Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
File: olrSzhcYk-YHpyuunQVE_AHTCao.mft (raw, json)
Hash identifier: /sgptIySi71ctKL4Cw88d491jcLwCetQTpJDKAnUh6s=
Subject key identifier: BA:F2:B0:82:37:97:E5:6A:3B:8B:6A:19:43:A1:76:8B:FB:B1:4B:05
Authority key identifier: A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
Certificate issuer: /CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Certificate serial: 019F90C8216D79B90FAD900223105A09B717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
Manifest number: E1
Signing time: Thu 23 Jul 2026 21:01:02 +0000
Manifest this update: Thu 23 Jul 2026 21:01:02 +0000
Manifest next update: Fri 24 Jul 2026 21:01:02 +0000
Files and hashes: 1: hB7k-pSsmCCA65cdeBOLaQ0pu5c.roa (hash: VeZsd2ieUrYDf4TqpzlV6sh6N/ypni7g2R6QNYjKO6A=)
2: olrSzhcYk-YHpyuunQVE_AHTCao.crl (hash: fQZTwmYaX6KajSPaafF+Bijw7sX09krRRnY5gU53oBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:21:6d:79:b9:0f:ad:90:02:23:10:5a:09:b7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Validity
Not Before: Jul 23 21:01:02 2026 GMT
Not After : Jul 24 21:01:02 2026 GMT
Subject: CN=baf2b0823797e56a3b8b6a1943a1768bfbb14b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:94:6d:5d:8e:87:46:0f:6c:f3:c1:d8:a6:
32:3a:f7:6c:4c:38:c8:e7:b9:09:7e:11:87:f5:4a:
51:d6:98:29:e8:20:c5:1b:a6:d1:63:56:85:01:37:
1a:5f:62:20:ed:30:37:0b:34:e5:fa:dc:7f:f4:3d:
5e:f6:eb:11:e2:b2:a5:20:35:76:a7:93:87:26:83:
0f:21:ac:04:40:cc:c0:37:4d:e1:dd:f4:64:47:0b:
4a:7f:2c:44:5c:fb:8d:3c:d4:40:0a:47:5c:ee:93:
94:93:1c:6d:db:c7:bc:a2:86:ff:b6:52:9d:8c:4e:
06:16:a2:74:87:60:4a:14:ad:fa:6d:1f:82:c4:bf:
8b:41:ec:11:23:ce:d1:14:a2:df:13:c9:70:59:10:
e7:a3:3b:78:28:f6:51:b6:80:69:06:e4:4f:10:aa:
9b:74:18:cf:47:db:95:05:e7:43:71:bb:e9:d3:a9:
84:62:91:0d:f3:65:aa:11:10:23:cf:d2:55:67:b1:
be:cc:12:c9:a4:dd:c3:46:ee:18:c2:d4:1d:43:26:
e6:e3:b6:28:f3:8e:87:92:bc:1d:3a:78:ad:fb:e2:
cd:ec:b2:af:18:6d:9f:b5:ae:8b:e8:85:cf:b8:21:
fc:be:eb:8a:24:c5:f8:9b:7d:cb:87:28:01:1c:3c:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:B0:82:37:97:E5:6A:3B:8B:6A:19:43:A1:76:8B:FB:B1:4B:05
X509v3 Authority Key Identifier:
keyid:A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:82:be:03:98:15:16:5d:3f:62:63:f3:c7:30:ea:68:b0:4f:
1b:34:0b:f1:f1:e5:77:c4:e8:dc:a8:d0:bd:c2:54:6e:94:10:
0c:5a:23:44:a1:25:d0:2b:21:fc:22:65:bd:a7:82:bc:44:2c:
56:bc:9b:80:42:ec:57:11:c4:93:96:c8:c5:ae:5d:63:5b:8f:
c7:51:97:94:3c:03:f8:72:8f:41:46:ac:13:fd:63:27:6c:ce:
69:82:62:b2:94:a0:57:04:c3:42:9e:4e:00:2c:47:ec:b3:24:
8c:38:99:b7:bc:d6:d5:05:1e:e3:ab:1e:92:ec:15:5a:11:b6:
9c:1b:be:d2:49:ad:d2:c9:08:b8:ff:47:d0:c0:77:bb:6e:55:
a8:45:84:bd:84:f4:a7:7d:c6:a3:da:73:bf:fd:10:c0:1a:ab:
74:67:74:dd:83:b7:e0:62:16:9e:5f:1f:ea:ea:5f:bd:22:57:
f8:11:e9:41:c0:18:79:1b:1f:d9:b2:ba:f4:d4:30:22:29:67:
d2:11:17:48:c5:03:d4:67:9c:50:a6:b8:6b:56:67:e5:31:19:
ae:d6:d9:95:ab:e2:af:b6:55:b6:62:49:81:60:17:fd:d0:6e:
74:eb:10:e9:41:fc:69:d7:00:99:73:f6:89:e6:3d:b3:a9:2a:
3c:3d:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:53 2026 by rpki-client