Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: Od67SrNK7jnaHSrx54e6LWezcfgv4dyMxfHgDy7IFt0=
Subject key identifier: E6:A3:04:BF:CC:5A:F5:10:9C:32:06:05:29:2C:40:C2:29:25:E0:B9
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 019D29611BAC350EF39699EB1D2F0209A692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:02:02 +0000
Manifest this update: Thu 26 Mar 2026 09:02:02 +0000
Manifest next update: Fri 27 Mar 2026 09:02:02 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: JIuQ4AcbNYkRZQxmqgbCk/i8bqqxXguLqbiTa+TCfU4=)
2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:1b:ac:35:0e:f3:96:99:eb:1d:2f:02:09:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Mar 26 09:02:02 2026 GMT
Not After : Mar 27 09:02:02 2026 GMT
Subject: CN=e6a304bfcc5af5109c320605292c40c22925e0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:aa:eb:0a:42:9b:13:2c:bd:b5:53:f4:48:
05:f7:10:1d:62:ee:95:d2:ae:11:57:26:3d:95:70:
64:8d:d3:08:a9:01:c6:30:b6:21:ff:50:ab:4b:72:
39:66:f9:ac:eb:c0:ee:8e:e0:dd:62:b4:c5:12:55:
0f:a6:65:e4:62:ce:3f:14:2c:c4:62:29:fb:0e:fe:
2b:4e:86:07:89:33:21:4d:d8:f3:81:0a:19:fb:0b:
2e:d6:f7:6e:00:5c:d8:a3:82:81:55:8c:32:64:c8:
aa:bb:b2:a7:55:2a:f3:f7:68:5f:13:19:cd:16:12:
e5:73:74:62:9f:51:b7:63:65:b4:1a:ad:73:b7:eb:
c0:42:5d:d8:14:1f:a4:de:fe:6f:f0:57:c6:17:23:
0c:78:07:c1:a3:34:08:29:a7:5e:60:c5:fe:81:8b:
c1:33:85:99:cb:d3:b9:53:59:67:4b:00:0d:c1:40:
aa:ac:c7:59:58:5b:51:c5:32:d7:1e:48:aa:97:60:
6d:4c:92:a6:b1:11:b9:88:47:62:d6:e0:40:cb:30:
a3:26:3e:fa:0e:c2:42:bd:d2:72:80:eb:a4:56:e9:
ac:b8:ea:1d:b4:2b:02:a4:51:d5:3d:e1:96:ab:b4:
74:95:1d:bc:03:e5:52:31:1a:fc:e4:94:ff:03:2a:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:04:BF:CC:5A:F5:10:9C:32:06:05:29:2C:40:C2:29:25:E0:B9
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9b:92:a1:55:ad:a9:16:89:de:0c:44:be:ca:ff:e3:64:18:
26:db:14:ab:eb:cc:10:23:69:81:75:cb:08:20:37:a0:58:2c:
bf:d0:2b:ca:b3:d5:5c:4c:4c:f8:bb:70:3b:4c:1e:dd:9d:bf:
63:4e:fa:86:ad:56:e7:1b:01:39:16:09:c5:62:80:4b:33:4c:
16:9e:00:6b:01:3d:a7:53:4e:68:04:c7:2a:99:bf:f2:18:b3:
eb:46:08:cb:46:1b:72:6b:1a:d3:d2:76:9c:2c:25:9a:f3:63:
94:a9:ce:47:bc:bd:f4:a8:d2:27:6a:9e:1c:2a:5b:e3:43:11:
cf:f7:2f:c4:3f:86:bc:7f:60:a9:b9:52:1b:45:50:52:d6:e5:
97:e4:a4:6f:1c:3a:1f:d9:1b:d6:b9:de:64:fb:d2:7f:f9:2a:
f4:9a:e0:f1:10:5b:24:ff:35:e0:89:75:ed:02:b4:d1:6e:01:
a7:6d:a3:2f:56:1d:3b:1f:05:6c:8b:55:56:df:1f:ea:43:5a:
63:5c:6e:c1:6e:83:92:86:99:fb:35:6c:65:a4:86:ad:f4:d2:
ed:69:38:e4:cf:08:a0:6f:d5:70:27:46:9b:74:d1:e1:23:f3:
44:46:5a:d8:87:b6:c9:16:80:ff:1e:db:54:89:b7:d8:6e:3f:
a2:12:e6:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYRusNQ7zlpnrHS8CCaaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy
NGIyOGQwHhcNMjYwMzI2MDkwMjAyWhcNMjYwMzI3MDkwMjAyWjAzMTEwLwYDVQQD
EyhlNmEzMDRiZmNjNWFmNTEwOWMzMjA2MDUyOTJjNDBjMjI5MjVlMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGWq6wpCmxMsvbVT9EgF9xAdYu6V
0q4RVyY9lXBkjdMIqQHGMLYh/1CrS3I5Zvms68DujuDdYrTFElUPpmXkYs4/FCzE
Yin7Dv4rToYHiTMhTdjzgQoZ+wsu1vduAFzYo4KBVYwyZMiqu7KnVSrz92hfExnN
FhLlc3Rin1G3Y2W0Gq1zt+vAQl3YFB+k3v5v8FfGFyMMeAfBozQIKadeYMX+gYvB
M4WZy9O5U1lnSwANwUCqrMdZWFtRxTLXHkiql2BtTJKmsRG5iEdi1uBAyzCjJj76
DsJCvdJygOukVumsuOodtCsCpFHVPeGWq7R0lR28A+VSMRr85JT/AypCxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOajBL/MWvUQnDIGBSksQMIpJeC5MB8GA1UdIwQY
MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt
ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw
LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJuSoVWt
qRaJ3gxEvsr/42QYJtsUq+vMECNpgXXLCCA3oFgsv9AryrPVXExM+LtwO0we3Z2/
Y076hq1W5xsBORYJxWKASzNMFp4AawE9p1NOaATHKpm/8hiz60YIy0Ybcmsa09J2
nCwlmvNjlKnOR7y99KjSJ2qeHCpb40MRz/cvxD+GvH9gqblSG0VQUtbll+Skbxw6
H9kb1rneZPvSf/kq9Jrg8RBbJP814Il17QK00W4Bp22jL1YdOx8FbItVVt8f6kNa
Y1xuwW6DkoaZ+zVsZaSGrfTS7Wk45M8IoG/VcCdGm3TR4SPzREZa2Ie2yRaA/x7b
VIm32G4/ohLmVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:58:02 2026 by rpki-client