Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: JLLfflQZGwVv4MHU5KgB7Pz+OSS9ui470TVmDA3DTOw=
Subject key identifier: E9:8D:05:02:3D:AE:1C:4A:BC:9E:B0:F3:9C:E7:3A:A6:F1:04:C4:C3
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 019D3909EF3A5C196208E4C87A07514BF201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 0700
Signing time: Sun 29 Mar 2026 10:00:45 +0000
Manifest this update: Sun 29 Mar 2026 10:00:45 +0000
Manifest next update: Mon 30 Mar 2026 10:00:45 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: 7/WuFyj+CFd08CNyyAbu9bmSv6gFq+p2QJ8YRBsTSBo=)
2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ef:3a:5c:19:62:08:e4:c8:7a:07:51:4b:f2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Mar 29 10:00:45 2026 GMT
Not After : Mar 30 10:00:45 2026 GMT
Subject: CN=e98d05023dae1c4abc9eb0f39ce73aa6f104c4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:1d:f2:41:6c:4f:e7:52:6c:84:be:e4:0b:
09:f4:08:2c:e7:b1:b5:05:a3:c6:70:a3:38:73:d0:
8d:d7:a3:6d:86:9a:57:f6:1a:4f:d5:35:5d:2a:c9:
17:12:ba:51:89:20:db:25:8e:2a:90:9c:78:c1:1c:
f0:1b:85:b6:84:9c:b4:5c:50:28:a3:00:d4:ff:5f:
14:58:5d:cf:2f:5a:84:b3:b6:8f:4d:47:18:0a:a0:
a9:8e:e2:f8:c8:ff:b2:ff:c4:21:54:9a:bb:6c:e5:
e8:f9:6f:8c:6c:fd:2b:cb:3c:88:a6:e9:8b:9f:f1:
a2:4c:c5:cd:a6:ae:dd:67:5c:72:a8:15:ce:3d:14:
f5:44:f7:ea:53:ce:8f:5d:ba:bf:75:7f:99:36:c3:
ec:83:dc:aa:bc:ef:6f:38:a1:b4:99:4b:6a:92:34:
ba:c2:a6:77:b8:ce:11:83:08:e1:03:9f:37:a1:65:
86:73:9a:e1:e7:27:6d:13:17:b3:61:5c:20:bc:35:
99:a8:3c:f9:73:4d:27:bb:23:3d:25:ed:ff:f1:c1:
29:e5:ac:8d:32:4c:bd:75:86:7d:6e:74:b8:8a:0a:
81:01:58:0e:13:73:5c:e4:75:76:31:10:5b:ed:df:
d4:de:a9:4b:15:38:02:11:e8:73:70:91:e1:2b:bd:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8D:05:02:3D:AE:1C:4A:BC:9E:B0:F3:9C:E7:3A:A6:F1:04:C4:C3
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:08:bd:14:26:05:01:4f:1f:ce:2b:33:51:54:30:7b:fd:23:
d5:bc:9e:f4:ec:60:a5:82:51:9f:93:4c:6f:4b:6b:40:b3:6d:
1b:c5:66:26:68:25:89:62:85:b1:88:10:90:36:37:53:3a:80:
df:28:86:58:01:36:51:72:b8:86:c8:ed:d4:a1:ca:8d:c1:e3:
c3:f1:7a:dd:6f:27:73:b7:43:90:de:2e:a5:9f:08:2f:6a:cb:
23:6d:6a:18:67:01:4d:17:1c:26:c2:ec:f4:9b:db:22:41:47:
c9:fb:6c:68:69:d2:ff:28:d6:04:ad:2a:67:d5:f1:30:f0:ed:
11:a4:cf:f4:c3:84:b3:2a:d3:c0:ec:15:9f:16:fe:6d:e4:ce:
e7:e0:b7:fa:cd:9a:84:94:0b:d6:20:1d:7e:13:0b:67:4b:69:
18:c7:6e:f8:f5:84:9f:1d:ed:69:fa:cb:57:70:3d:25:b7:0d:
a7:9f:1a:d5:a5:4c:a9:00:af:91:a1:64:b7:83:08:e2:76:2b:
c0:45:3f:47:d6:4b:9e:66:c2:fa:d0:0d:0b:6a:62:fb:8a:72:
53:e6:20:8d:e0:33:84:62:d3:b7:dc:e0:b2:b5:84:be:96:b8:
f9:a1:05:48:a5:c3:9d:54:19:2b:f3:1e:58:b1:87:01:1b:65:
b1:4a:aa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:48 2026 by rpki-client