Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: 6VHm19sto5ynpnOgdjjG+axiw25V9YfhLaGRtwGRsig=
Subject key identifier: E1:59:5A:E9:17:B7:46:02:67:A2:A0:B7:36:EF:96:D5:39:6A:06:1B
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019F935BF5BBE397E6450E6D5D9A72178EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0F54
Signing time: Fri 24 Jul 2026 09:01:45 +0000
Manifest this update: Fri 24 Jul 2026 09:01:45 +0000
Manifest next update: Sat 25 Jul 2026 09:01:45 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: uni9BwtUsQxI/icKzmTCBZ4oBih3gE6HiFIVJ4PRyPY=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:f5:bb:e3:97:e6:45:0e:6d:5d:9a:72:17:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Jul 24 09:01:45 2026 GMT
Not After : Jul 25 09:01:45 2026 GMT
Subject: CN=e1595ae917b7460267a2a0b736ef96d5396a061b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:23:ef:94:25:31:80:bd:8c:e2:ee:18:bd:
9e:53:09:77:7d:56:0d:ed:c3:74:ad:5d:6a:c4:ba:
24:ae:17:29:62:84:6c:97:47:ee:e6:61:12:26:80:
35:dc:3f:81:93:88:c9:76:d1:69:fc:38:f9:1e:75:
19:c1:42:92:3a:38:42:de:eb:72:b2:ef:d5:c7:1b:
3b:d7:7a:0b:23:6f:7c:2c:2a:23:33:38:1b:a8:3c:
19:26:86:6a:9a:52:96:20:5c:49:77:1c:ed:c1:6f:
24:c1:10:12:2c:45:f9:a9:f8:4d:49:ad:a4:bd:43:
e3:f4:5c:91:5e:bd:52:41:db:0d:87:76:98:4c:f3:
d2:ea:b4:08:f4:1f:91:2e:27:27:8b:4f:4b:c6:4c:
86:85:f2:72:08:1a:6e:56:76:11:28:28:f7:d2:ae:
39:77:c4:4f:e9:97:0f:7a:77:80:42:8a:28:d7:ec:
24:a4:29:b1:84:d4:6c:02:9a:94:a7:82:d4:44:49:
6c:b6:65:22:ee:71:19:a0:5b:03:11:e3:7f:6d:b8:
04:b0:e4:45:b9:23:1d:cd:89:a8:17:96:f5:0e:f5:
34:e6:8f:97:92:c3:1a:8d:26:64:4f:52:3b:77:8d:
3c:1a:6d:3e:23:39:64:13:a6:e9:66:45:cf:f7:09:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:5A:E9:17:B7:46:02:67:A2:A0:B7:36:EF:96:D5:39:6A:06:1B
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e7:ac:22:65:1f:fd:13:d0:53:aa:62:c7:4f:a2:6a:64:76:
1b:8b:d3:fa:9f:07:d6:99:a0:81:31:32:d3:b4:6f:2f:fa:b6:
81:7b:aa:8b:25:28:3a:fc:fc:1f:df:b7:c9:b2:7f:d6:c2:b5:
53:3d:65:e4:7e:a8:10:f5:40:2d:9d:89:be:36:76:5e:da:f6:
0d:c3:99:2d:66:8a:99:26:5c:64:44:7f:6f:1f:10:2d:8e:03:
56:6d:02:3e:d9:a3:11:2a:01:ec:69:42:d6:15:52:73:eb:a4:
50:5a:cc:2e:38:1c:fb:7c:8d:5c:b4:c7:6f:ae:4f:97:4d:86:
f4:fb:73:ca:eb:74:21:8f:a7:86:84:2a:7e:46:2e:e1:19:9b:
a9:54:93:d4:24:61:25:f9:78:a1:6a:ac:f6:c0:e4:f1:92:a9:
78:67:1d:66:49:6d:5a:d7:ae:24:b2:15:6c:43:9f:65:6d:d3:
04:12:98:bb:58:e1:ba:d0:ee:89:63:5a:24:0c:a0:5c:9f:15:
d2:28:a1:c6:3e:27:22:0a:45:be:9f:00:04:c4:88:50:27:9b:
de:b8:7d:a3:e1:a3:f1:43:df:ac:4f:3c:76:9d:be:77:2a:b5:
bc:55:1d:4b:4b:1b:c7:80:c8:53:6e:bb:66:df:38:a6:0f:4e:
9c:d3:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:25:49 2026 by rpki-client