
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
File: d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft (raw, json)
Hash identifier: PeS8+o6Bg3nFjmvAdcXWoTK9yOdbQa12jKUYZqX8YRA=
Subject key identifier: 5F:73:95:52:13:61:70:A5:CC:3C:C6:F9:F7:AE:31:8B:D6:15:35:82
Authority key identifier: 77:4A:25:72:8C:95:0E:60:AC:69:AE:AC:3A:B5:74:5A:4E:3E:44:C3
Certificate issuer: /CN=774a25728c950e60ac69aeac3ab5745a4e3e44c3
Certificate serial: 019F916D57CE55DD37B93E698080D250B954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:29 +0000
Manifest this update: Fri 24 Jul 2026 00:01:29 +0000
Manifest next update: Sat 25 Jul 2026 00:01:29 +0000
Files and hashes: 1: Qo5Twpuw0PJHEUfRV8uv8sKD0Jo.roa (hash: /0O51CgL1416iwNlL7nR6ylxjftB4K89aEzhgfr+0xs=)
2: d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl (hash: s9WjSLOC81FsPzq1sMS6R7oqiLwusA+BOiDeZbWUkBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:57:ce:55:dd:37:b9:3e:69:80:80:d2:50:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774a25728c950e60ac69aeac3ab5745a4e3e44c3
Validity
Not Before: Jul 24 00:01:29 2026 GMT
Not After : Jul 25 00:01:29 2026 GMT
Subject: CN=5f739552136170a5cc3cc6f9f7ae318bd6153582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:31:ad:d5:bb:85:f1:dc:3f:34:81:eb:21:
ac:43:63:80:87:20:50:c7:9c:61:79:a0:0f:74:1e:
0c:03:54:c9:2c:84:c3:d9:e0:a5:db:82:53:0d:5e:
a7:95:4d:5c:fb:8d:5f:c7:cf:f4:65:27:0b:46:00:
26:c9:9d:5c:60:4c:41:e4:4a:1c:53:ee:4a:27:68:
83:2e:0a:a8:28:c7:c6:4e:23:6a:e0:63:87:14:11:
a8:ca:e7:f9:db:30:9a:96:de:65:a4:8b:2c:a1:8e:
88:00:9a:bc:37:da:0e:ef:1f:20:b8:bc:9f:0b:87:
af:99:ea:44:a7:09:52:a5:5d:1f:51:16:e9:cc:72:
93:e4:c2:a2:4c:7e:8f:50:41:bd:d4:f0:39:d9:b5:
5f:2b:24:cc:17:0a:3b:03:ee:79:ae:a9:5b:9c:fa:
89:dd:a4:6a:66:65:5d:5e:4a:52:73:2a:ba:cf:d4:
6f:fa:cf:6e:bd:58:3f:e4:a1:6d:d3:32:6c:6b:d9:
79:7b:f3:1e:ab:cd:a0:ae:63:75:1a:98:54:b5:a7:
0d:e5:40:f7:a1:f5:5a:82:52:4d:46:e1:30:62:1d:
9a:33:0d:ed:9f:6d:d0:a6:cc:39:a2:51:95:3a:1f:
00:8d:1a:f1:3c:35:f1:2e:a3:f2:6e:db:f9:15:7a:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:73:95:52:13:61:70:A5:CC:3C:C6:F9:F7:AE:31:8B:D6:15:35:82
X509v3 Authority Key Identifier:
keyid:77:4A:25:72:8C:95:0E:60:AC:69:AE:AC:3A:B5:74:5A:4E:3E:44:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ea:8f:51:2e:a6:10:be:40:28:33:1a:f7:5d:a3:54:02:e6:
4b:19:61:7c:09:da:e6:ad:84:11:07:67:22:31:27:6e:4f:ea:
c2:66:cc:90:af:e2:b7:90:55:56:70:eb:c4:e7:b0:bb:66:50:
01:e4:da:8c:14:33:04:00:00:ed:eb:f3:69:1a:09:f1:7f:d0:
db:af:54:7f:07:a6:12:f7:2a:00:6d:ec:f5:62:1c:05:79:a1:
dc:4f:a4:f4:e1:a8:45:2f:37:10:f6:68:c6:db:cb:ab:e3:fa:
4e:b3:77:a0:5c:b2:40:04:15:b2:79:a6:ee:c1:0b:59:42:68:
4d:74:3d:12:f4:50:20:72:85:bb:40:6c:05:e7:23:5d:2e:f4:
56:9e:2b:77:c5:2d:a1:fc:8e:7b:90:13:b7:7e:64:58:f5:7d:
d4:c2:92:a7:7e:01:65:c3:6f:37:75:a4:20:78:95:ec:40:56:
ea:00:5d:6a:a0:46:cb:02:6c:f7:b9:7a:79:6b:f0:39:79:55:
43:0f:8d:0b:1b:cc:31:f2:2c:71:d6:8a:5a:db:53:d8:e2:93:
7c:8d:bb:25:22:ac:34:ba:b0:ea:c8:da:91:57:c7:87:f4:43:
1d:45:7d:3b:4f:f5:73:3a:95:63:5a:8b:f1:5c:6a:fc:8a:0e:
fa:93:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:28 2026 by rpki-client