Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json)
Hash identifier: TJqraSXR8/Z/Ds0rBlGL2dbmPhtB3C0Z2pdTUTra6hI=
Subject key identifier: 15:6D:DB:40:B8:6B:A3:A1:91:9C:31:74:23:64:98:A8:D1:68:6C:86
Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Certificate serial: 019D2884920AC3B2DC7845DBAC2282FAA6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 05:01:09 +0000
Manifest this update: Thu 26 Mar 2026 05:01:09 +0000
Manifest next update: Fri 27 Mar 2026 05:01:09 +0000
Files and hashes: 1: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: 0439snpTD1FkuQbvK8TpqV1N0ia+dod2LpdjPlDyaEw=)
2: ojj60KvEfIbBq__ojwSvccF3vWk.roa (hash: d0sPYG2tha8/FS0gE9+VMYJY8H3oZde90RvtZHcEaNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:92:0a:c3:b2:dc:78:45:db:ac:22:82:fa:a6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Validity
Not Before: Mar 26 05:01:09 2026 GMT
Not After : Mar 27 05:01:09 2026 GMT
Subject: CN=156ddb40b86ba3a1919c3174236498a8d1686c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:b1:ae:19:d9:38:1a:5f:94:01:8c:5a:7a:
45:8c:a1:17:50:cb:f7:7d:ff:5c:07:3d:a3:c8:ae:
41:50:49:98:ad:68:13:ac:95:1a:9d:11:34:9b:df:
8e:0f:04:a3:f1:1a:57:9f:ef:2f:ba:e2:7d:d2:58:
fd:e3:e8:20:18:56:84:15:c0:bd:41:d2:26:d7:34:
f4:7d:c0:ae:ee:f5:02:21:e0:2b:83:eb:4d:6a:bc:
2c:ec:ee:82:6b:7e:d5:d2:03:33:42:7a:58:ca:dc:
40:d8:ec:d3:46:3c:e5:ed:63:94:63:ee:45:0e:96:
e6:32:0b:3e:43:a3:59:4b:f9:c4:3a:6e:45:ae:24:
6d:cd:07:65:93:e2:f3:37:4d:36:75:08:1b:b1:7d:
f7:3e:0d:90:60:76:a6:89:01:c4:e3:a7:7c:8c:a8:
ac:f0:21:f0:55:98:6e:d1:14:f4:02:31:7f:89:6f:
d0:0c:e4:17:cf:f5:44:ad:fe:0d:d1:e3:de:37:b4:
5d:37:48:2c:0f:94:8d:aa:4d:63:94:61:a7:1c:78:
26:c1:fd:60:e6:bd:fb:5e:ef:9b:73:58:f8:41:c3:
59:a9:d3:b1:65:81:94:f6:82:94:c0:2a:2c:fd:3a:
4c:a2:5d:61:d1:42:87:8d:5a:ba:d0:d3:10:86:32:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:DB:40:B8:6B:A3:A1:91:9C:31:74:23:64:98:A8:D1:68:6C:86
X509v3 Authority Key Identifier:
keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a1:1f:66:20:cd:fe:98:e3:47:be:39:2f:65:e0:ac:63:c6:
d0:e2:c8:27:ee:9e:4e:26:ae:9a:d8:e3:64:85:f7:d2:ee:cb:
6d:62:14:70:b5:83:a5:64:13:95:c4:08:e1:9f:0a:a7:98:a3:
eb:75:86:12:c5:b0:f9:d2:c2:45:99:98:5d:43:52:46:d6:a4:
ff:b1:4e:8e:22:79:51:a1:b2:76:49:e4:38:06:e0:e4:8f:3a:
b0:e5:49:db:76:d2:59:e9:84:b2:2a:12:e6:f5:d0:f2:79:b0:
a3:15:2b:c8:4f:8d:e7:15:96:da:39:c3:2e:2e:1a:bb:1e:49:
89:96:46:c8:36:23:fa:1b:46:c9:16:1e:3e:c5:7b:d1:8f:ab:
d7:90:06:32:7b:d7:b2:2b:2e:59:88:b1:d6:66:86:ba:98:c0:
e0:13:77:e5:9b:bc:87:56:37:fa:58:46:fb:db:12:a7:0a:75:
de:ab:ac:cd:0f:71:fc:3a:e1:5c:86:99:07:4d:8f:f0:f5:e1:
98:ec:60:88:af:a1:d7:ef:35:f9:ee:90:fd:25:d0:19:69:66:
e1:f4:6c:1d:33:25:c5:8d:2a:36:20:eb:23:44:95:41:a6:f3:
f8:5a:5a:b3:18:72:0d:33:2d:dc:7b:91:0b:5a:9c:d1:25:f2:
99:57:ca:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:05:08 2026 by rpki-client