Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: cDDHbEqaAtw3A0mgRUa+4OoPbvBQPxQ8LTfAVIaPZcI=
Subject key identifier: E8:C2:38:5C:DE:05:BF:B6:AD:B1:B0:B0:EF:45:D2:E4:A1:3A:97:05
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 019FA6E2089716F3D2393DBD2DC41BFFDE7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 0622
Signing time: Tue 28 Jul 2026 04:00:58 +0000
Manifest this update: Tue 28 Jul 2026 04:00:58 +0000
Manifest next update: Wed 29 Jul 2026 04:00:58 +0000
Files and hashes: 1: A2yTP0lhhFqNva3nkV1odyS6nwE.roa (hash: hsckG++ZXCzFReA5qOo98hpc0d00fMoMGiw+xttmqVs=)
2: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: c0wJhIFNRqEUZ02WavZKz0vLfOmFHNLQDtcr0CyRtDc=)
3: uBcATutWZCzBK8D7bBIKL9bxPlQ.roa (hash: JIPy3fI3722I5dmkOB2XD2F/6xuJic82XKrmU7yYHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:e2:08:97:16:f3:d2:39:3d:bd:2d:c4:1b:ff:de:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Jul 28 04:00:58 2026 GMT
Not After : Jul 29 04:00:58 2026 GMT
Subject: CN=e8c2385cde05bfb6adb1b0b0ef45d2e4a13a9705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:77:57:83:0c:dc:fe:20:f2:22:7f:cf:42:
a0:98:ef:f3:99:a7:77:0e:03:47:65:9a:ae:4d:80:
8a:e5:2f:8d:29:8a:6c:4d:2e:c9:77:ba:76:88:58:
30:05:5e:e8:9f:cc:56:05:a7:1e:82:32:20:6e:11:
90:d7:c7:68:d1:62:55:9a:9f:ed:dd:35:4b:d1:42:
43:de:8f:73:a2:16:1b:cb:d5:6e:18:42:a4:3b:f8:
bd:98:78:95:d7:0f:b8:85:98:c0:a0:a6:e1:d9:f0:
f4:83:ac:c1:75:6f:ea:0e:ed:6e:38:2f:cc:59:c5:
11:92:5a:ac:94:09:02:08:6c:ac:84:5f:eb:f0:39:
54:39:1c:b4:b5:89:08:3b:12:29:63:d5:b0:af:35:
c5:c6:94:b2:c6:a3:e2:1b:bb:94:72:ed:4c:0f:a8:
51:bf:04:36:74:1c:60:6b:04:bd:b8:82:9e:5f:2a:
84:bd:05:d3:5b:29:e0:27:86:6f:d5:c5:b9:3b:f4:
91:2e:7f:0e:ba:cf:44:2b:a9:fc:14:63:eb:8e:59:
0d:a2:15:bc:74:1e:d2:fc:28:ed:d3:56:6e:36:c5:
20:4c:99:27:c1:55:96:79:a6:23:fd:23:ca:16:3c:
16:a9:48:24:f7:5b:93:1a:06:f0:c4:70:ef:bf:b7:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C2:38:5C:DE:05:BF:B6:AD:B1:B0:B0:EF:45:D2:E4:A1:3A:97:05
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:75:cb:ea:60:a5:2d:f8:41:a3:93:95:25:27:d2:22:52:7b:
da:2f:24:d5:36:ac:0c:7b:5a:25:93:92:6b:43:d7:0e:69:d7:
c9:ed:69:44:03:36:cf:3a:4c:5b:aa:da:3c:d0:9f:5f:3f:25:
f7:20:eb:7b:8a:7b:55:a4:4f:4d:ef:4e:c9:fd:e3:d1:00:58:
15:6f:34:01:7f:6c:5d:ff:b0:41:5f:2e:04:f8:af:e0:75:ff:
76:3c:30:4e:29:4f:a9:61:df:84:b4:41:02:17:50:65:75:44:
c6:3a:d8:d7:5b:5c:4d:63:41:94:e5:12:56:21:1d:6b:1f:d5:
14:ce:78:6b:27:41:ca:98:09:e3:99:6a:57:15:9a:72:f3:12:
65:b9:84:70:d3:fa:b9:27:65:21:ae:87:88:bd:5e:a1:2f:93:
0c:37:94:27:67:40:ce:74:e4:06:c5:f2:32:a4:7f:d6:ce:28:
7e:f8:04:36:05:f9:59:6b:ab:dd:f6:95:26:f2:d3:59:ae:ad:
cf:a2:2d:4c:a3:90:34:ba:68:ef:b1:ff:73:51:0e:b2:69:b6:
1a:8c:ce:1b:1d:aa:d7:4d:23:7c:3a:b6:38:1a:ff:94:0a:79:
28:f0:7c:e7:3c:8e:9d:ff:39:d6:4c:f6:76:ff:21:7a:0e:df:
9f:0f:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 07:36:30 2026 by rpki-client