Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: TZFk/t/nfs4atmvX+XcawScwGERrp8SxeWd4B8Sy/14=
Subject key identifier: 9B:89:F1:2A:C0:59:0A:6F:DA:A4:76:6B:27:63:D0:2C:59:61:4B:2D
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 01A13E5CC195C3D391008433236F6C0E691A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 0915
Signing time: Thu 15 Oct 2026 07:00:28 +0000
Manifest this update: Thu 15 Oct 2026 07:00:28 +0000
Manifest next update: Fri 16 Oct 2026 07:00:28 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: LlY/KgyoMXRZe78fjlKITnMyLVg8YyJ/UC46rpLxEcs=)
2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:c1:95:c3:d3:91:00:84:33:23:6f:6c:0e:69:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Oct 15 07:00:28 2026 GMT
Not After : Oct 16 07:00:28 2026 GMT
Subject: CN=9b89f12ac0590a6fdaa4766b2763d02c59614b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:c7:0c:29:24:66:03:7b:b8:81:d6:62:06:
bb:2a:ff:09:3e:02:2a:e9:0f:20:fe:84:90:e3:a4:
f1:68:46:1b:0a:30:27:c0:30:13:82:1b:60:72:ab:
f6:56:b1:09:43:29:c0:4a:df:aa:de:6f:45:b4:88:
eb:15:45:5a:7a:31:92:bd:d3:19:6e:50:ed:ce:34:
d7:0f:05:5a:c6:77:6a:65:e9:69:97:57:98:b0:ed:
64:8c:1f:9d:e7:32:53:a7:ca:be:a4:92:2e:9f:94:
68:84:2a:5f:63:b0:2a:27:10:c9:b8:a9:81:ab:c7:
22:9e:92:09:da:09:29:05:5a:68:62:9f:6a:49:b5:
ac:61:0f:c8:f8:3d:c5:7a:fd:92:5a:a8:fd:08:11:
d6:39:3d:73:0c:8f:2f:3c:30:30:f2:48:90:b8:32:
80:05:50:2f:09:75:55:19:d7:b9:95:2e:42:26:0b:
9d:a2:ed:30:c8:47:ac:4b:9d:ca:7c:ca:d7:bd:5a:
ac:4d:a6:84:30:5f:88:9a:90:be:4c:fc:1d:43:ae:
0e:c7:a1:ab:e8:27:82:dd:1a:1b:81:e7:84:97:55:
08:a5:e7:d7:af:38:ca:88:1e:6c:d8:66:53:3f:02:
46:1c:e8:16:8b:d0:35:ab:3d:20:f8:bb:48:4d:9b:
c2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:F1:2A:C0:59:0A:6F:DA:A4:76:6B:27:63:D0:2C:59:61:4B:2D
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:45:50:d4:08:cf:a0:dd:d0:10:1d:3a:64:93:b6:30:47:02:
cc:5f:4a:f2:17:b1:a5:f8:64:37:0f:d7:88:30:38:91:33:2b:
19:93:ce:cc:6e:26:3e:ea:b0:38:c5:f5:83:8c:f2:47:72:36:
7f:08:3e:65:f2:9f:97:a5:a8:89:d1:37:a3:0b:04:fb:4d:a1:
d6:ab:a4:5d:90:b1:49:f2:d5:31:d6:43:8d:68:a0:70:cf:fa:
c2:5d:13:1d:6f:5c:9e:a1:ce:b5:9a:25:d3:a2:b3:3f:92:6d:
66:dc:5f:90:9e:1c:02:1a:04:3a:bf:98:36:f4:bc:a4:a3:9e:
f2:5d:7d:8c:aa:2f:32:2f:a5:d2:c2:f9:a0:53:68:13:d0:04:
5f:2a:9a:cc:ca:9f:33:13:48:1c:e2:51:7b:de:70:77:c7:1c:
27:cc:31:6c:97:88:dd:4d:2b:d7:2d:c3:ff:b9:45:91:07:1c:
46:b8:44:32:a5:63:58:d9:96:8a:93:0d:46:38:79:64:67:c1:
f7:43:ce:06:87:da:ea:05:89:0c:cd:8c:5e:49:4c:c0:02:e5:
b5:2a:59:ad:2f:21:6e:c1:5c:d5:91:88:a1:5e:8e:31:ae:2c:
77:9d:ef:59:c0:9e:5c:6d:6f:7c:76:9d:a2:fc:90:87:39:a0:
5f:1e:1a:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XMGVw9ORAIQzI29sDmkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTJkYThlODkxNjkwZTcxZTliODU5NTA5N2RhN2M2MDY0
ZGE2MDIwHhcNMjYxMDE1MDcwMDI4WhcNMjYxMDE2MDcwMDI4WjAzMTEwLwYDVQQD
Eyg5Yjg5ZjEyYWMwNTkwYTZmZGFhNDc2NmIyNzYzZDAyYzU5NjE0YjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUbHDCkkZgN7uIHWYga7Kv8JPgIq
6Q8g/oSQ46TxaEYbCjAnwDATghtgcqv2VrEJQynASt+q3m9FtIjrFUVaejGSvdMZ
blDtzjTXDwVaxndqZelpl1eYsO1kjB+d5zJTp8q+pJIun5RohCpfY7AqJxDJuKmB
q8cinpIJ2gkpBVpoYp9qSbWsYQ/I+D3Fev2SWqj9CBHWOT1zDI8vPDAw8kiQuDKA
BVAvCXVVGde5lS5CJgudou0wyEesS53KfMrXvVqsTaaEMF+ImpC+TPwdQ64Ox6Gr
6CeC3RobgeeEl1UIpefXrzjKiB5s2GZTPwJGHOgWi9A1qz0g+LtITZvCXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuJ8SrAWQpv2qR2aydj0CxZYUstMB8GA1UdIwQY
MBaAFNDi2o6JFpDnHpuFlQl9p8YGTaYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjkt
ZWMyZmJhZmU0ZDkxLzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjktZWMyZmJhZmU0ZDkx
LzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0VQ1AjP
oN3QEB06ZJO2MEcCzF9K8hexpfhkNw/XiDA4kTMrGZPOzG4mPuqwOMX1g4zyR3I2
fwg+ZfKfl6WoidE3owsE+02h1qukXZCxSfLVMdZDjWigcM/6wl0THW9cnqHOtZol
06KzP5JtZtxfkJ4cAhoEOr+YNvS8pKOe8l19jKovMi+l0sL5oFNoE9AEXyqazMqf
MxNIHOJRe95wd8ccJ8wxbJeI3U0r1y3D/7lFkQccRrhEMqVjWNmWipMNRjh5ZGfB
90POBofa6gWJDM2MXklMwALltSpZrS8hbsFc1ZGIoV6OMa4sd53vWcCeXG1vfHad
ovyQhzmgXx4aDA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:38 2026 by rpki-client