Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: amVo8+cWZes00MeqwsSm0z7HdUYrKxcwuu8Nk07MlFM=
Subject key identifier: 93:79:93:DE:96:B9:78:9B:74:2A:93:7B:31:08:D9:86:17:3F:CA:33
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01A17439670E3EB901556392AD1586844854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 17FA
Signing time: Sun 25 Oct 2026 18:01:21 +0000
Manifest this update: Sun 25 Oct 2026 18:01:21 +0000
Manifest next update: Mon 26 Oct 2026 18:01:21 +0000
Files and hashes: 1: CTTk0MJE0an_xvk9FO8LwJZsYUc.roa (hash: bFQlLHsnA4tD0Drty9z2fAjdBaovM/tdDu6dG5CtC+0=)
2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: A1eR0Y4LHerbWtiBKo8djd9Q9qss8LeuX85PdLC76fE=)
3: W4GS62Mu_Fm3ttwFkJp7YSUb9tg.roa (hash: wUDaqbqn0E9CXKfgHQO9vRDvinlTxO3uC4POwPywJo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:67:0e:3e:b9:01:55:63:92:ad:15:86:84:48:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Oct 25 18:01:21 2026 GMT
Not After : Oct 26 18:01:21 2026 GMT
Subject: CN=937993de96b9789b742a937b3108d986173fca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:20:4e:de:2a:cd:04:52:ca:5d:35:bd:90:32:
17:b6:64:5c:68:36:6a:49:94:50:fe:b7:b9:85:35:
6c:52:4b:18:29:80:aa:8b:c6:cf:22:20:03:94:ea:
92:75:5f:1b:65:47:94:43:1c:c1:01:12:48:ac:c2:
14:47:61:c8:6f:d4:89:8b:56:f7:a4:1c:4b:fa:ff:
cc:2a:4d:af:65:18:02:71:be:96:c2:63:81:0a:40:
44:57:98:74:95:7b:28:8f:5d:5b:a4:7a:81:eb:d7:
a7:dd:a5:22:66:f0:75:5f:10:76:2d:f8:b4:f9:ba:
74:02:6e:7b:ef:38:65:50:98:da:5d:b3:ea:4b:20:
6b:13:89:54:cd:f9:6d:d5:59:61:e9:01:a9:20:01:
bb:30:90:db:8f:74:6a:82:60:0d:e7:96:36:00:06:
c7:c2:bf:19:93:49:a2:11:c1:bc:f2:02:44:64:1e:
75:cd:99:9c:36:91:2b:30:5f:7e:50:cd:a7:88:7e:
b2:de:af:8b:95:ad:d4:64:7b:b9:15:1d:dc:cd:fa:
9c:d5:31:e0:91:17:c1:64:9d:cb:a6:f7:92:7c:fd:
21:9b:24:ad:e2:b3:31:6c:24:86:1e:00:2a:c0:94:
da:9b:70:f9:5d:76:ad:d0:95:fd:f2:2b:23:8e:33:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:79:93:DE:96:B9:78:9B:74:2A:93:7B:31:08:D9:86:17:3F:CA:33
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2f:0c:29:3a:88:91:01:0a:f3:45:09:e0:1d:12:b7:05:2a:
de:ff:4b:53:fa:7d:05:90:dd:6b:06:aa:64:b3:a9:e6:3a:17:
36:19:ed:7e:dc:34:0c:db:11:1f:76:b2:0e:0d:07:79:60:5c:
ad:f7:5c:91:5e:52:7a:09:1d:71:92:46:9e:8e:87:f4:8c:a8:
93:86:97:ec:76:36:e6:56:41:95:ef:f0:78:c6:1d:bd:f3:57:
9f:c5:1a:d5:41:a0:f1:9d:a3:07:b6:57:5c:57:51:5b:05:c4:
23:7b:7e:c1:c7:48:21:52:f6:66:41:10:c3:35:81:43:10:be:
ae:16:29:65:ee:f0:6f:08:85:bb:3e:8f:7d:ac:d2:92:a5:2f:
bd:04:10:a4:5c:59:f9:38:01:79:0f:2b:fd:be:5e:25:d9:1a:
55:e3:aa:76:76:f2:88:1c:98:ec:81:ce:79:1c:89:f6:90:2e:
df:73:8f:78:33:34:01:6f:04:88:15:2a:9b:ad:39:81:85:e1:
48:a5:89:da:3e:35:6b:cc:49:c4:a8:55:aa:20:47:f3:2e:6b:
ff:73:e5:f7:cd:98:33:95:ad:72:79:f4:e4:3c:3e:84:75:c1:
01:ee:be:4b:21:ed:84:4b:90:26:da:39:11:cb:40:a3:65:82:
a3:2f:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:19:38 2026 by rpki-client