
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: jnFwu5pfzSVEIb976eEtVhqXyhcx13lsqgraeI36yyk=
Subject key identifier: D8:7D:4B:1B:7A:9D:86:D2:E6:4D:8E:E9:85:B4:0E:32:50:98:15:F0
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 019E303B7CF98305117DE464A8E1BDB083F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 0780
Signing time: Sat 16 May 2026 10:01:05 +0000
Manifest this update: Sat 16 May 2026 10:01:05 +0000
Manifest next update: Sun 17 May 2026 10:01:05 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: wMIeArtNU2j5/bwA1o4Cqid7fqeTJKlk47oaXkntDqM=)
2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:7c:f9:83:05:11:7d:e4:64:a8:e1:bd:b0:83:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: May 16 10:01:05 2026 GMT
Not After : May 17 10:01:05 2026 GMT
Subject: CN=d87d4b1b7a9d86d2e64d8ee985b40e32509815f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c1:e4:30:ad:23:fe:92:9d:b9:4d:80:09:26:
a8:c9:35:e8:db:1d:44:04:83:33:b0:da:10:07:20:
50:5e:33:cc:bb:29:39:d0:9f:d1:d5:2d:0e:84:82:
cc:37:7a:85:44:ad:ee:1c:c2:30:2e:dd:4d:6a:23:
6e:d1:74:6f:2d:14:0c:3a:b9:a1:5b:6c:47:fc:54:
45:68:20:c4:57:ea:28:ea:60:e4:36:e0:ee:59:98:
c0:ab:48:b5:8a:42:e1:00:7a:e0:d6:92:50:48:65:
eb:a4:81:5d:f1:cc:83:b2:8c:cb:39:c9:bb:89:7e:
c2:ec:95:ed:0e:8b:03:3b:e6:d3:37:00:74:cc:e6:
0e:82:40:d5:97:e2:ad:f7:1c:48:d8:d9:63:28:72:
46:d3:ba:40:68:df:03:a6:ab:6d:07:fa:f0:55:9d:
44:17:1e:3b:2f:ad:5f:93:fc:5f:53:bf:05:fe:90:
cb:a5:e0:ff:82:ce:42:8f:4d:38:8d:0c:10:a3:1a:
1b:0c:99:4a:a9:d8:44:c2:b7:92:c8:44:ee:f4:2f:
cd:af:2c:17:88:c8:ef:0b:f6:49:c1:22:b3:da:66:
f2:da:9b:d5:4b:1b:0a:40:79:a8:a1:77:d3:b3:7b:
86:f3:28:62:56:4a:db:be:a1:6f:85:3c:ae:5e:ac:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:4B:1B:7A:9D:86:D2:E6:4D:8E:E9:85:B4:0E:32:50:98:15:F0
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:82:f4:5a:e4:c7:04:ce:53:fe:42:07:aa:20:1d:ca:f0:b9:
e6:3b:fe:f3:e2:ad:5e:08:f3:c6:f7:7a:ab:f7:d0:c4:0d:b2:
ff:0d:ad:1e:89:a1:24:c4:c8:ff:f2:ef:41:27:12:4a:8f:e1:
79:d2:ef:a6:8a:f8:07:a5:70:67:59:f8:c2:88:7a:9f:5d:26:
0f:58:1c:b4:d5:33:5d:af:ae:df:09:fc:cb:53:3d:23:03:06:
5f:ed:57:8b:59:a3:64:87:67:4e:ed:be:6e:85:26:67:47:9b:
89:fa:80:27:bb:b4:05:91:2c:2f:56:9c:25:bb:e3:e5:4a:64:
12:e9:d6:10:da:01:74:5c:f9:c0:9a:4d:5f:ab:af:e5:f2:1a:
b1:97:ed:e6:a1:65:ed:02:d3:a1:2a:0a:a4:2f:ba:0c:40:dd:
e1:b4:12:45:59:ac:58:be:e9:cf:4c:0f:67:8a:07:83:e7:c6:
35:8e:4a:0d:e1:0c:75:4f:cb:c6:50:75:01:90:76:02:07:df:
42:cd:22:b1:6f:ff:00:ba:b9:ff:37:b6:15:82:89:27:e6:98:
c4:ed:07:ea:31:7c:b8:86:aa:d6:c3:35:be:2c:88:30:17:80:
52:75:57:c4:9d:c2:fc:a1:77:5d:a5:de:8d:4a:de:db:31:9b:
5a:66:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:29 2026 by rpki-client