Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: TYu9098tG6ZwM9LGtwr8I6MxEYXsb6HvoggaexTqbG8=
Subject key identifier: F2:E7:B8:C9:C4:9E:07:D3:A3:7D:99:8D:99:BB:ED:9F:6D:92:92:56
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 01A0FD2212D9F106E52BAE63F04785CA498C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 1A88
Signing time: Fri 02 Oct 2026 15:01:03 +0000
Manifest this update: Fri 02 Oct 2026 15:01:03 +0000
Manifest next update: Sat 03 Oct 2026 15:01:03 +0000
Files and hashes: 1: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (hash: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38=)
2: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (hash: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80=)
3: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: CZHV2Bdtc9OpHROJiyFno9FAhO4/EfQaqdg3i+HMAhk=)
4: tQUf77NTQrBxw1fcSdCVANHeaJc.roa (hash: CFQEHCkhPkChPEYjQ/kOlbiTx1FtdSWfctFe9uQ1V1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:22:12:d9:f1:06:e5:2b:ae:63:f0:47:85:ca:49:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Oct 2 15:01:03 2026 GMT
Not After : Oct 3 15:01:03 2026 GMT
Subject: CN=f2e7b8c9c49e07d3a37d998d99bbed9f6d929256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:2a:f0:74:05:df:a7:d6:b6:e6:61:f8:b8:
e5:f1:f7:66:9c:e1:77:b1:22:6e:d0:00:53:7d:7a:
60:4c:ff:4b:73:a8:78:ed:5e:2d:2b:b9:62:80:77:
59:5b:60:aa:57:91:fc:ef:16:f2:b4:67:84:18:2d:
19:68:75:60:11:65:62:00:a5:c6:bc:ac:ad:00:03:
ad:0d:15:36:58:59:13:2b:e5:0c:ee:39:7f:f4:b7:
1f:10:c8:b4:ff:8e:0c:49:89:78:86:b1:4b:34:23:
d0:e7:f3:43:28:0a:92:7b:e1:e4:95:f6:b7:0a:ba:
ca:ef:92:eb:85:d5:93:93:9c:fd:dc:33:43:90:7c:
f2:03:d0:bb:49:38:80:b6:42:03:39:b6:4e:0a:9b:
9a:76:58:30:67:ce:fe:f6:8e:15:20:ef:ce:5a:f9:
93:62:91:3c:8d:27:2b:c5:a4:38:9b:65:3b:b9:1a:
24:a5:42:45:39:1f:4a:1d:9f:e0:4b:cf:18:93:50:
c2:f9:fd:45:fe:95:ab:6b:0d:78:6a:6a:5e:dc:85:
87:8c:f6:73:e2:20:ca:97:07:67:28:b6:3d:35:45:
86:02:dd:7d:72:fc:87:cc:1a:fa:99:57:ce:45:77:
1e:92:3e:ae:dc:f9:24:f3:0c:0f:e8:2d:e8:76:14:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:B8:C9:C4:9E:07:D3:A3:7D:99:8D:99:BB:ED:9F:6D:92:92:56
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d0:4e:a9:2d:cb:17:25:6b:c9:64:9a:0d:4f:1c:25:fe:76:
0e:0d:7e:70:66:e9:20:44:41:85:87:e4:5f:61:67:55:eb:59:
e2:e7:ff:65:c3:cc:74:b2:4a:8e:56:52:90:7d:cc:1e:75:41:
12:a5:4e:3f:a0:53:c4:28:9b:cb:13:50:a1:30:12:ac:8a:5d:
80:bb:0f:c7:f9:25:81:b3:49:bf:f3:5c:4e:dc:57:c6:5f:c0:
60:5f:3f:da:f9:b3:1c:83:78:00:f0:ea:db:e1:6b:f1:40:f7:
ff:6d:1b:1f:98:48:13:1c:c3:0e:88:89:c4:4d:79:13:3f:bf:
aa:62:c7:6a:b0:aa:38:e6:23:56:32:b6:9b:b1:f4:9c:c5:b2:
fa:83:f3:29:61:9b:5f:89:56:b1:3f:08:f9:ec:e0:11:d2:5a:
cb:0c:7a:a2:2e:cb:b1:24:2f:29:39:a7:78:e7:59:85:34:1b:
18:f6:29:b9:57:9c:5a:fc:48:84:3e:78:f6:6e:c2:d9:93:cd:
d9:d4:9f:e3:23:74:bc:c0:a4:29:50:11:0f:a0:c2:85:c0:13:
8b:53:84:0c:bf:9c:2d:40:a5:de:24:b0:58:19:f2:6b:95:a2:
96:50:37:39:66:f7:e9:8e:eb:26:61:87:6c:31:70:d4:9e:63:
61:ff:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:20:13 2026 by rpki-client