Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: kIAvuFWc/ok219yZaJd3K0Ehv8AlPPWQ8sD9fl4ve6Y=
Subject key identifier: 45:69:80:C2:B3:9F:EE:DD:12:A4:B6:A4:4C:88:3E:94:93:51:EF:05
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 01A140B9869A372415240BDCED081DBD5E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 1295
Signing time: Thu 15 Oct 2026 18:01:02 +0000
Manifest this update: Thu 15 Oct 2026 18:01:02 +0000
Manifest next update: Fri 16 Oct 2026 18:01:02 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: OdVlgKpRaMVpPIt1gq+qZVNw32zMW62WT51qRyDItug=)
2: lN4-DHRIzePvaAlUx-G8m9WU1Yc.roa (hash: 0H44nitsqtD09E43wUKTwpu5uxvURYIo4SfJ0gjjYAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:b9:86:9a:37:24:15:24:0b:dc:ed:08:1d:bd:5e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Oct 15 18:01:02 2026 GMT
Not After : Oct 16 18:01:02 2026 GMT
Subject: CN=456980c2b39feedd12a4b6a44c883e949351ef05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:6f:a4:cc:e9:77:ef:dc:b2:e3:c0:c6:57:
00:ee:41:43:fa:42:1a:d6:8b:d3:16:91:5e:e9:0c:
77:8f:e6:5e:4e:52:62:d5:40:5f:7f:f5:33:e5:ae:
9f:99:ae:c8:6c:54:36:ae:06:03:47:31:73:8c:e5:
d7:3f:d7:66:c9:66:8c:61:17:78:81:ca:a9:9a:63:
08:17:17:4a:c1:5f:dc:dd:50:61:d1:20:f1:d0:ab:
77:df:8f:bb:c0:f1:00:0b:63:de:6c:b4:9d:31:73:
f4:ac:38:6f:3f:13:f7:f6:60:f7:2b:b0:2e:d0:07:
4b:80:f8:02:33:16:78:ba:23:8a:59:0b:80:e9:84:
b1:95:41:f9:b4:72:46:ed:f3:cc:41:40:64:8c:74:
97:32:65:61:75:76:ca:f8:7a:dd:23:1e:d3:0f:e5:
17:9d:8e:63:78:02:66:92:30:3a:af:69:4b:91:e5:
61:4c:4a:a5:6f:39:ad:df:e3:5a:e6:af:49:c3:54:
c9:de:12:04:2d:b1:c9:78:24:a5:db:67:c4:11:84:
1d:6d:ec:22:74:98:18:ca:f2:6a:ea:31:3a:03:f3:
81:2a:d5:a2:e6:92:f0:30:5b:c9:5a:ca:b4:5e:66:
35:43:ea:ea:40:5e:27:e1:fd:a5:be:6d:d6:d5:8e:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:69:80:C2:B3:9F:EE:DD:12:A4:B6:A4:4C:88:3E:94:93:51:EF:05
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e3:d5:7d:e2:6f:52:a4:0e:bb:1d:d7:96:35:50:b9:ca:67:
26:7a:63:e6:32:0e:c9:82:ce:34:70:e7:0c:06:e2:a5:87:4d:
9c:fa:03:52:4d:6a:d3:4c:57:71:c8:bd:a9:0c:a6:64:8d:01:
2a:39:af:fa:01:b8:41:f1:38:ee:98:0f:7b:d5:cc:6e:e4:dd:
f1:2f:f1:5e:5c:09:f1:9f:11:c0:01:e3:73:bb:45:26:a5:51:
4c:c5:50:08:a5:35:ae:2a:2f:f4:a7:47:ee:14:e7:26:1c:3e:
28:85:c6:e7:38:c1:f6:14:2d:53:cc:44:e8:5d:98:70:67:40:
4c:37:73:97:f8:61:9c:ba:f8:2f:ea:a7:49:da:78:3f:b9:bf:
34:19:c1:45:79:ed:b6:86:55:21:23:66:22:ec:0f:71:ea:dd:
33:14:3c:9a:91:c2:1c:ee:14:60:96:a8:29:19:f3:4b:b4:a7:
e5:f8:e4:ba:1a:d5:75:e1:62:60:83:f4:31:1a:bb:ab:6f:f2:
17:6f:23:64:af:f2:d9:09:25:98:dd:30:97:d4:d9:dd:85:a0:
7a:6d:ec:fd:d5:74:d3:88:4b:50:c6:fa:13:0f:9c:06:65:25:
87:3f:99:be:6b:64:cc:30:13:f6:80:28:71:90:64:3a:17:f1:
c9:1f:23:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:03:44 2026 by rpki-client