Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File: olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier: x8hCWeI+5Gw3pFJohFCZjdVheVzrL8x/JJqfGE8D+1o=
Subject key identifier: 52:FC:6B:B3:F5:16:F8:9F:5B:CF:AA:BC:EE:80:75:F3:19:F9:10:51
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer: /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial: 019D37C02DB3ED0B7502EFD83E1225287E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 04:00:34 +0000
Manifest this update: Sun 29 Mar 2026 04:00:34 +0000
Manifest next update: Mon 30 Mar 2026 04:00:34 +0000
Files and hashes: 1: CLRfdFwGXrsUftlYsSIj25QgAXE.roa (hash: byZOksqWUuMZ5cMKQfW55TQg12R4LvA92IUAqRtFhHk=)
2: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: cpagn/42WWj6G31BaEz8VK8WiBtaWQ60NhWzV/ULFuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2d:b3:ed:0b:75:02:ef:d8:3e:12:25:28:7e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
Validity
Not Before: Mar 29 04:00:34 2026 GMT
Not After : Mar 30 04:00:34 2026 GMT
Subject: CN=52fc6bb3f516f89f5bcfaabcee8075f319f91051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:a6:7e:28:b7:c2:5f:2a:dd:2a:9f:f3:cc:
ce:39:8f:23:71:a7:ba:86:e7:1c:31:31:c6:d8:c7:
e8:a7:47:bf:5d:d4:ba:bd:d3:fe:fe:40:67:28:95:
74:2e:09:52:19:a4:2e:67:e8:c0:5b:1f:5b:a3:ac:
7f:74:a9:55:6e:22:4d:b0:91:96:28:db:0f:4f:5c:
93:5b:2f:a6:91:b6:bd:42:1b:fb:b5:da:08:71:25:
54:f5:30:68:3e:55:da:5d:30:6c:9a:3d:85:7a:97:
41:42:7a:a2:d1:2d:82:f5:a4:2f:39:6a:54:db:6c:
8b:ef:8d:00:56:17:5a:da:ac:d0:56:e1:78:91:bd:
df:e6:f6:40:0c:75:3a:c9:14:14:75:41:ac:87:30:
60:c8:3f:29:06:4f:58:38:94:46:e8:46:1a:8d:c7:
c5:07:18:e3:b6:05:f0:1f:c1:1c:c6:ac:5a:6f:fa:
69:be:de:e5:b3:44:26:a1:25:b3:15:fb:27:55:fe:
2e:0e:c0:f4:b1:97:3c:80:4b:69:90:ff:a0:68:9b:
2f:f9:76:61:be:26:0f:83:18:20:ca:ff:26:c7:50:
9a:94:9f:fd:6f:54:fe:01:71:2c:3e:85:f3:af:01:
de:0a:98:19:65:7e:87:5a:69:95:fb:0e:cd:46:d6:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FC:6B:B3:F5:16:F8:9F:5B:CF:AA:BC:EE:80:75:F3:19:F9:10:51
X509v3 Authority Key Identifier:
keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:06:fc:d4:3b:a1:25:75:7c:71:d6:eb:59:2e:97:dc:05:7c:
e9:4c:94:6c:ba:7c:af:4a:99:77:08:59:5c:39:0c:7f:5c:0c:
05:7c:dc:af:bf:db:35:b7:db:87:bd:50:a8:8e:da:6f:99:ba:
a8:95:03:2b:99:4a:8a:e4:ee:ad:da:4f:48:74:09:4d:6c:73:
b9:e8:4d:ca:2a:fe:c7:4b:b8:3d:e3:01:79:2c:80:13:61:be:
bf:13:4f:b3:de:92:be:64:15:6d:cc:0b:26:75:e6:a7:fe:fd:
88:7d:41:d7:2b:69:a9:8c:80:a5:52:a7:e1:3b:06:07:dc:ff:
8c:87:83:2b:35:4d:45:0f:ef:89:88:d1:df:6b:7c:6f:ad:39:
1c:ea:ed:c1:15:28:ce:61:75:89:cd:0c:6f:d1:ee:37:51:4c:
3e:74:9f:14:03:93:c3:a6:90:d2:e2:3d:62:c8:ab:fc:29:0e:
59:65:d8:95:48:3e:b7:6a:29:94:fa:5b:53:8c:91:40:e9:a6:
41:6f:58:bc:5a:13:f5:96:f5:9f:e3:2a:bc:99:ec:af:9a:de:
c6:48:b3:8c:8e:62:ca:55:46:ce:65:fe:50:63:c4:b2:f0:2f:
f9:b8:46:c0:6d:f2:b5:9f:02:59:64:77:af:b2:9d:31:d1:cd:
5b:a5:09:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wC2z7Qt1Au/YPhIlKH5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTEwMjc5YmUxMzhjNDJjZGVmNjI3MThmMGY2YWZhY2Fl
MTgxOWUwHhcNMjYwMzI5MDQwMDM0WhcNMjYwMzMwMDQwMDM0WjAzMTEwLwYDVQQD
Eyg1MmZjNmJiM2Y1MTZmODlmNWJjZmFhYmNlZTgwNzVmMzE5ZjkxMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWamfii3wl8q3Sqf88zOOY8jcae6
huccMTHG2Mfop0e/XdS6vdP+/kBnKJV0LglSGaQuZ+jAWx9bo6x/dKlVbiJNsJGW
KNsPT1yTWy+mkba9Qhv7tdoIcSVU9TBoPlXaXTBsmj2FepdBQnqi0S2C9aQvOWpU
22yL740AVhda2qzQVuF4kb3f5vZADHU6yRQUdUGshzBgyD8pBk9YOJRG6EYajcfF
BxjjtgXwH8Ecxqxab/ppvt7ls0QmoSWzFfsnVf4uDsD0sZc8gEtpkP+gaJsv+XZh
viYPgxggyv8mx1CalJ/9b1T+AXEsPoXzrwHeCpgZZX6HWmmV+w7NRtZZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL8a7P1FvifW8+qvO6AdfMZ+RBRMB8GA1UdIwQY
MBaAFKJRAnm+E4xCze9icY8PavrK4YGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yMTQ2Y2EtZTAyNi00MDJjLWE1NmUt
ODZhZjUyZmI0ZWViLzEvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8yMTQ2Y2EtZTAyNi00MDJjLWE1NmUtODZhZjUyZmI0ZWVi
LzEvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgb81Duh
JXV8cdbrWS6X3AV86UyUbLp8r0qZdwhZXDkMf1wMBXzcr7/bNbfbh71QqI7ab5m6
qJUDK5lKiuTurdpPSHQJTWxzuehNyir+x0u4PeMBeSyAE2G+vxNPs96SvmQVbcwL
JnXmp/79iH1B1ytpqYyApVKn4TsGB9z/jIeDKzVNRQ/viYjR32t8b605HOrtwRUo
zmF1ic0Mb9HuN1FMPnSfFAOTw6aQ0uI9Ysir/CkOWWXYlUg+t2oplPpbU4yRQOmm
QW9YvFoT9Zb1n+MqvJnsr5rexkizjI5iylVGzmX+UGPEsvAv+bhGwG3ytZ8CWWR3
r7KdMdHNW6UJgA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:54 2026 by rpki-client