Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: foLxVO7abLaaAQTcW/rh7jpcL+ZLG/1s1Pe+lCluxnA=
Subject key identifier: C8:6B:E6:AC:B0:4D:A7:2D:5E:7D:11:1D:CC:B6:B9:1C:C5:C5:07:D9
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 01A0908EE70F194A88E6DE8EEA9300BAC908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 069B
Signing time: Fri 11 Sep 2026 13:01:19 +0000
Manifest this update: Fri 11 Sep 2026 13:01:19 +0000
Manifest next update: Sat 12 Sep 2026 13:01:19 +0000
Files and hashes: 1: A2yTP0lhhFqNva3nkV1odyS6nwE.roa (hash: hsckG++ZXCzFReA5qOo98hpc0d00fMoMGiw+xttmqVs=)
2: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: TiEPIQw+54rA4x4FwyOKJHeOXHEADme2G5dJl9nNPT4=)
3: uBcATutWZCzBK8D7bBIKL9bxPlQ.roa (hash: JIPy3fI3722I5dmkOB2XD2F/6xuJic82XKrmU7yYHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:8e:e7:0f:19:4a:88:e6:de:8e:ea:93:00:ba:c9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Sep 11 13:01:19 2026 GMT
Not After : Sep 12 13:01:19 2026 GMT
Subject: CN=c86be6acb04da72d5e7d111dccb6b91cc5c507d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:9e:7e:73:1b:a0:7b:ce:b8:e4:f1:0b:7a:
08:8f:35:fb:30:8d:15:24:42:b1:95:3b:03:ff:f1:
6c:c5:39:12:c2:5d:de:f7:4b:ce:fc:1f:28:2a:46:
0e:7b:e1:e7:b0:cc:2f:5a:6e:f7:dc:20:21:3a:5e:
dd:7c:b0:70:2e:84:87:37:1c:e5:fd:39:88:06:2c:
c9:da:34:9b:52:8a:58:5b:b5:4b:69:23:05:0a:fc:
0e:86:36:52:c0:66:43:59:be:88:7c:2c:7e:9a:0d:
44:26:ff:c3:00:b1:de:fb:ad:0a:16:6b:24:29:e6:
95:16:11:67:f2:c8:55:b6:76:a7:d3:d7:7b:c0:48:
bc:65:d1:e2:dc:21:f4:2c:04:83:e2:12:0a:01:48:
1f:47:b5:a9:58:3c:3a:07:6b:95:93:70:4b:3b:90:
52:df:bf:24:1a:66:45:e8:86:d4:b5:fb:45:93:07:
64:ef:ed:dc:0c:92:ce:50:7c:7d:fa:7e:ce:25:c0:
f2:1c:f6:e2:05:bb:f3:40:13:25:d9:cd:0e:25:9a:
d7:94:65:1c:b7:67:04:ab:5c:d4:82:01:9e:be:9f:
53:fe:81:f5:fa:34:5d:53:9d:ba:c3:34:21:0a:59:
43:4a:3b:c2:0c:57:86:57:f6:29:f1:0f:a0:74:bd:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6B:E6:AC:B0:4D:A7:2D:5E:7D:11:1D:CC:B6:B9:1C:C5:C5:07:D9
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b3:48:7a:0d:e4:72:78:9c:1f:71:6a:cf:b0:f8:87:c1:10:
67:70:7a:e0:ee:36:ff:d8:45:62:e1:33:b2:0d:31:6a:9c:36:
57:1e:e1:68:91:92:70:b8:27:24:6d:92:29:3e:57:46:a9:7f:
88:3f:e3:3c:05:f2:50:72:61:34:8f:52:b2:f6:49:16:c9:9f:
dd:fc:fc:ba:6f:34:8c:c2:0b:15:d3:44:fa:b7:60:8c:ca:2d:
54:ac:48:a3:42:67:6c:c8:f8:3e:44:8e:89:92:78:02:76:78:
1c:24:50:fd:8a:f3:d3:ad:e2:46:cd:c3:a4:0f:f7:fa:6b:ea:
55:ff:68:02:d6:21:89:99:8d:98:dd:17:dc:df:e5:e4:8a:32:
93:b8:06:cc:70:48:88:26:7f:1e:68:d5:f6:70:6f:44:0e:b1:
73:2a:18:dd:ba:7f:e5:f2:01:28:66:dc:83:36:a6:e5:b7:28:
97:00:91:d0:2e:94:e0:04:b6:78:c6:ff:c1:3c:46:5e:0d:b4:
d8:89:c6:50:fe:11:ce:a4:cc:8c:f7:20:cf:f1:3f:ea:f2:63:
49:b7:f7:b0:82:e0:68:c5:2c:61:e5:0e:99:3e:22:86:43:3c:
42:c1:70:e5:ba:2b:bf:10:2a:04:8d:b1:cc:48:ca:89:29:2a:
ce:fa:98:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:41:05 2026 by rpki-client