Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: OsgB2nyvBROlrBUWZ8MG7E+kN9gcy2mazLNb122DGhA=
Subject key identifier: 0C:F6:BD:3D:69:37:1D:D6:D1:2C:74:75:CF:6F:CC:F7:08:1C:36:3B
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 019D28165E51E6A0A31C782CD6B5532710B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 03:00:47 +0000
Manifest this update: Thu 26 Mar 2026 03:00:47 +0000
Manifest next update: Fri 27 Mar 2026 03:00:47 +0000
Files and hashes: 1: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (hash: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38=)
2: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (hash: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80=)
3: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: xFsEhavzaw65R6Z4Q04CdxA0k1hxKsZY9LPHHxX4/ag=)
4: tQUf77NTQrBxw1fcSdCVANHeaJc.roa (hash: CFQEHCkhPkChPEYjQ/kOlbiTx1FtdSWfctFe9uQ1V1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5e:51:e6:a0:a3:1c:78:2c:d6:b5:53:27:10:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Mar 26 03:00:47 2026 GMT
Not After : Mar 27 03:00:47 2026 GMT
Subject: CN=0cf6bd3d69371dd6d12c7475cf6fccf7081c363b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:4b:de:22:18:12:1b:ee:fc:fa:3e:81:16:
e3:31:23:d5:0a:fc:bc:21:34:d7:45:5b:73:6a:af:
9b:3b:d4:36:e0:cd:a1:ed:c4:65:6b:72:62:84:1a:
f2:8f:fd:ff:95:ca:b5:2e:b2:c2:d6:8b:26:6f:60:
c0:73:ca:a4:77:23:72:48:f5:47:ff:a5:8f:7a:b0:
e2:ce:79:3c:fa:fc:a9:14:74:3a:3f:3a:46:83:68:
54:3a:08:b6:21:d8:35:8a:c0:bd:e1:65:5f:d4:7a:
bb:79:09:0a:cf:a6:dd:14:80:4f:ee:62:a5:54:36:
1c:73:f9:27:ef:4a:c0:89:62:14:a6:17:b8:bb:8e:
40:e2:d0:ab:45:fe:bb:40:a4:29:ca:8b:5e:8b:b7:
2b:a8:67:5a:64:ca:c3:9b:16:90:76:5a:57:b0:1a:
c8:f7:ce:5e:5c:df:2a:07:f8:30:96:ef:f5:03:69:
47:fd:14:88:f9:00:a0:a5:8e:54:98:41:22:63:bd:
7c:af:f3:6c:0f:9e:77:c3:88:76:7a:42:74:af:d7:
d3:2e:23:c1:95:01:a6:e2:e6:3a:03:c1:95:f6:ab:
f2:6d:66:24:59:17:a4:9f:5d:70:fa:b1:dd:af:07:
f1:07:3f:62:7b:49:97:52:fc:fa:9d:60:66:b4:f6:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:BD:3D:69:37:1D:D6:D1:2C:74:75:CF:6F:CC:F7:08:1C:36:3B
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ad:89:32:13:98:fa:b0:73:1b:97:05:82:1d:d7:31:f5:b4:
ce:61:72:58:9c:5e:75:fc:1a:6e:6e:3e:82:e2:39:79:0e:76:
95:ce:17:85:69:fc:35:08:10:f1:4c:d1:ae:39:a9:0e:6a:7d:
81:f5:6b:ee:89:67:7f:25:65:0e:f3:b3:cc:b1:d3:f1:ad:ac:
a1:f9:d9:09:21:bb:44:a2:85:fe:e4:6c:04:f5:6f:df:05:42:
14:a7:74:87:9e:7a:a3:87:c3:72:b2:e7:ef:d1:a9:dc:ea:d1:
a2:30:46:5a:7a:19:12:e0:81:ca:f1:01:53:44:c9:8d:20:3a:
66:c2:64:31:68:b0:66:7f:b1:46:62:ee:80:bd:01:99:34:d5:
a9:d6:1a:92:08:3c:f4:1f:66:2d:41:e0:74:0d:60:80:c6:96:
ef:5b:a1:34:cf:76:41:94:c4:07:d1:f4:c2:53:c8:64:0b:1a:
03:49:a1:1c:74:16:2a:b9:ff:0a:70:f8:e9:85:3d:6c:4a:29:
fe:ed:c8:77:73:3e:b2:52:2c:80:fd:bd:79:d2:85:13:fc:78:
f4:f1:36:37:38:18:32:5d:f3:37:db:57:fd:33:60:04:12:b8:
61:20:b9:62:31:dc:9c:2a:f8:2d:64:ac:8d:63:66:78:48:97:
b5:2c:d4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:34 2026 by rpki-client