Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: nucjXw2nDEzVZlQ45uyJ9sOiz7A/4nIpmTS3t5n7ZPk=
Subject key identifier: D8:72:ED:D9:13:50:97:AC:A0:86:5B:30:17:B4:C5:DB:C9:A9:F3:E8
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01A059320A2D1E400B748737C188F866232B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0AB0
Signing time: Mon 31 Aug 2026 19:00:46 +0000
Manifest this update: Mon 31 Aug 2026 19:00:46 +0000
Manifest next update: Tue 01 Sep 2026 19:00:46 +0000
Files and hashes: 1: 1-OTLSt9bxerjVQrXim1tii-2o9E.roa (hash: pXJ9LGfvy4+1EbvSdA31KaVxZBu7t1Z+nzZrQNY4cjI=)
2: 3jhOZIWBBUYNhlF2h5lBua-ajBs.roa (hash: Ea8xHXLjFbr2D9v27/3IzBBK8ffF3N5VQDLBS2f2VpM=)
3: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
4: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: aXtTGCiEPbMW0ZllU6ndSgut4hFAtrX7YTJ6bXlS2tk=)
5: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:32:0a:2d:1e:40:0b:74:87:37:c1:88:f8:66:23:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Aug 31 19:00:46 2026 GMT
Not After : Sep 1 19:00:46 2026 GMT
Subject: CN=d872edd9135097aca0865b3017b4c5dbc9a9f3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:51:44:40:77:db:95:9f:65:1e:e6:de:e7:
92:f9:c6:bf:3b:e7:8a:49:ce:58:1e:72:1f:b0:0d:
05:66:af:cd:10:95:2b:99:0a:94:ea:5e:13:76:23:
ce:1c:ed:c9:a8:dc:17:61:ba:94:c1:1e:15:33:10:
f5:a3:c0:9f:1c:24:26:59:9c:e5:e1:aa:85:ef:ce:
11:47:5b:a1:1b:3f:0a:b4:67:8e:94:8c:e3:1c:ed:
de:f9:4c:bf:d0:27:b7:14:88:19:c3:6f:4b:93:46:
0e:04:5c:f6:74:36:42:37:e5:bb:ce:e2:c4:8b:4c:
6e:2c:96:da:dc:c6:4d:b4:3c:b8:a4:0d:fd:c0:3f:
70:41:be:fd:06:fd:cb:77:68:70:f9:34:7c:65:f8:
78:67:65:d0:b5:33:38:61:ab:5e:15:0d:8a:f3:69:
51:a7:f7:0f:f3:56:84:b1:3b:64:b0:1b:83:2a:cf:
77:e3:36:6e:29:18:a2:be:88:33:53:85:ff:e2:09:
3e:ac:2d:27:f8:bc:43:f7:59:41:d1:d3:0e:73:d9:
44:90:ab:4e:c7:ef:af:a4:f9:00:23:6e:ca:ce:bf:
82:cd:0a:d3:c9:cd:e4:83:7c:ac:35:3b:28:8e:b4:
f2:c4:d3:bf:82:bb:f6:a1:15:cc:c5:cf:b9:51:70:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:72:ED:D9:13:50:97:AC:A0:86:5B:30:17:B4:C5:DB:C9:A9:F3:E8
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d3:e9:7c:a9:25:72:ae:34:8e:3c:64:7a:a7:07:49:4c:94:
5c:8a:bf:d0:65:e1:68:9e:9c:fc:a1:ef:96:79:63:0e:2c:f3:
c6:ad:21:15:a7:8d:34:7b:a4:95:55:7d:98:e7:07:b3:b6:f0:
ed:92:37:3a:97:4a:d7:1e:89:69:3a:06:3c:2e:3c:15:e7:91:
de:b2:5f:40:77:77:41:92:2a:37:1e:8a:70:cf:db:54:f0:45:
2b:de:52:57:50:91:30:20:a2:2e:f6:82:9b:20:fa:0f:eb:50:
2a:97:47:26:5b:02:b3:4f:1d:eb:a9:5b:5d:44:6d:7b:52:05:
50:d9:f2:f6:59:8c:57:2e:f9:58:e8:fb:c2:04:f9:b4:d9:e8:
56:2f:72:af:b5:d8:e2:d5:eb:14:42:5c:34:a9:5a:06:fd:fe:
d0:fc:27:a6:fa:0a:89:4c:ac:d3:1b:dc:50:13:c9:91:f8:67:
b3:e0:ff:6d:b7:4d:78:01:bc:ce:c7:a2:82:97:80:73:46:8d:
ee:e6:c1:0b:19:a3:a5:8c:7e:69:fc:e6:fb:5f:1d:f3:8c:0f:
1d:bf:30:5e:70:b8:bd:d0:65:5e:5c:ad:bc:f7:a9:5a:89:78:
d8:32:61:d3:d4:44:37:6c:cb:3c:d6:e1:b5:5f:1e:6c:46:09:
d1:10:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:21:20 2026 by rpki-client