Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: 8Pxglg9o89GKneNfRVbKHAk1fPY4EoDjkZFKMx30814=
Subject key identifier: 82:30:41:EC:FB:D5:EE:60:3E:29:79:EF:B7:24:09:A3:F8:D3:D6:8B
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 01A19167B05B02A7E1177F20AB406DEF2E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 0720
Signing time: Sat 31 Oct 2026 10:00:53 +0000
Manifest this update: Sat 31 Oct 2026 10:00:53 +0000
Manifest next update: Sun 01 Nov 2026 10:00:53 +0000
Files and hashes: 1: A2yTP0lhhFqNva3nkV1odyS6nwE.roa (hash: hsckG++ZXCzFReA5qOo98hpc0d00fMoMGiw+xttmqVs=)
2: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: u4jqJNojuhqiopsDiIQiIx5PrFkYjxRBZno95vqEjcY=)
3: uBcATutWZCzBK8D7bBIKL9bxPlQ.roa (hash: JIPy3fI3722I5dmkOB2XD2F/6xuJic82XKrmU7yYHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:67:b0:5b:02:a7:e1:17:7f:20:ab:40:6d:ef:2e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Oct 31 10:00:53 2026 GMT
Not After : Nov 1 10:00:53 2026 GMT
Subject: CN=823041ecfbd5ee603e2979efb72409a3f8d3d68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:57:5c:8e:e9:f2:f6:f6:a9:c1:67:b6:18:
86:a3:9f:d5:51:48:1d:f1:70:78:89:a1:69:9a:b3:
5c:b4:bd:d6:32:95:f0:88:57:b1:d9:e1:b3:f2:f9:
69:a9:95:1d:2b:00:a9:d2:31:dd:27:c8:72:75:61:
85:db:ad:0c:88:d8:81:78:61:18:e8:9e:0f:4e:3d:
15:71:f0:80:ef:4a:d0:76:29:2d:bd:99:2c:72:eb:
ed:8e:2b:04:70:fa:87:61:9f:4c:ff:5c:05:f2:f7:
ce:b6:b3:b7:23:56:0c:33:51:e5:f5:3a:d5:c4:a2:
39:d5:2c:f7:0d:e6:1d:c4:89:76:ec:8d:50:a0:57:
16:c2:d4:bb:6b:8b:ff:fb:b3:6a:fd:b8:f0:4c:2e:
9c:b3:11:f8:8a:90:32:b4:7b:78:a2:73:70:d7:ee:
7c:5f:52:6f:f8:e4:74:ce:a2:a0:22:75:20:1a:01:
32:c9:85:5e:2a:68:95:71:26:21:62:29:3d:c1:4f:
0d:56:a6:9f:0e:dd:3f:b2:47:79:38:58:a4:19:11:
4e:7e:dc:fe:30:c2:8d:9a:84:54:91:fe:03:75:5f:
78:40:2a:5d:37:10:70:d6:b8:54:db:da:b9:e3:57:
49:1d:84:ec:ee:e3:1e:fb:58:cf:c6:39:2f:c7:8e:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:30:41:EC:FB:D5:EE:60:3E:29:79:EF:B7:24:09:A3:F8:D3:D6:8B
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:56:37:49:3f:79:c5:bb:50:81:ca:d5:07:38:f4:03:c9:21:
dc:2c:f3:5d:cc:90:0b:cb:33:d3:15:d3:46:1c:0d:f2:53:75:
95:62:10:c1:5a:05:61:d8:5a:a6:6e:51:03:39:67:62:a2:ab:
c6:35:45:2b:0a:03:13:9a:3f:7d:9a:d3:1b:fa:71:cd:f1:f1:
7b:d1:4b:25:dd:31:6a:a1:44:e4:3a:43:65:8a:0f:d3:e1:d8:
56:93:9d:b2:f5:67:28:12:ac:c4:59:bd:15:95:8b:34:23:9c:
dc:be:c8:e6:8f:dd:13:00:4b:6e:65:05:11:bd:2c:c3:f0:f5:
97:71:b7:02:d0:92:e0:45:bb:6d:34:54:6e:a7:58:51:c3:3a:
b5:f2:b0:7c:68:59:2a:c1:55:d4:2e:60:9b:39:74:60:16:8e:
18:c9:9d:e8:09:17:ca:14:93:cf:90:fc:e1:9e:9f:d4:cd:7b:
21:29:7e:6c:d3:9a:e7:aa:22:31:32:3f:98:dd:ec:f5:a6:87:
f5:de:ca:a9:f6:2e:a2:30:e3:55:89:c1:84:d3:99:33:6f:51:
07:25:d4:ee:b5:7e:ec:f4:f1:22:57:e9:5d:bd:69:62:6e:90:
16:51:6b:fc:ce:60:66:29:ee:fe:7f:c8:3e:30:3a:7f:b6:71:
cb:11:db:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:41:03 2026 by rpki-client