Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
File: olrSzhcYk-YHpyuunQVE_AHTCao.mft (raw, json)
Hash identifier: DXTUHkYuif1f0JIIsutnBTsEBlJJcXP27xkfn8jj+nc=
Subject key identifier: 27:08:6F:D8:73:DC:1B:0C:D8:19:54:C5:DC:2B:5A:A3:54:10:BA:4E
Authority key identifier: A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
Certificate issuer: /CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Certificate serial: 01A0DCF2A690A624AF2147E03374BE0A046B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
Manifest number: 018D
Signing time: Sat 26 Sep 2026 09:01:24 +0000
Manifest this update: Sat 26 Sep 2026 09:01:24 +0000
Manifest next update: Sun 27 Sep 2026 09:01:24 +0000
Files and hashes: 1: hB7k-pSsmCCA65cdeBOLaQ0pu5c.roa (hash: VeZsd2ieUrYDf4TqpzlV6sh6N/ypni7g2R6QNYjKO6A=)
2: olrSzhcYk-YHpyuunQVE_AHTCao.crl (hash: jt3DNsAMldp8dsQnqdHsR3Ni+w8z8LK/8mXEg22qB3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:a6:90:a6:24:af:21:47:e0:33:74:be:0a:04:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Validity
Not Before: Sep 26 09:01:24 2026 GMT
Not After : Sep 27 09:01:24 2026 GMT
Subject: CN=27086fd873dc1b0cd81954c5dc2b5aa35410ba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:09:e2:ea:32:ef:a5:df:6f:ff:79:c0:55:
b9:19:cb:59:f6:f2:e3:c1:0f:62:68:6d:49:b4:ae:
44:72:b7:b0:83:da:27:c5:da:ff:ec:87:e2:94:2a:
15:a6:9c:c0:ca:84:20:e6:86:fd:0d:e3:ca:51:7a:
d4:f6:71:97:d5:bb:1d:90:f8:d0:d6:1f:c9:0b:6d:
2e:92:49:25:28:9d:fd:69:39:dd:21:c9:a4:e3:be:
88:11:7e:bf:8c:e1:c8:b9:08:6e:6a:75:66:72:18:
27:4e:b7:20:db:e3:cb:36:0b:6f:16:5f:fe:96:0a:
68:5e:b5:f8:43:7a:12:cd:4e:77:cd:1f:8f:94:9c:
6f:48:88:e3:12:30:04:f7:a6:87:44:09:26:33:2e:
1c:20:c2:30:e5:65:c0:27:51:87:88:b8:71:cf:d7:
2e:1d:77:f2:84:75:b4:72:4a:90:55:8f:d4:92:dd:
99:2a:2b:79:ee:71:a1:53:b5:69:5e:39:05:96:71:
44:c7:f7:50:19:44:82:5f:b7:82:ad:87:e3:b8:14:
54:1e:ec:f8:8f:3a:2d:e9:30:91:14:db:81:f1:c0:
bc:e2:4f:a3:99:ed:55:0b:28:49:00:3d:1a:1f:8f:
92:c5:a1:1d:0b:a9:c4:1b:b4:72:08:76:a3:e6:b2:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:08:6F:D8:73:DC:1B:0C:D8:19:54:C5:DC:2B:5A:A3:54:10:BA:4E
X509v3 Authority Key Identifier:
keyid:A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ef:54:f3:bb:54:0f:cb:b1:ed:db:03:e1:ba:84:1e:a9:59:
f0:86:0a:8f:37:a1:40:88:5f:8d:d3:48:85:31:94:67:7f:89:
a1:16:52:a1:97:24:25:48:c9:65:7c:a9:67:47:f7:af:76:8b:
c6:06:e0:f9:5d:5f:a6:ff:27:5e:5d:2c:b1:52:5f:8b:e7:3a:
2b:de:73:de:48:d5:7d:13:19:38:3e:33:19:a9:97:78:57:0c:
41:a8:b9:ee:8e:18:81:ce:7f:3a:7f:69:f5:fd:72:67:78:c6:
5c:d6:8b:e3:cb:d3:b5:2c:9d:0d:37:34:e6:dd:f8:b9:27:1d:
3b:6b:37:f7:ba:97:c0:25:3a:0e:9c:cd:9b:00:bb:22:5d:3b:
20:ee:4c:44:9b:f3:4a:99:c9:0d:c9:a9:ed:fc:c5:90:20:c5:
0f:85:1d:79:34:c1:04:f2:e2:a6:51:b1:63:db:bf:c2:73:c1:
64:12:8e:40:e7:24:39:95:7f:20:35:58:63:4a:ef:b6:b6:a5:
0d:b9:dd:3f:ab:50:fd:36:46:da:01:53:9c:9f:3d:55:81:5f:
38:6c:02:e9:03:09:14:89:6f:2f:7f:17:0d:bc:d6:1a:64:04:
07:7d:39:2c:9b:41:17:b7:b2:0a:fb:8b:a6:81:da:82:3f:47:
4a:96:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:15 2026 by rpki-client