Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: EypOQ2S+wYaRc0hsWNckBDHTuPXcKhk/HSi3HAbsa9c=
Subject key identifier: D2:A6:B6:07:F5:67:EB:DA:7F:4F:76:F9:0A:8B:C0:7A:1E:90:73:53
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 01A14015328075D33E648481D1BD988DEA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 15:01:33 +0000
Manifest this update: Thu 15 Oct 2026 15:01:33 +0000
Manifest next update: Fri 16 Oct 2026 15:01:33 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: iimkg/HKp31igJrDl0GyP7HJUEVQfbiAERMNUFcGPnA=)
2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:32:80:75:d3:3e:64:84:81:d1:bd:98:8d:ea:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Oct 15 15:01:33 2026 GMT
Not After : Oct 16 15:01:33 2026 GMT
Subject: CN=d2a6b607f567ebda7f4f76f90a8bc07a1e907353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:3e:04:f8:88:88:b3:ba:27:bd:ec:08:21:
e0:32:64:d3:c7:28:24:35:8a:8c:c5:86:f9:b0:e6:
83:c9:cc:47:30:d1:f1:27:68:f6:f4:50:77:d7:4a:
8e:d1:88:46:95:9c:64:1f:d8:28:02:d5:2f:67:eb:
53:f1:d5:40:2a:7e:89:17:38:cb:2a:99:91:fb:5b:
ee:ee:8e:e3:53:50:b4:ad:93:30:cd:2f:0a:6e:70:
7c:89:69:76:61:c9:b3:5b:77:d3:61:e6:03:36:65:
74:47:d8:92:02:2e:36:20:af:7e:4c:bc:c2:a3:04:
47:63:8f:eb:49:f1:29:88:c9:37:c3:6c:23:f5:d0:
95:ca:05:0a:7d:1f:54:71:c7:86:63:65:8b:9e:1d:
dd:bf:9d:4c:4b:8f:83:20:c7:f3:06:1a:59:e7:73:
a8:76:63:a5:54:aa:6c:f0:bb:fe:3b:db:c4:3f:f8:
fe:ff:e2:eb:24:df:0d:23:32:e7:6e:29:92:4e:78:
9c:36:4c:b8:31:00:ce:f1:30:1c:05:25:f7:7e:d0:
ca:3e:fd:5c:7e:92:36:26:51:a4:66:65:3a:fa:62:
cf:e7:96:df:7b:14:4c:52:f1:94:ee:f7:b4:41:7f:
66:b0:6b:4d:1a:08:63:26:e9:cf:7a:2a:7e:d8:9f:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A6:B6:07:F5:67:EB:DA:7F:4F:76:F9:0A:8B:C0:7A:1E:90:73:53
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6c:fc:0e:fc:1e:be:37:26:ef:54:ed:be:0b:cd:88:b9:34:
28:d9:99:ea:f8:59:ff:ee:3c:93:ab:a7:3d:88:15:cf:f7:97:
ca:80:77:53:fe:c3:a0:7d:fe:9d:98:7b:67:a4:f3:e8:a3:e4:
8a:1e:76:b5:2f:72:37:50:8c:a4:c6:49:78:16:98:0c:ed:80:
29:5c:fd:c7:b1:62:50:ef:0a:cf:31:63:a4:df:50:dd:55:55:
53:11:41:8c:f3:63:00:cf:4f:21:55:e7:10:e0:25:f5:95:d7:
e3:b5:5a:0d:46:00:a9:a0:cb:45:b7:af:39:fe:e5:8e:e5:a8:
29:5c:1a:5a:d5:40:3e:58:7e:4a:37:b4:46:b8:84:22:04:19:
39:80:c0:51:26:53:2e:5e:18:f2:4a:1a:47:5d:7a:7d:e7:95:
f7:fc:95:69:6c:86:4c:e0:d6:7f:e9:d8:11:3e:1e:2a:07:f7:
ea:87:0b:d3:4a:86:5e:e6:ed:a7:7a:61:fb:4c:92:f5:1f:bf:
fb:58:c1:44:41:b1:67:91:e8:0b:e8:37:1a:d4:16:b5:64:60:
0d:72:48:88:21:e2:87:55:97:32:bf:b4:87:22:42:2e:69:39:
b4:a6:d4:14:b7:26:af:23:27:50:05:d1:40:ce:55:24:38:6e:
5e:3a:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:25:17 2026 by rpki-client