Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: SwHkkbeVvjslYLP3UFqSnkmn7AxF7siFFPB9w86mzJo=
Subject key identifier: 5D:39:D3:CF:93:18:FA:02:EF:B8:A0:76:81:00:BF:34:4B:DE:38:84
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 01A143F1207DDFBB2AE11FFC9A9C8EF0C853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1AA8
Signing time: Fri 16 Oct 2026 09:00:38 +0000
Manifest this update: Fri 16 Oct 2026 09:00:38 +0000
Manifest next update: Sat 17 Oct 2026 09:00:38 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: 48Ds6zb34CH3Ws0agtJdJMMgfkmfxBZpwJSNoxlAu74=)
2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:f1:20:7d:df:bb:2a:e1:1f:fc:9a:9c:8e:f0:c8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Oct 16 09:00:38 2026 GMT
Not After : Oct 17 09:00:38 2026 GMT
Subject: CN=5d39d3cf9318fa02efb8a0768100bf344bde3884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:d0:fb:d0:e9:7c:1e:2c:76:3f:10:b9:4b:
d5:2b:8c:ba:7e:43:ca:fd:08:50:94:61:e0:71:1f:
d2:17:ee:a4:fb:37:51:61:fa:12:a1:cc:52:3d:0c:
84:69:d9:d1:4f:2b:19:a1:aa:49:27:5b:3e:e3:1c:
16:7b:2d:bb:be:8e:c2:06:e8:36:1d:0b:96:d7:e6:
ed:f2:23:91:5f:0b:2e:ec:d7:dc:60:46:01:f9:5d:
59:ca:bf:3f:15:aa:c0:95:e1:d1:c1:5b:e0:6a:62:
f8:03:df:0d:95:8b:a2:12:c6:82:59:ea:ed:6c:e4:
d4:b4:2e:ff:e8:7d:57:ae:4b:8d:0f:d6:85:b8:59:
31:e7:7c:26:b2:80:22:66:18:04:15:1f:b2:15:fa:
9f:bb:58:1e:62:31:c1:c2:c6:04:b3:e4:2c:0f:e5:
ff:20:a9:76:6e:c1:68:85:0c:64:81:c4:80:2b:e5:
e4:04:1b:1d:6a:80:2e:4e:6a:b7:e0:6f:3e:99:5e:
36:c9:5e:62:92:47:6c:b2:99:f5:e8:fb:7e:41:b2:
29:be:ac:df:01:df:45:ef:0d:ce:10:e5:a1:c6:7b:
cb:ba:a7:fb:7c:02:d8:07:0e:9b:af:56:d7:5a:50:
1b:b3:69:6a:6d:8c:80:da:19:90:d1:d3:03:88:48:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:39:D3:CF:93:18:FA:02:EF:B8:A0:76:81:00:BF:34:4B:DE:38:84
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:26:d1:21:18:8e:69:5f:83:be:31:be:dd:7e:dd:1e:97:6f:
49:34:36:14:a8:04:b2:8e:da:9e:ef:3e:d2:db:47:45:ab:9b:
ff:ff:74:4b:ee:a8:52:17:88:85:db:69:81:c5:06:f4:07:4e:
3f:73:71:32:e1:2f:43:6d:38:70:a5:55:8e:92:c1:47:25:4f:
d4:32:57:cc:61:65:59:a9:69:9f:3c:fc:f9:55:da:ea:31:50:
7b:ca:e4:08:8c:ac:84:2a:d1:26:83:93:75:3e:50:4c:c5:5f:
db:67:ab:96:1e:0f:c3:cf:62:57:f4:0a:17:c2:40:e6:4a:b0:
97:dd:25:4d:1b:93:5d:4e:4a:bd:93:cb:83:fc:64:9e:33:5b:
c6:65:6a:21:aa:87:1b:60:3d:0e:e9:35:14:f5:48:6b:b5:37:
84:a7:7e:92:f8:5a:37:a1:36:3a:1d:9a:2a:0e:76:36:ed:39:
c7:cf:1b:c2:9e:c8:5c:6c:d9:ee:bd:ce:a0:6e:88:96:2e:09:
84:da:26:a8:98:db:a4:37:0f:34:8a:2a:85:e7:6d:e9:2c:51:
be:4f:ff:11:be:d4:37:6d:84:01:09:06:92:8e:a8:b3:67:23:
e2:41:99:0f:9d:75:ee:5c:78:f2:81:87:62:d9:0b:35:a2:f9:
0c:ae:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 12:34:55 2026 by rpki-client