Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: 4hclNFJh9ursev9PrUKNlD9NMG9tFyhF2ixy53Np7aE=
Subject key identifier: 16:43:B1:7E:BA:FC:96:2B:BF:9D:EE:E9:CC:0F:FA:08:FD:7F:57:71
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 019EE8C57322F2198EEB6F3E77E2C899B655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 169B
Signing time: Sun 21 Jun 2026 06:01:54 +0000
Manifest this update: Sun 21 Jun 2026 06:01:54 +0000
Manifest next update: Mon 22 Jun 2026 06:01:54 +0000
Files and hashes: 1: JeRZIFRirZZdiLPxrOo3DGQulRw.roa (hash: PUBH0pFsT37aG7QBwgLHGxkyy3HPT9mon4gS+W1GrBo=)
2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: fTUw4ZgZPRL1Jbq7zCqVKcz5RbIgaI/TzIP76oYYP90=)
3: UppVVnVbhW896K6XSXwo0aax_7U.roa (hash: UNM/g9tgWKXVsv2rJCX3IpagNuPemJxP01hCnrm2WRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:c5:73:22:f2:19:8e:eb:6f:3e:77:e2:c8:99:b6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jun 21 06:01:54 2026 GMT
Not After : Jun 22 06:01:54 2026 GMT
Subject: CN=1643b17ebafc962bbf9deee9cc0ffa08fd7f5771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e3:37:58:a6:1f:04:3d:8a:c7:d9:5b:3f:3e:
6a:4e:d7:10:a8:c2:c7:fc:98:0e:e9:db:c5:69:ff:
8d:10:51:41:b1:7f:03:0f:b0:a4:1f:40:0f:ca:ee:
ee:fd:e1:d8:04:69:b7:5a:40:c0:69:5f:4b:b0:7a:
0b:81:19:23:1e:9e:3f:fa:15:26:67:84:b1:22:b3:
e7:41:e7:3b:b7:a6:58:f9:ba:91:8e:ec:ba:49:d2:
15:65:9e:a8:7c:04:f7:d8:e6:c7:bc:b8:6a:d0:be:
c3:a2:36:51:21:7d:33:06:de:06:c9:7c:cb:0c:2c:
9c:65:e3:3b:a1:f2:03:1a:d5:b9:7f:ca:14:1d:dc:
6f:b1:71:8e:e5:52:17:b6:3f:00:c5:13:56:22:63:
06:0f:e9:26:64:31:bc:38:02:20:b4:20:6e:43:a9:
9b:61:b1:68:38:b1:8e:b7:e5:67:8e:bf:76:8b:e9:
1a:93:90:f4:a1:f3:c7:20:80:ff:4e:de:0a:2d:e1:
f3:c9:e2:93:bf:ca:41:bd:86:b9:b8:72:e6:83:a1:
8f:f3:8e:32:1c:db:40:69:f8:17:38:b8:69:b3:bb:
3e:0c:38:b6:d4:66:20:af:9a:41:32:c1:04:5e:13:
5e:c7:12:70:80:ba:a4:5f:eb:88:71:7a:c2:32:74:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:43:B1:7E:BA:FC:96:2B:BF:9D:EE:E9:CC:0F:FA:08:FD:7F:57:71
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b9:cd:34:13:43:a2:d6:63:05:d8:d7:06:e3:67:0f:49:48:
b2:db:38:4f:ec:3d:64:a2:95:88:0b:fc:89:7f:c0:69:20:40:
05:c7:9b:cb:d0:ad:78:89:b7:cb:09:d1:91:de:06:40:2d:e5:
26:25:79:e0:fe:de:1a:20:e8:ec:0f:c6:48:bd:7a:9e:4e:88:
b0:ca:11:f9:c1:30:f2:ae:fc:ea:c3:b8:0e:e4:33:67:9b:a8:
48:2e:e3:75:ae:d7:7c:23:1a:61:db:af:fe:bb:03:e4:70:9a:
78:c4:07:b6:df:8e:a9:82:6e:7f:b6:2b:35:23:80:c8:0d:a5:
ef:63:06:55:a3:c9:b5:6b:da:22:1c:6c:dc:cb:37:86:08:fb:
c7:95:10:3d:ba:ab:0f:22:3b:05:72:cd:07:17:8e:43:fa:9a:
68:12:97:09:6c:49:39:3b:6e:7c:8a:1e:ce:5f:cf:44:2f:33:
61:e1:9a:f4:d4:c8:80:bf:93:8d:af:e0:41:f0:4d:19:86:cc:
48:cf:c0:5f:aa:f4:ee:2c:8d:d5:bb:0b:de:78:2a:17:17:b3:
30:30:06:77:ea:73:a9:33:9b:2a:e8:6b:64:e6:80:7c:54:41:
75:73:07:a1:5f:30:f5:81:28:c3:65:7e:b3:de:9d:44:a3:47:
d5:ca:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:07:02 2026 by rpki-client