Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: kRTTRmxc7SYEMGzuVyMpy23NED9D1qAvze9JKfm5ypw=
Subject key identifier: 24:A5:D7:7D:70:B1:70:49:2E:B6:FA:DC:0E:F3:09:A8:2F:CD:86:BE
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 019F9211B7A0C8F1B27BACBF13048CE3F20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 03:01:02 +0000
Manifest this update: Fri 24 Jul 2026 03:01:02 +0000
Manifest next update: Sat 25 Jul 2026 03:01:02 +0000
Files and hashes: 1: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (hash: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38=)
2: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (hash: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80=)
3: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: 0NoX2x3/1jOY6qCkQS6nIhjXtaoYNSrG+KCkaP4y12c=)
4: tQUf77NTQrBxw1fcSdCVANHeaJc.roa (hash: CFQEHCkhPkChPEYjQ/kOlbiTx1FtdSWfctFe9uQ1V1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:b7:a0:c8:f1:b2:7b:ac:bf:13:04:8c:e3:f2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Jul 24 03:01:02 2026 GMT
Not After : Jul 25 03:01:02 2026 GMT
Subject: CN=24a5d77d70b170492eb6fadc0ef309a82fcd86be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:40:e0:4d:c9:68:7c:31:ce:e9:c5:56:51:
3b:16:79:61:7e:04:48:2b:3c:88:90:2c:3e:82:f1:
be:f0:ae:97:2e:96:90:dc:a8:d0:08:c8:26:62:c6:
85:90:dc:fc:2f:6f:62:f7:d6:c1:35:4c:b0:5e:7e:
ef:e1:f8:76:af:3a:d8:5a:66:2c:bd:e3:77:8b:cd:
14:c0:62:d6:59:0d:ea:20:c0:f9:99:99:68:f9:71:
87:0a:91:f0:a2:87:aa:23:dd:d5:56:44:2f:f6:dd:
54:8b:cc:e8:57:db:17:de:ef:3f:e9:97:fd:ae:fe:
db:be:17:d3:a2:7c:db:3f:fe:3b:d2:26:0a:41:59:
d5:8e:7c:48:f6:50:f1:23:74:1a:13:66:2c:ae:0e:
47:70:54:c8:51:8a:8d:5a:a7:ca:6a:fe:1f:18:c1:
65:b5:6d:e4:20:d2:c2:4b:e0:21:b1:65:fb:18:60:
bf:39:30:0c:3c:fd:5e:dd:26:28:27:4e:2f:49:ac:
ee:6b:5b:30:41:2a:5e:ef:78:ac:29:be:5f:ee:75:
99:a9:38:b2:c8:94:44:14:c7:2c:09:31:97:75:4b:
cd:18:76:de:cc:77:46:84:98:86:23:28:57:18:e7:
1c:62:e1:c1:5b:13:42:e1:42:94:c0:e1:18:8e:f2:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:D7:7D:70:B1:70:49:2E:B6:FA:DC:0E:F3:09:A8:2F:CD:86:BE
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b3:44:86:ab:72:bb:0e:09:5b:d2:74:9e:08:66:58:ae:96:
46:66:e9:4c:92:7a:d9:4b:7e:6d:77:b7:58:5d:92:e0:07:48:
92:a4:2f:44:b5:43:68:55:dc:6b:e0:4a:82:e4:2b:19:00:2c:
7d:7d:04:56:fc:b2:23:f4:8e:c2:a0:93:e8:e2:4e:08:1b:62:
9f:9c:f8:59:5b:94:ae:98:f5:6f:0b:78:69:09:65:a5:39:f7:
b1:46:47:d1:7b:2f:b7:0a:9e:52:61:20:a1:ab:ba:3f:24:b0:
45:db:e5:13:18:71:3b:25:35:00:ed:ee:23:52:3a:0c:10:9b:
6a:cb:a5:a1:78:65:78:72:3d:c6:e3:14:8e:8f:ce:1b:f3:c7:
5e:7c:84:1f:af:0c:14:5a:f9:5a:01:19:7e:9f:0a:cf:c9:13:
6c:12:53:eb:8f:01:7d:b1:37:74:13:fb:54:c8:99:a4:fb:36:
74:d8:79:ea:33:27:9e:fe:4f:6d:af:2b:25:9c:d7:01:f8:bd:
cf:33:a9:cd:6c:34:b9:4c:46:9c:4e:ef:ab:7f:96:a6:5a:35:
ec:25:49:f0:ae:70:5b:86:94:cd:1f:8e:b4:f8:99:1d:7a:6d:
4d:6a:fe:c4:51:ad:3f:27:69:aa:b1:12:d7:88:cf:d7:f7:0d:
78:74:4a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:45 2026 by rpki-client