Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft
File: OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft (raw, json)
Hash identifier: oBZYu8hZWHGJGfWisqSrTzzWuRou1SY/qpD3ltBJrs4=
Subject key identifier: 9A:51:A4:35:B5:A7:F2:01:57:C6:6F:49:9E:09:E8:4C:E4:C1:98:12
Authority key identifier: 38:BA:0B:9D:0F:1F:67:4B:13:97:CF:CE:A6:DD:46:80:C8:35:1A:F9
Certificate issuer: /CN=38ba0b9d0f1f674b1397cfcea6dd4680c8351af9
Certificate serial: 019FA304DAAA67B1EDA4AE9054CF32AB7E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft
Manifest number: 05D6
Signing time: Mon 27 Jul 2026 10:00:32 +0000
Manifest this update: Mon 27 Jul 2026 10:00:32 +0000
Manifest next update: Tue 28 Jul 2026 10:00:32 +0000
Files and hashes: 1: OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.crl (hash: MljjDVK8/N35KfSxTkjo14LaqLzijmmWTyahVkcuQEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:da:aa:67:b1:ed:a4:ae:90:54:cf:32:ab:7e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ba0b9d0f1f674b1397cfcea6dd4680c8351af9
Validity
Not Before: Jul 27 10:00:32 2026 GMT
Not After : Jul 28 10:00:32 2026 GMT
Subject: CN=9a51a435b5a7f20157c66f499e09e84ce4c19812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:3f:29:34:a2:75:7a:9f:7c:1e:50:3b:7e:
87:0a:f7:5f:04:8a:e2:a8:aa:72:14:c4:51:ee:76:
6c:61:29:87:3e:b1:4e:d7:1c:e0:77:b9:2c:d3:d1:
ef:7f:9a:b9:fd:ad:64:b8:0c:88:75:03:0a:13:6e:
29:1b:e2:4a:61:f2:75:a4:7f:2e:f6:59:cc:7f:88:
3a:f6:b9:9e:95:89:38:10:fd:4e:13:5e:03:a4:75:
20:d3:d4:b9:96:47:2d:01:1c:a5:3a:89:6a:ed:6f:
b5:0d:b5:2b:0d:04:fe:16:01:5e:15:1f:81:c3:43:
cd:ac:91:ce:64:c9:f1:e6:1e:71:04:3c:48:6e:3b:
8f:11:94:b1:8f:6f:d5:95:31:01:b7:f3:26:8c:90:
44:23:3a:fb:c3:d6:e0:43:8a:f0:bb:8d:cb:51:1d:
a1:78:a1:51:47:97:01:bd:e4:c5:06:4a:af:30:f1:
e2:7b:92:c3:c3:11:fb:41:f9:91:47:35:7c:68:87:
63:21:81:d5:9d:b0:22:81:a2:22:76:25:ea:43:65:
80:27:15:0c:9d:bb:b3:3a:ae:e3:3f:dd:33:1e:95:
54:c1:9b:e0:8d:95:72:c0:96:b1:df:c6:94:4b:48:
f0:a4:5e:e9:18:89:88:0e:ae:db:b6:23:44:af:f7:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:51:A4:35:B5:A7:F2:01:57:C6:6F:49:9E:09:E8:4C:E4:C1:98:12
X509v3 Authority Key Identifier:
keyid:38:BA:0B:9D:0F:1F:67:4B:13:97:CF:CE:A6:DD:46:80:C8:35:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:79:f9:83:f1:f2:8c:78:ad:b6:0f:91:8d:9f:58:aa:e2:cb:
66:23:cc:64:2f:e5:4f:31:03:06:ec:37:64:55:08:37:83:69:
93:7c:03:fd:93:a4:92:3e:f3:b8:c9:54:79:1c:a7:b9:81:6e:
b1:2d:e4:71:c4:72:79:fd:b8:a0:21:89:02:20:70:8a:18:ca:
3b:22:7b:85:09:21:c8:c4:78:a5:89:ca:43:25:47:ff:8f:f9:
69:f8:b2:4d:c7:99:83:fc:e6:3a:b2:b3:a5:34:46:f0:60:23:
d0:25:03:96:33:f8:16:6c:5a:89:48:60:fa:76:d3:63:5e:5b:
ac:5e:1c:8a:77:43:7e:1a:72:84:37:8e:ab:eb:b3:d2:83:bb:
ce:d8:3d:f8:cf:39:d7:c0:26:0e:99:ae:25:f0:16:f1:32:d4:
dd:23:fc:dd:fc:69:95:7d:e2:cb:da:79:ea:a1:20:a6:34:67:
dc:d7:cc:54:82:c7:bc:fc:ed:02:32:6d:2c:54:55:5a:81:6e:
96:ef:3f:d0:62:5a:a8:07:58:32:09:69:de:86:3d:0f:cf:22:
a8:f0:c8:19:63:a4:b9:b1:88:e5:e9:d2:77:04:cb:07:5f:01:
b7:75:c7:7e:76:3d:76:ab:b5:41:1a:83:2d:88:6f:f2:38:00:
bc:3a:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:50:18 2026 by rpki-client