Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: laFVTxJAvf7G99uaHud+Bc+xw9zgRyBfIyFu/JUCmYE=
Subject key identifier: 0C:CF:44:F6:EF:03:62:B8:4C:10:E1:92:1E:8A:70:41:13:89:FD:86
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 019F91A366876D0560ECD7BEF86D7F910339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 0C96
Signing time: Fri 24 Jul 2026 01:00:32 +0000
Manifest this update: Fri 24 Jul 2026 01:00:32 +0000
Manifest next update: Sat 25 Jul 2026 01:00:32 +0000
Files and hashes: 1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: AzPwHCbu+rWTuEMrMOg0kCEFIhnTCHh3VsppIjOm65I=)
2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=)
3: Hs0IPvXPiiu5SRQabWCm2vLaUng.roa (hash: Jz9KhpCFWy1oS1Y7LmpahQlNI+tRAYvjIo9xoWdqMAY=)
4: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=)
5: LpR-LQvQfXymcif_LMaWE0JZD3g.roa (hash: zhvd1luynFJPjxGKrx2N652wizkvdv3su1q7wp46nxA=)
6: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=)
7: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=)
8: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:66:87:6d:05:60:ec:d7:be:f8:6d:7f:91:03:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Jul 24 01:00:32 2026 GMT
Not After : Jul 25 01:00:32 2026 GMT
Subject: CN=0ccf44f6ef0362b84c10e1921e8a70411389fd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:37:1d:ce:3e:8b:81:6b:8c:d3:3b:59:6b:4f:
b6:ce:e2:7e:65:88:7d:a4:b9:4e:c8:be:53:86:c5:
48:2a:4d:7f:bf:0a:81:1f:fa:b5:7c:02:d2:9e:fe:
fc:97:66:47:5e:b2:a5:55:b2:87:1f:bb:4f:a9:26:
6c:86:22:3b:bc:a9:a1:8a:35:0b:9d:29:f6:84:74:
2f:a0:fa:9b:be:ab:8e:65:55:30:b5:f6:10:cc:4f:
d7:96:c5:89:95:c5:e3:d2:0a:43:be:81:d2:52:de:
bf:57:ca:b3:b9:61:b0:98:1f:77:ba:93:a4:0c:f8:
01:f1:6f:bc:ca:35:ec:72:bd:06:e8:7e:fc:3b:db:
01:22:c0:5e:ae:14:48:5f:fc:d5:a1:a7:46:fd:30:
6c:49:ec:99:46:b7:57:36:ef:4d:80:67:a4:ad:b2:
f8:81:b4:45:1a:36:4b:7b:04:e0:ef:76:a5:f6:71:
fe:b9:22:f0:77:97:09:41:f4:ff:56:06:3a:7a:90:
84:6e:77:bf:48:4e:06:52:7a:e5:c6:0c:0d:5f:52:
87:47:7b:d2:19:7e:4a:43:08:09:f6:d0:78:41:62:
c6:2c:5f:e0:7c:62:71:c8:99:03:00:35:c1:3f:da:
36:e7:64:55:cf:e2:3c:74:60:cb:12:ab:70:f6:e7:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:44:F6:EF:03:62:B8:4C:10:E1:92:1E:8A:70:41:13:89:FD:86
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cc:3e:22:a4:c6:1a:7c:d7:1e:43:00:e4:29:5c:08:83:75:
d5:1a:d1:b7:9c:8a:63:80:8e:17:e4:8b:c4:65:7b:16:a0:cf:
a6:ad:11:a7:e5:39:bd:7d:5e:df:c5:22:c3:12:5a:2b:dd:c8:
06:33:64:d8:25:8b:94:5a:83:86:07:fc:4b:ff:bc:9a:03:5a:
8a:39:fa:6d:ac:9c:96:da:12:32:f4:4f:59:57:99:f8:e3:db:
e5:77:b6:c3:85:36:a5:d0:77:49:5d:cb:c4:27:83:b2:13:cc:
2b:dc:27:00:cd:2b:ab:95:cc:6c:64:f8:40:85:29:89:22:90:
08:ce:4b:3b:7e:4e:3c:f2:3b:84:18:69:12:4b:40:10:36:36:
0b:84:a4:dd:07:3c:5b:dc:90:d7:5c:b6:b8:cc:ff:6e:39:53:
80:c2:57:40:32:39:96:95:38:36:11:0b:38:5b:a7:04:b8:5c:
25:ba:93:15:96:44:e1:18:c6:bc:0d:48:92:eb:e9:f4:62:e6:
84:7a:3e:18:b6:46:ca:27:38:b0:e4:5f:0a:7d:7e:cc:ab:3a:
06:bb:d6:6c:d3:78:70:44:b7:be:bc:c4:a3:97:3e:be:ab:ac:
70:41:44:f3:90:23:4d:c3:0d:eb:08:ed:e1:4b:cb:16:96:5d:
dc:e3:55:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:13:38 2026 by rpki-client