Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
File: olrSzhcYk-YHpyuunQVE_AHTCao.mft (raw, json)
Hash identifier: YQCtciaWcHqUjma9ppch+kvWlfw0Bd+2xaPiY4ByktE=
Subject key identifier: B4:FA:3B:A2:BC:43:DA:7B:9B:DC:F4:76:1C:95:25:9B:EE:B0:77:1B
Authority key identifier: A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
Certificate issuer: /CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Certificate serial: 019E1C0FF94C5E93A57BCC561902A2CDA864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
Manifest number: 20
Signing time: Tue 12 May 2026 12:01:09 +0000
Manifest this update: Tue 12 May 2026 12:01:09 +0000
Manifest next update: Wed 13 May 2026 12:01:09 +0000
Files and hashes: 1: hB7k-pSsmCCA65cdeBOLaQ0pu5c.roa (hash: VeZsd2ieUrYDf4TqpzlV6sh6N/ypni7g2R6QNYjKO6A=)
2: olrSzhcYk-YHpyuunQVE_AHTCao.crl (hash: Y+UUetEkEFxDe3Hmt3HbOEFOXpCd5Udx4WfS9DhERPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:f9:4c:5e:93:a5:7b:cc:56:19:02:a2:cd:a8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Validity
Not Before: May 12 12:01:09 2026 GMT
Not After : May 13 12:01:09 2026 GMT
Subject: CN=b4fa3ba2bc43da7b9bdcf4761c95259beeb0771b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:86:f6:82:6b:c3:70:ef:6c:10:3c:2d:05:
50:bc:01:55:01:33:f6:48:ff:5d:54:b0:86:fe:43:
17:85:6c:70:aa:8a:06:18:33:b2:1b:cb:58:a9:d9:
f2:5f:12:24:f2:86:8a:b2:38:5c:40:1e:82:4a:c1:
fb:36:7c:be:dc:f9:81:7a:6f:ba:fb:f1:5a:bb:67:
54:6a:fb:83:36:c5:61:3f:94:45:be:41:d0:9f:56:
98:6e:57:33:8c:10:11:c5:e4:f9:e7:6d:66:b3:b7:
36:30:45:81:b6:99:26:aa:c0:84:ce:06:06:1b:f3:
a6:27:e3:dc:7e:ab:bb:72:fc:96:11:f6:df:04:ea:
9b:33:ee:a9:15:e2:d9:38:4c:51:5c:0a:b9:62:99:
47:fc:4c:a8:6c:3a:28:2f:5c:1d:34:75:24:f4:28:
9e:8b:6b:a9:be:94:b5:c9:b8:44:ee:dd:1e:ce:22:
86:a3:b7:0c:f8:d6:c8:be:0d:bc:53:cb:9e:c0:81:
fb:d9:cd:cf:9f:ed:42:39:84:54:d2:47:6c:e1:07:
46:f1:52:44:8b:6c:08:a7:6c:17:87:e5:87:e7:ad:
a9:ae:0a:3b:ff:32:ad:d0:8f:48:5e:60:e9:34:53:
a0:fe:79:a2:de:21:28:9d:a2:c2:ef:35:33:8e:0f:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:3B:A2:BC:43:DA:7B:9B:DC:F4:76:1C:95:25:9B:EE:B0:77:1B
X509v3 Authority Key Identifier:
keyid:A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:61:c7:e0:eb:c2:55:d6:f8:fb:f2:8b:6c:b4:6c:08:fc:04:
d0:7b:e5:29:27:3b:8c:bf:9d:60:9b:bd:32:50:bd:dc:2f:ff:
