Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: L7t4F12um8QVaLGJ2vDPLs59Fm/zfOwt6AS1xL1LnLk=
Subject key identifier: 22:2E:76:A5:A5:C2:E9:55:6F:83:DC:B2:B1:E6:D2:A8:CE:30:02:20
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 01A13DB8DC36AA62C0AD6B41686FE62FB517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0EB0
Signing time: Thu 15 Oct 2026 04:01:27 +0000
Manifest this update: Thu 15 Oct 2026 04:01:27 +0000
Manifest next update: Fri 16 Oct 2026 04:01:27 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: vtZtPAK1jEt9nj4T4L/qHJJ6qxH0ZjfCNawDoIHGdNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:dc:36:aa:62:c0:ad:6b:41:68:6f:e6:2f:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Oct 15 04:01:27 2026 GMT
Not After : Oct 16 04:01:27 2026 GMT
Subject: CN=222e76a5a5c2e9556f83dcb2b1e6d2a8ce300220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:fd:c3:e6:c6:4b:d3:79:60:55:40:17:37:
b0:03:04:0e:fa:de:73:0e:40:29:e5:29:1a:f8:78:
38:fc:33:cd:da:1f:3e:20:e8:44:63:99:26:34:0a:
17:0d:cd:b1:5c:09:70:8d:b0:6a:4b:a9:bd:a0:53:
f4:40:9c:bc:9d:d3:89:a4:d3:68:88:52:dc:3f:44:
9d:c8:29:b7:b4:61:d5:9b:1f:ba:81:02:62:b9:ac:
34:a6:3a:a7:5f:fb:d4:c7:5e:9a:81:82:7a:de:76:
49:e7:6e:a0:6b:90:84:e7:96:b5:56:51:e7:01:d6:
dc:3d:0e:05:2d:67:77:78:dc:32:33:39:69:a4:46:
08:a2:a3:b0:91:69:3a:9d:45:1d:b8:f8:19:40:10:
6d:03:97:0a:62:6c:7e:32:b5:90:fd:e8:08:60:01:
d6:f1:a0:1d:f9:45:94:82:36:ef:0a:b2:99:64:af:
90:a6:2c:fa:69:c3:96:54:76:6c:c1:1f:7a:43:7c:
b1:97:be:3c:5d:bc:5e:be:dc:10:17:79:f5:7c:85:
18:8f:17:22:f9:a5:3c:1e:99:be:73:92:11:ef:17:
04:28:a1:0a:ba:53:c9:6e:f8:dd:8e:a0:d4:8d:33:
ba:22:d9:6f:4c:06:0e:4f:f5:f6:f0:97:e0:2d:07:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:76:A5:A5:C2:E9:55:6F:83:DC:B2:B1:E6:D2:A8:CE:30:02:20
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d7:e2:4a:57:22:f0:53:63:4e:e3:3a:c5:eb:94:c7:db:be:
96:32:c6:30:f2:a6:d7:19:89:5d:28:30:16:e7:bf:ad:91:43:
83:67:ba:1b:c3:78:38:aa:e6:b5:39:59:e0:5c:33:b1:3a:7f:
3e:fb:cb:9c:15:46:59:d1:f0:85:29:c5:2e:86:e2:56:02:2c:
99:ad:f4:ef:75:2f:fc:d6:61:76:f2:07:2c:98:08:b7:a8:ba:
45:34:14:ea:89:49:c0:09:6e:06:69:9c:bb:5f:48:3d:5c:63:
04:da:55:fa:80:9d:61:e5:e1:2e:ac:10:99:80:06:8f:c3:1f:
2f:fd:3e:9d:e7:33:ce:bb:a0:88:7d:ae:54:7a:05:b3:f8:07:
8e:c6:4f:0f:f2:21:fb:d9:96:9a:ba:c4:46:29:16:60:30:74:
d7:01:00:70:ad:45:8c:6d:7a:8d:0e:0a:74:fd:43:24:fe:d4:
0d:3f:36:f4:58:df:08:b0:3b:17:e8:ca:83:03:16:b2:ef:0c:
1c:fa:8f:94:a2:09:a2:52:79:84:36:67:3a:ef:08:4f:c4:c7:
d8:d8:b7:a5:91:e7:e8:8f:0b:aa:70:02:7e:f4:e8:d3:94:0a:
e7:96:79:53:0c:d8:e6:36:ab:70:7d:1d:87:51:46:bb:db:d9:
82:7c:3a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uNw2qmLArWtBaG/mL7UXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODk3YjMzNTM4MmY4MjI0ZjVkODkwZTMxYjM4NjMyMWM2
YmIzZWQwHhcNMjYxMDE1MDQwMTI3WhcNMjYxMDE2MDQwMTI3WjAzMTEwLwYDVQQD
EygyMjJlNzZhNWE1YzJlOTU1NmY4M2RjYjJiMWU2ZDJhOGNlMzAwMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnH9w+bGS9N5YFVAFzewAwQO+t5z
DkAp5Ska+Hg4/DPN2h8+IOhEY5kmNAoXDc2xXAlwjbBqS6m9oFP0QJy8ndOJpNNo
iFLcP0SdyCm3tGHVmx+6gQJiuaw0pjqnX/vUx16agYJ63nZJ526ga5CE55a1VlHn
AdbcPQ4FLWd3eNwyMzlppEYIoqOwkWk6nUUduPgZQBBtA5cKYmx+MrWQ/egIYAHW
8aAd+UWUgjbvCrKZZK+Qpiz6acOWVHZswR96Q3yxl748XbxevtwQF3n1fIUYjxci
+aU8Hpm+c5IR7xcEKKEKulPJbvjdjqDUjTO6ItlvTAYOT/X28JfgLQelMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIudqWlwulVb4PcsrHm0qjOMAIgMB8GA1UdIwQY
MBaAFNKJezNTgvgiT12JDjGzhjIca7PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZGU4MDUtZDVkYy00NmY3LWIzOTct
NWI1MzMyYWYxODUxLzEvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80ZGU4MDUtZDVkYy00NmY3LWIzOTctNWI1MzMyYWYxODUx
LzEvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9fiSlci
8FNjTuM6xeuUx9u+ljLGMPKm1xmJXSgwFue/rZFDg2e6G8N4OKrmtTlZ4FwzsTp/
PvvLnBVGWdHwhSnFLobiVgIsma3073Uv/NZhdvIHLJgIt6i6RTQU6olJwAluBmmc
u19IPVxjBNpV+oCdYeXhLqwQmYAGj8MfL/0+neczzrugiH2uVHoFs/gHjsZPD/Ih
+9mWmrrERikWYDB01wEAcK1FjG16jQ4KdP1DJP7UDT829FjfCLA7F+jKgwMWsu8M
HPqPlKIJolJ5hDZnOu8IT8TH2Ni3pZHn6I8LqnACfvTo05QK55Z5UwzY5jarcH0d
h1FGu9vZgnw64w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:22 2026 by rpki-client