:27:fe:
8a:2a:a4:3d:6e:1a:27:6c:42:79:77:15:e0:9c:91:
69:36:f7:15:0e:7d:8f:ed:fe:fb:0d:f2:e7:cd:98:
e4:68:c3:f3:3b:20:c1:72:f0:89:23:dd:dd:7e:54:
71:8f:dc:f2:fd:f4:83:c8:29:7f:a4:25:b4:d3:8c:
96:4e:99:19:f5:bb:93:7c:cb:cf:63:ad:c5:df:cc:
88:43:c9:30:84:21:2e:fc:77:d1:23:d5:82:9e:0c:
75:7d:c0:08:fa:f0:ac:73:d4:2c:8c:b6:c4:d6:13:
1a:43:a9:5a:54:9d:d1:27:7e:80:26:7a:5e:ea:90:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5D:88:27:7B:60:BF:25:86:5E:71:74:EB:6B:7A:41:80:6E:7F:DE
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ff:96:d1:c0:64:bf:4c:ae:46:70:6e:0d:3e:be:92:2f:60:
34:9f:f2:04:d4:32:c8:98:62:53:f3:c6:ca:a2:1b:f5:4b:4f:
52:e9:c6:1e:f5:8a:b2:bf:36:cf:a5:5e:f2:7d:7d:4a:45:ac:
4a:43:86:f8:71:9a:ba:b8:13:a4:15:1f:95:78:91:14:ab:12:
4f:6a:6b:bb:0a:c3:91:1f:de:3d:44:48:b2:3e:ea:48:3c:ee:
e9:3c:78:58:63:0e:35:50:ae:98:04:30:72:84:09:04:6e:6a:
2f:03:b3:39:e1:ec:cf:3d:2a:93:90:b0:0c:65:43:59:32:b7:
db:9c:46:34:8d:1f:6f:b5:a7:f1:ff:da:56:a8:ed:51:6d:1e:
7a:ad:c2:ee:29:67:2d:e1:16:dc:df:27:19:7a:68:3d:fb:ff:
ab:e8:ef:8e:55:98:92:95:2a:08:c8:28:c6:d1:dd:d7:d0:a1:
16:98:95:86:d9:9f:07:17:24:1f:d8:4a:ff:1a:ad:86:61:62:
98:41:c2:20:55:aa:13:7f:9e:1b:62:f1:a8:50:75:01:22:25:
36:17:81:9f:a2:50:b7:fb:ac:e0:ea:bf:3b:ba:b1:86:b1:d9:
7b:8f:5e:db:7a:77:35:8a:4e:54:37:c7:55:ba:c6:70:30:f1:
e2:1b:af:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:17:32 2026 by rpki-client