Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: FREo6OQ370kEdBozzSLEFHDoTmAZxdHJRUC3jxqfLF4=
Subject key identifier: 19:0D:88:9D:82:D6:5F:9F:3D:49:9B:FD:6C:4B:2D:21:87:EC:34:BA
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 019CE749F282CD778703F033929C78D884EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 158C
Signing time: Fri 13 Mar 2026 13:01:48 +0000
Manifest this update: Fri 13 Mar 2026 13:01:48 +0000
Manifest next update: Sat 14 Mar 2026 13:01:48 +0000
Files and hashes: 1: JlmLPl8yZYajDEDYFJIxQblUllA.roa (hash: OZunBJk4QSRLEbPmLCf0a9buRk1XuEa/uVL88IZWWcY=)
2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: 6aakDTBW4GXCY+EBZvVFYUOPaCtl7QafzPKAPdzBbZw=)
3: iymLNSfrGteB5LjphJlzGYnT3TY.roa (hash: 4GFJqU/oRsMPs+tpQw0yC/lEWdSZBWtvgKAPRXVnoCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:f2:82:cd:77:87:03:f0:33:92:9c:78:d8:84:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Mar 13 13:01:48 2026 GMT
Not After : Mar 14 13:01:48 2026 GMT
Subject: CN=190d889d82d65f9f3d499bfd6c4b2d2187ec34ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:f1:58:3a:09:98:39:81:f2:c7:d9:65:97:
82:c4:84:df:b1:eb:f5:36:76:5c:3a:89:a2:4f:da:
db:6c:62:91:34:80:fb:93:20:0f:67:b7:5f:35:3f:
74:dc:6f:94:3d:cb:c9:44:68:89:74:e7:ab:da:e2:
bc:db:1e:eb:70:85:4b:38:07:95:ad:f3:b0:e1:6c:
c5:bb:b6:ed:21:8a:d4:59:df:1b:d0:9c:79:ba:c8:
87:d8:bd:e3:1b:1d:91:f6:49:25:fc:ff:2a:04:bd:
56:b3:a0:2f:de:67:8e:c7:58:25:c3:ed:4d:09:2e:
05:58:ee:1c:7a:4a:35:20:26:3f:75:be:5c:25:5b:
b0:1f:bc:e3:e9:06:f5:c7:f4:9b:a4:1d:ec:3d:58:
a7:5f:83:52:ad:bf:2d:e1:9f:0d:6c:b6:fd:8d:cb:
59:fd:6a:2a:c8:54:83:0d:e8:f4:0b:4f:3a:31:4e:
e4:95:79:4f:fb:8d:dd:b7:28:70:80:17:34:75:d7:
c8:4e:b1:8c:96:da:d8:a1:09:b6:9e:da:cf:16:ec:
68:52:c4:bb:f4:54:0c:0c:c8:10:9d:b1:1e:f7:a2:
b8:f4:5e:f0:42:4e:52:ad:7b:4a:ed:4c:2c:88:02:
a9:ca:f1:4e:62:99:7e:7c:20:74:98:93:8a:81:94:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0D:88:9D:82:D6:5F:9F:3D:49:9B:FD:6C:4B:2D:21:87:EC:34:BA
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:38:83:33:3b:ba:7d:04:6f:3f:19:8a:93:4c:e9:6e:41:
2f:9f:32:8a:a4:7c:9c:d1:4e:1a:1e:a2:4c:77:bf:0a:65:bc:
40:9b:f7:d9:de:bb:96:c1:c1:1c:3a:67:2c:e5:b7:06:45:5c:
e6:52:d1:05:d6:7f:ca:85:8e:49:ad:15:b0:e9:8d:59:05:54:
d6:19:ca:03:5e:1a:aa:68:83:35:fe:58:33:34:ca:4d:b0:f5:
88:c4:f3:bd:c8:65:c4:43:ee:9d:ab:a7:f1:97:d8:56:66:17:
c0:dd:4e:09:50:7a:9a:4a:b3:7d:7d:20:07:44:99:e5:d2:0f:
7b:ba:88:fb:12:4b:75:60:93:75:10:21:30:f9:96:72:64:de:
b7:f6:6f:ef:af:91:0d:6d:7b:56:22:0c:01:0d:5a:4a:09:dc:
84:02:06:6c:7b:36:13:64:db:86:e9:6f:ac:75:4d:3a:62:48:
40:42:f5:d5:2e:bc:47:f4:5c:27:ec:bf:89:68:e8:a7:4b:70:
8d:5e:ae:73:77:f9:41:16:ef:b6:bf:92:c1:e9:10:e3:9d:cf:
dc:54:9b:a0:81:68:46:30:74:8a:76:67:d2:47:32:fc:ca:fa:
be:00:d0:1a:c6:ad:aa:58:c3:57:eb:80:5d:9a:36:6a:2f:42:
37:5a:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:30:32 2026 by rpki-client