0d:0b:84:a5:ea:c1:19:7f:c9:64:e6:44:52:3a:49:00:43:86:
88:53:ce:0c:98:77:2b:b3:60:ed:1d:bf:5a:13:c9:ad:1d:0e:
d0:31:cb:8d:61:81:61:cb:b0:7d:64:1b:ca:7c:65:7f:91:bd:
3f:a4:de:a2:63:c5:a6:5a:3a:35:51:ec:42:b9:e5:57:8d:4e:
ef:db:26:09:25:9f:ba:ad:aa:fc:3d:71:74:53:91:2c:df:1a:
0b:a8:f3:92:dc:e9:5b:df:ce:e5:3a:2a:5e:82:69:43:3c:62:
92:c7:5d:b7:ab:1b:63:e6:3b:63:e8:48:32:81:f4:a1:11:3a:
18:10:84:b0:c6:10:34:62:7f:33:a8:40:8c:a6:5f:c1:36:57:
44:a9:43:6c:23:4b:f4:1a:08:33:be:b7:a5:0e:2e:b9:a3:06:
f4:88:1c:94:0d:20:79:2c:ac:3a:9f:47:7d:4f:d6:3f:e3:97:
8f:d0:4a:6c:77:d9:d3:82:18:4a:3b:48:0c:c4:70:e0:ca:7e:
8c:61:28:ff:17:71:f6:46:7e:e4:ba:3d:87:47:57:ef:fc:32:
80:e9:19:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD/lMXpOle8xWGQKizahkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNWFkMmNlMTcxODkzZTYwN2E3MmJhZTlkMDU0NGZjMDFk
MzA5YWEwHhcNMjYwNTEyMTIwMTA5WhcNMjYwNTEzMTIwMTA5WjAzMTEwLwYDVQQD
EyhiNGZhM2JhMmJjNDNkYTdiOWJkY2Y0NzYxYzk1MjU5YmVlYjA3NzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6CG9oJrw3DvbBA8LQVQvAFVATP2
SP9dVLCG/kMXhWxwqooGGDOyG8tYqdnyXxIk8oaKsjhcQB6CSsH7Nny+3PmBem+6
+/Fau2dUavuDNsVhP5RFvkHQn1aYblczjBARxeT5521ms7c2MEWBtpkmqsCEzgYG
G/OmJ+Pcfqu7cvyWEfbfBOqbM+6pFeLZOExRXAq5YplH/EyobDooL1wdNHUk9Cie
i2upvpS1ybhE7t0eziKGo7cM+NbIvg28U8uewIH72c3Pn+1COYRU0kds4QdG8VJE
i2wIp2wXh+WH562prgo7/zKt0I9IXmDpNFOg/nmi3iEonaLC7zUzjg8n+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT6O6K8Q9p7m9z0dhyVJZvusHcbMB8GA1UdIwQY
MBaAFKJa0s4XGJPmB6crrp0FRPwB0wmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xyU3poY1lrLVlIcHl1dW5RVkVfQUhUQ2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82NjM0NTMtY2Y5Mi00OTE1LWFmMjYt
ZDJmMWNlYmI2M2FhLzEvb2xyU3poY1lrLVlIcHl1dW5RVkVfQUhUQ2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82NjM0NTMtY2Y5Mi00OTE1LWFmMjYtZDJmMWNlYmI2M2Fh
LzEvb2xyU3poY1lrLVlIcHl1dW5RVkVfQUhUQ2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGHH4OvC
Vdb4+/KLbLRsCPwE0HvlKSc7jL+dYJu9MlC93C//DQuEperBGX/JZOZEUjpJAEOG
iFPODJh3K7Ng7R2/WhPJrR0O0DHLjWGBYcuwfWQbynxlf5G9P6TeomPFplo6NVHs
QrnlV41O79smCSWfuq2q/D1xdFORLN8aC6jzktzpW9/O5ToqXoJpQzxiksddt6sb
Y+Y7Y+hIMoH0oRE6GBCEsMYQNGJ/M6hAjKZfwTZXRKlDbCNL9BoIM763pQ4uuaMG
9IgclA0geSysOp9HfU/WP+OXj9BKbHfZ04IYSjtIDMRw4Mp+jGEo/xdx9kZ+5Lo9
h0dX7/wygOkZuA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:44:36 2026 by rpki-client