Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: tZ7uwBvkEUKRl6bKmU+ViTHEfX2SV+EYLUFw16I5dJA=
Subject key identifier: C8:D4:48:58:BE:15:76:B7:7B:53:2E:7D:83:12:0D:A7:53:86:79:79
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 019D273B12C2496BDB52CBBC234CD8392C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: 051F
Signing time: Wed 25 Mar 2026 23:01:15 +0000
Manifest this update: Wed 25 Mar 2026 23:01:15 +0000
Manifest next update: Thu 26 Mar 2026 23:01:15 +0000
Files and hashes: 1: J4UCVAcwWyMQiy7Ru5nI6nUIlKs.roa (hash: K0a1hsmq8k2+rfaUptvdh5+6B/4bXHELmZDPbzQl5PY=)
2: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: Nui8QLSYzIxwZkaTEQolBHyXmUR07X2TG17NT3hr1wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:12:c2:49:6b:db:52:cb:bc:23:4c:d8:39:2c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Mar 25 23:01:15 2026 GMT
Not After : Mar 26 23:01:15 2026 GMT
Subject: CN=c8d44858be1576b77b532e7d83120da753867979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:3a:91:8a:40:d7:7d:38:f0:86:81:79:fa:
c6:1d:8e:94:8c:38:6f:4f:70:f2:ae:1e:c0:cb:0e:
ee:5e:8c:6a:40:1a:f8:49:b6:72:d1:a8:62:e9:3c:
c7:09:a1:f8:62:59:bf:9f:ac:59:c0:04:e0:03:10:
bd:52:5a:31:f7:ba:2c:f1:3e:9d:e0:4c:28:26:ab:
7c:36:92:ac:e8:01:10:71:da:ce:55:d2:03:74:18:
6d:1b:74:b7:3e:1c:ae:12:c8:4e:cf:0e:d2:43:ee:
ca:65:2f:07:2e:54:70:f5:1e:9b:9d:f2:24:77:2c:
85:ab:b5:d1:93:85:da:7a:79:ad:6e:de:59:32:72:
2f:f6:61:4d:fd:00:51:03:3c:1c:7a:75:16:c3:d6:
1d:af:22:37:b9:f3:25:84:5f:6d:e0:9c:25:f1:cc:
e4:a5:6d:d7:f3:3e:9a:8c:48:92:d5:fd:f8:46:55:
83:9f:60:7d:b6:07:c2:26:3d:17:27:0c:81:2a:50:
a7:a1:91:dc:1c:e0:97:04:37:b5:64:b1:35:75:57:
0a:08:08:6b:5f:c5:6b:0b:73:a5:7c:97:df:6d:74:
d6:ed:c9:c0:71:01:0d:ea:bc:6f:ff:71:f8:4f:96:
ee:d7:43:ac:b7:22:d5:d4:84:0f:fb:16:b4:38:15:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D4:48:58:BE:15:76:B7:7B:53:2E:7D:83:12:0D:A7:53:86:79:79
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2d:93:66:ae:f9:85:c1:dc:b7:4f:10:c4:b7:66:3f:7d:0a:
c7:fa:89:71:c9:a0:ba:cd:1e:9c:76:df:74:14:26:20:d3:08:
18:ef:86:8a:22:7d:43:78:92:4f:64:1e:75:be:c5:b4:e0:2e:
d9:6a:89:f3:29:a9:54:33:96:83:cc:9d:ec:26:af:39:0d:55:
1c:e3:ca:e1:48:b5:02:6f:46:f3:1b:f7:f9:86:67:03:dd:da:
fa:73:30:bb:53:dc:b4:89:1c:32:3d:3e:a6:62:38:ef:c4:55:
1d:8f:f3:aa:61:8a:ad:34:bf:af:a4:a7:d5:0e:a1:b8:20:80:
be:71:da:cd:fb:b4:89:a7:c8:00:d7:70:de:da:11:d7:0f:01:
be:60:74:81:1b:0a:74:86:2d:c7:7f:3c:92:1e:14:70:67:e9:
41:6b:79:bb:91:e2:43:1c:0c:af:8d:17:cc:37:e9:90:75:46:
3c:42:47:87:34:d8:cc:9d:fa:f3:73:4d:19:35:73:4a:2e:dc:
b2:e9:21:ef:c8:d6:1d:c9:68:86:aa:28:7f:3f:9b:06:c8:f3:
fa:41:22:40:ef:8c:81:0c:e9:99:bd:15:03:88:40:58:5e:f7:
af:b6:bb:44:c0:2f:dc:23:39:fd:40:e0:78:47:96:10:f7:49:
f9:07:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:02:45 2026 by rpki-client