Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
File: OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft (raw, json)
Hash identifier: c6/ahOsF11u8G6qCE01g1n3fdLV4++H+pvLAzDPIqs8=
Subject key identifier: 1E:DF:01:D6:DD:FE:74:66:B1:F9:FB:D4:3E:FF:1D:9D:CE:6D:4A:EC
Authority key identifier: 38:B9:12:A1:EA:B1:8E:B7:29:74:5E:89:78:13:8B:25:C4:40:77:61
Certificate issuer: /CN=38b912a1eab18eb729745e8978138b25c4407761
Certificate serial: 01A08979DC8F94E6AF3F5E0AC33B9A8420E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
Manifest number: 1129
Signing time: Thu 10 Sep 2026 04:00:59 +0000
Manifest this update: Thu 10 Sep 2026 04:00:59 +0000
Manifest next update: Fri 11 Sep 2026 04:00:59 +0000
Files and hashes: 1: OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl (hash: IV+RX4JYmKtM+Y9lBBaXWC8Yh++hum8fMdbt1I4Cg2E=)
2: etED6K0Bs3O83m7tnMviEpCCv3s.roa (hash: mSfzIWvqw8wBOviQQ25BRfy+WgkAD9TswxPf1xc86M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:dc:8f:94:e6:af:3f:5e:0a:c3:3b:9a:84:20:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b912a1eab18eb729745e8978138b25c4407761
Validity
Not Before: Sep 10 04:00:59 2026 GMT
Not After : Sep 11 04:00:59 2026 GMT
Subject: CN=1edf01d6ddfe7466b1f9fbd43eff1d9dce6d4aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:93:40:cf:93:a5:a1:96:46:15:36:b1:68:
dd:17:a7:d8:6f:d9:32:a3:50:f3:61:05:a8:03:0b:
c3:14:ee:28:59:23:51:61:6a:c7:11:b4:47:d9:cf:
10:73:34:5a:c4:e2:71:7c:37:e7:02:c1:f1:47:b6:
a1:14:34:db:14:b6:16:0c:5d:c2:05:72:92:54:53:
70:fb:93:57:d1:e1:7e:2b:a3:9e:c8:67:da:e9:3c:
f2:92:df:31:90:78:15:90:59:94:a5:66:7a:c6:ae:
0b:d4:c7:00:51:eb:06:b4:9a:95:fa:4b:9f:ff:ed:
91:c5:f4:7e:9f:2b:20:ea:b6:b0:68:dd:f9:ca:66:
23:e1:ca:54:81:22:98:b2:58:31:bd:0b:52:ee:48:
1c:9b:dd:b5:2c:01:84:e5:13:0c:55:0c:ec:58:1a:
32:e9:a3:0b:d9:8f:1a:be:e5:a0:e7:70:03:9b:f1:
a6:78:b4:5f:69:48:ad:ad:c2:2c:54:e5:14:63:6b:
2d:88:2f:3d:17:d2:46:1b:c1:c4:f0:e0:85:56:b8:
5a:28:2b:08:fd:22:4f:a0:df:24:a7:46:0e:d3:9f:
f0:eb:0f:3c:d1:af:a0:05:e2:7d:0e:0d:42:97:a6:
b8:2b:2d:b8:fe:37:01:b7:52:79:7a:c5:0b:57:12:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DF:01:D6:DD:FE:74:66:B1:F9:FB:D4:3E:FF:1D:9D:CE:6D:4A:EC
X509v3 Authority Key Identifier:
keyid:38:B9:12:A1:EA:B1:8E:B7:29:74:5E:89:78:13:8B:25:C4:40:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:10:02:16:4d:69:d3:02:cd:65:c7:5e:f1:55:8d:b8:0e:da:
7b:a9:25:c8:d9:10:dc:de:13:d0:eb:2b:37:5c:5a:fb:5d:0c:
13:39:30:a6:37:8b:a7:a2:33:34:17:4e:77:33:8b:c6:0a:c4:
1f:73:20:32:c7:78:d0:37:a3:39:96:67:ec:1e:b6:7c:72:6b:
88:0a:ac:d9:db:4a:03:46:13:98:8c:e0:27:ed:11:9e:33:67:
97:f5:51:ad:92:c6:41:ee:df:8a:62:20:4f:4e:84:9c:06:80:
e7:f5:bc:1d:aa:95:7c:5f:7a:d4:68:18:04:e1:8e:1d:c0:ee:
04:ad:df:f8:c2:27:3b:bb:39:9a:a7:25:1f:a3:80:9c:64:39:
7a:06:b8:fc:01:a6:f1:72:d6:4e:dc:a8:bc:e8:60:a1:5e:10:
a5:66:05:42:9d:c0:65:c9:07:46:7f:4f:0f:d8:7e:99:bc:cc:
92:8b:cf:e2:b8:04:44:b7:88:f0:39:ec:3c:e5:ae:54:91:9f:
04:d1:6b:61:a9:f0:dc:ea:95:99:72:cd:68:19:d5:c1:77:16:
3f:6e:69:03:e7:dd:3c:c5:ea:41:aa:4a:8f:99:cd:f0:e3:9c:
6c:9a:2f:06:61:44:30:09:22:97:6e:f5:6e:34:79:2a:9b:ad:
53:4d:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:48:44 2026 by rpki-client