Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
File: OLB6ACu3vw06zI3UqV8jesYf1ng.mft (raw, json)
Hash identifier: rTbOF/q6qeDCoGVLtJ7OL7I6xz9FXbOdHWGUE6t3+OI=
Subject key identifier: 0B:70:7C:1D:F9:9C:78:ED:7A:1A:48:C6:46:DF:44:43:6F:78:D3:8A
Authority key identifier: 38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78
Certificate issuer: /CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678
Certificate serial: 019D258318139272A86944DE7DDDC383583F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
Manifest number: 89
Signing time: Wed 25 Mar 2026 15:00:41 +0000
Manifest this update: Wed 25 Mar 2026 15:00:41 +0000
Manifest next update: Thu 26 Mar 2026 15:00:41 +0000
Files and hashes: 1: OLB6ACu3vw06zI3UqV8jesYf1ng.crl (hash: Rg5j9QCNHak/ySbE7yZliEP2PJ+8bo6kptka1eVtkso=)
2: X9K0l2rCyvUlNf67QetfDPsKTvk.roa (hash: SYfx2ip5BHRTUDDyhzpCkqxXM0rSgBrsGDJc73Lx6mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:18:13:92:72:a8:69:44:de:7d:dd:c3:83:58:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678
Validity
Not Before: Mar 25 15:00:41 2026 GMT
Not After : Mar 26 15:00:41 2026 GMT
Subject: CN=0b707c1df99c78ed7a1a48c646df44436f78d38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:dc:83:f9:e2:5f:d6:a6:d0:8d:d0:a4:8d:
24:f9:f1:af:27:b7:ce:8f:48:f5:0f:36:1b:cc:a0:
b3:aa:0d:8e:a2:08:2d:af:a2:4a:6f:49:b3:4b:e7:
0e:b2:54:61:d5:2c:52:4e:ee:c4:96:1f:2f:12:c4:
bf:42:d3:91:d3:3d:14:2c:95:ea:e6:18:e0:87:39:
d1:fb:a6:ad:35:e4:94:79:93:85:d8:fe:6e:5a:75:
75:de:5b:df:a3:f2:b8:ec:db:a3:c0:7a:9e:ea:65:
79:d3:7a:84:3f:36:5d:64:f3:c0:7d:ea:4c:69:a8:
ee:5e:fa:27:86:3b:db:9b:e4:dc:0f:98:09:72:ac:
19:8c:d8:3f:bb:f5:43:a2:05:53:60:89:b5:1b:3e:
5c:76:71:2c:a4:c1:31:13:09:91:9b:12:7e:b3:5e:
24:55:83:e2:ab:d0:20:62:16:45:a6:8c:ed:3d:60:
14:9a:3f:7e:75:d5:95:cc:3c:04:c1:0a:07:51:7f:
71:48:b7:d5:d4:df:31:75:f6:e4:c9:16:c1:aa:5f:
f9:86:f1:31:ad:07:ff:c1:cf:e9:7f:04:58:8a:d7:
6c:07:e0:42:b4:48:5b:46:dc:4f:b2:a0:8f:7a:35:
22:d1:78:1e:9a:22:89:6c:a7:91:cf:d5:8b:e1:2b:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:70:7C:1D:F9:9C:78:ED:7A:1A:48:C6:46:DF:44:43:6F:78:D3:8A
X509v3 Authority Key Identifier:
keyid:38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:d2:b7:7a:fb:b2:b2:c5:ee:a3:ce:e4:b8:6d:b7:17:11:
88:9e:eb:57:c5:31:48:a4:29:2b:61:fa:02:f8:6b:2b:15:ef:
5f:5b:bd:0a:40:7e:0f:0d:84:85:25:3a:0b:b7:8a:6c:be:42:
bc:69:f9:bd:a0:ce:9a:da:5e:a4:81:05:02:3f:4a:83:b9:00:
f3:ed:99:98:79:81:03:97:cd:dc:3d:51:02:88:f7:f5:44:0d:
93:af:15:ca:f9:08:d8:cc:87:29:9a:91:87:41:f3:98:0d:3d:
13:c1:ae:18:48:d4:27:fa:40:18:d7:8b:bb:5a:73:a2:55:75:
0b:79:38:fc:07:b0:cb:d6:71:80:9f:2a:9d:1e:44:96:06:b1:
67:0b:f6:a9:15:b5:3d:b4:7c:21:3b:1a:ef:94:1f:41:67:99:
db:ff:86:85:70:c3:39:93:e3:a0:c9:4f:92:8f:84:17:bc:03:
d5:07:b5:94:52:4d:d4:11:fc:67:e8:e6:a3:3f:d6:10:7c:56:
46:bf:15:fc:61:d8:b3:33:02:05:ef:d6:21:5d:55:c8:ed:2b:
5c:43:b7:5d:b0:df:8c:ff:26:d2:47:24:9a:2f:4c:78:fe:73:
a5:5b:a1:8b:06:cd:89:cf:43:23:cc:7a:81:1a:99:f5:b5:73:
50:5a:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:12:24 2026 by rpki-client