Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: 3jx/K87zkXpXt644eO8Wm+vlZoMMu0n6FzVJ9bxUAIw=
Subject key identifier: 0B:31:1A:2F:07:63:32:19:6B:70:1B:7E:21:AA:F1:E3:1A:41:56:4C
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 019D389C6D6DB0E3FF0469821B5F2C1961D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: 0528
Signing time: Sun 29 Mar 2026 08:01:08 +0000
Manifest this update: Sun 29 Mar 2026 08:01:08 +0000
Manifest next update: Mon 30 Mar 2026 08:01:08 +0000
Files and hashes: 1: J4UCVAcwWyMQiy7Ru5nI6nUIlKs.roa (hash: K0a1hsmq8k2+rfaUptvdh5+6B/4bXHELmZDPbzQl5PY=)
2: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: aF5ng8VkULJf0RqJUq02W+2lIQ5B/ohWIoy7Vvsifoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:6d:6d:b0:e3:ff:04:69:82:1b:5f:2c:19:61:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Mar 29 08:01:08 2026 GMT
Not After : Mar 30 08:01:08 2026 GMT
Subject: CN=0b311a2f076332196b701b7e21aaf1e31a41564c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:97:a2:eb:92:57:8f:e8:71:1b:3a:64:3c:
41:6e:66:b6:d2:ee:bb:2e:9f:8f:16:ce:6c:77:2d:
05:b6:e2:b9:71:5b:61:02:4a:2a:03:4c:e4:b6:d6:
ce:3d:2d:9d:c2:c1:1f:13:28:c4:25:62:87:79:e4:
5e:df:96:2d:af:e6:6b:f1:f2:ea:48:27:4b:a0:e1:
59:53:8f:43:5e:e1:76:f8:82:32:db:bf:61:65:85:
e9:70:11:06:87:19:e6:74:b8:98:6d:bd:e0:b1:d6:
1c:4b:f8:a9:b6:27:56:59:dd:df:40:c2:74:16:5d:
fe:57:92:e0:3b:95:c2:42:97:d0:1d:84:a7:a3:2f:
21:72:b9:46:52:46:b7:f6:32:7d:9e:93:0a:b9:03:
c8:63:d7:a2:2e:79:3a:4b:7f:74:dd:c9:ee:8a:0e:
7d:1e:d7:b2:15:a1:11:3e:a0:2c:bc:79:1a:c6:15:
69:d5:a4:01:07:e3:74:b5:47:fd:84:04:e4:3d:27:
3b:8a:94:d0:5e:09:f4:c3:2d:d7:df:ed:ba:86:d6:
3d:b9:fb:cf:3b:9f:e8:f0:57:0e:c8:82:45:74:f8:
38:95:93:70:b7:75:d9:37:7a:3b:a6:4d:1b:32:2a:
c2:19:4e:51:23:c4:16:37:b1:62:73:11:ce:a3:00:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:1A:2F:07:63:32:19:6B:70:1B:7E:21:AA:F1:E3:1A:41:56:4C
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:18:ea:2b:07:52:16:e2:bf:df:01:3f:38:80:bd:da:11:03:
41:53:85:65:11:f8:a5:5f:b9:f6:40:fc:d4:15:86:62:e0:4c:
7e:55:96:e1:f5:3f:7a:3c:a5:1e:9e:34:ad:a6:bd:ce:3a:a8:
a4:0f:03:c8:f0:89:07:c3:f6:db:c0:11:d8:0d:a9:db:7a:f3:
91:87:a6:6d:ba:86:cf:db:a8:04:76:1e:b9:64:c1:84:e8:0e:
45:8e:eb:55:1f:df:f0:00:82:db:b9:c3:da:87:35:30:2c:d6:
c3:1e:54:71:de:42:52:f6:ee:6a:91:5a:97:46:30:30:69:f6:
d9:70:16:5a:9f:ae:7a:a8:a3:92:69:9e:c7:38:0c:48:84:09:
9b:b2:6a:08:ae:ba:07:c0:d3:2d:0a:05:46:e4:34:df:40:7d:
6d:a4:4d:b3:84:1f:fe:df:6c:06:6c:98:5c:c9:23:af:dd:85:
c4:aa:02:e7:6e:5a:81:2e:23:55:75:d0:c6:60:a7:93:2c:43:
1e:ba:f1:68:5c:0d:2b:52:10:0c:c4:ae:93:03:66:87:8c:1c:
00:0c:2c:0b:09:40:63:b4:7c:3b:99:5b:48:92:cd:a8:ac:3b:
34:b2:c2:a9:89:ea:4b:65:14:d1:3c:fb:a7:60:01:e4:bf:ef:
a8:d2:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:31:24 2026 by rpki-client