Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: VhMFf8I3pVhud4SZk5XybdaYx6n/aekc/SDWVA8rf9o=
Subject key identifier: 89:40:DD:7F:07:95:01:27:C9:9B:26:04:5E:F4:0E:88:B8:8E:02:D8
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 01A001010CE238CB51E83D88E6978188D8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0E0C
Signing time: Fri 14 Aug 2026 16:00:41 +0000
Manifest this update: Fri 14 Aug 2026 16:00:41 +0000
Manifest next update: Sat 15 Aug 2026 16:00:41 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: 9xpJCN9c0rfC4ZoAafvUd+WMQ7vmFhF3MOijCQSksoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:0c:e2:38:cb:51:e8:3d:88:e6:97:81:88:d8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Aug 14 16:00:41 2026 GMT
Not After : Aug 15 16:00:41 2026 GMT
Subject: CN=8940dd7f07950127c99b26045ef40e88b88e02d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:0a:c3:4a:f7:8f:e0:55:5e:1a:99:fa:c5:
df:34:7e:3a:e5:0e:86:94:ad:ad:3a:5e:2d:90:8f:
68:e5:b2:ff:b1:1f:4e:b7:40:f2:80:8c:62:b0:bc:
38:f4:bd:47:99:5d:bf:f3:53:84:98:94:d4:cd:e8:
16:25:71:c1:7e:50:31:2d:b9:17:54:f4:9e:87:cc:
60:fc:69:55:d1:c8:b1:ae:10:b2:20:1a:f4:f9:27:
66:24:84:98:7d:77:8e:ec:a6:20:94:5b:4c:28:37:
6c:33:a8:8a:57:9c:d7:07:37:32:c5:27:f0:9d:3b:
e0:f5:e5:62:05:3a:0a:f1:4a:b2:e2:6f:0c:97:82:
d3:fd:7a:e3:af:ad:b3:e8:ff:20:33:c2:a8:ea:1b:
f0:c3:6f:f0:66:d3:85:db:83:8b:1a:6e:1a:67:b7:
6d:d0:4e:be:f3:16:2d:3b:8b:a2:67:db:0a:be:31:
1b:8d:31:19:f5:47:be:a8:f8:d9:8d:23:ce:b0:0e:
bd:b8:3e:5f:44:53:df:c9:ea:0f:1f:11:c8:bd:10:
1a:3b:5c:a3:3d:3d:a6:d6:c8:19:c1:ef:f0:2b:a4:
62:ca:15:6f:fc:3c:82:82:8b:3f:39:bb:61:d2:fa:
1d:39:9d:da:8b:65:57:34:23:e5:92:ee:11:df:2e:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:DD:7F:07:95:01:27:C9:9B:26:04:5E:F4:0E:88:B8:8E:02:D8
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8a:e0:61:ad:2e:22:0a:aa:95:f6:85:e0:11:a7:3d:a6:82:
78:cb:17:e8:a1:10:1b:e3:f2:19:f1:7c:24:cd:ab:ca:c7:42:
c5:5a:76:9d:84:3c:8b:fb:c8:36:35:7e:73:cb:7e:61:e2:ac:
df:b4:b1:e3:d4:4c:c3:d6:55:7a:a9:9d:6f:b5:01:3e:22:ff:
9c:6e:86:2d:89:f4:7f:4b:02:e2:b2:86:3f:dc:d6:46:eb:8e:
1c:f4:99:58:2a:da:00:b0:74:71:b3:a6:35:4a:26:ed:2f:a0:
9a:51:10:66:2c:bd:97:16:52:48:f4:8b:af:b9:cd:1a:32:14:
b9:bb:dd:2c:10:df:4d:7f:b7:d1:e0:e2:4b:7c:e2:f1:32:98:
05:c6:f8:7f:b6:38:8c:4c:e7:f8:21:c4:42:1d:27:ae:26:7e:
5d:f4:71:e2:e4:c5:97:9e:1e:90:a6:fa:86:44:04:0d:34:dc:
24:74:66:0a:94:3e:b3:60:5e:6b:e6:e5:81:90:82:ef:2f:e5:
1c:5f:be:42:36:90:ca:f6:a3:bb:75:04:6d:80:92:47:f2:54:
74:50:91:0b:61:5a:44:89:39:86:74:a4:59:bc:1a:94:07:b9:
34:63:cb:46:b4:32:67:96:be:c7:bd:ba:e7:ba:5f:42:71:db:
1c:a0:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:57 2026 by rpki-client