Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: NxaPMnPqmcU1K9xc2/mP9oyWufRHlV4homoR73o3jXs=
Subject key identifier: 66:FD:12:EF:91:FE:C7:5F:4D:5E:E4:99:FB:15:ED:AF:C6:72:2B:8B
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 01A0D2A5C43FB1C050D43C504835C45EE54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 125C
Signing time: Thu 24 Sep 2026 09:01:13 +0000
Manifest this update: Thu 24 Sep 2026 09:01:13 +0000
Manifest next update: Fri 25 Sep 2026 09:01:13 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: GPUSxlqLe5VBqLvXq091fmKRovGEQEf0dHl/JsWjwfU=)
2: lN4-DHRIzePvaAlUx-G8m9WU1Yc.roa (hash: 0H44nitsqtD09E43wUKTwpu5uxvURYIo4SfJ0gjjYAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:c4:3f:b1:c0:50:d4:3c:50:48:35:c4:5e:e5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Sep 24 09:01:13 2026 GMT
Not After : Sep 25 09:01:13 2026 GMT
Subject: CN=66fd12ef91fec75f4d5ee499fb15edafc6722b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c6:23:0d:54:2e:dd:45:45:ee:07:5d:49:d4:
06:e7:1d:4c:0f:66:17:fd:58:13:2f:e1:69:1f:f8:
ad:c1:cf:97:64:88:82:9b:5b:78:6a:34:ce:67:39:
52:5b:6e:c5:2c:99:81:fc:2f:e1:ce:99:f2:09:43:
6f:25:df:28:4b:86:81:aa:af:e0:ca:44:6e:3d:a6:
09:79:49:d2:2a:9a:55:42:8c:aa:82:a5:f6:1d:15:
2e:86:6f:06:c5:a3:ee:c7:07:aa:9e:84:e9:66:f1:
09:77:a2:7e:c2:7e:79:cc:a2:68:a7:d3:60:64:86:
aa:6f:ed:98:80:9a:ee:f3:07:72:6c:60:fe:e6:82:
b2:13:0d:d6:6c:db:61:bf:85:5c:0b:86:c1:fc:a2:
65:36:a6:75:1a:9d:43:1a:a8:5d:33:6b:68:d8:e4:
60:52:5c:a4:5b:d6:d0:24:1d:b8:0b:69:92:03:c6:
18:c4:d2:4e:9f:53:00:8e:eb:af:67:b9:1f:91:82:
cd:41:f3:db:21:7a:1e:6b:d6:81:2c:4d:43:a5:ce:
4d:0d:75:06:7d:bb:39:d7:e2:19:2d:0a:37:ea:4f:
ae:6f:c3:10:f0:81:63:d8:85:cf:27:68:0a:64:a4:
1b:7c:a4:af:d5:ea:af:ac:26:39:80:4f:a8:d0:38:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FD:12:EF:91:FE:C7:5F:4D:5E:E4:99:FB:15:ED:AF:C6:72:2B:8B
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2d:5c:14:72:e9:fc:21:84:3b:39:47:77:2c:92:90:d2:4e:
09:02:50:fc:30:5f:de:ef:c4:e9:60:24:b6:96:d4:bd:73:4d:
d3:4f:e8:cd:e6:a1:ce:54:a7:2c:26:b8:98:c8:11:ed:ca:b4:
6a:75:18:70:da:29:08:3c:55:0e:f4:69:b2:f3:87:8d:98:33:
5b:3d:21:92:c8:72:ab:9f:3e:a2:c9:bd:6d:a5:3d:c8:cd:43:
50:d8:3a:b9:58:37:af:2e:7b:1a:8e:93:7b:37:a1:61:45:99:
ea:67:f9:71:9a:f6:b4:e9:46:4b:e9:f2:aa:07:61:4c:5a:46:
e7:9d:67:b7:d1:cb:2e:3c:f2:52:41:93:3e:e3:c7:70:c9:5e:
b5:9f:cf:62:e9:d2:43:c5:d8:fd:72:b5:4d:c3:51:89:51:c8:
dd:75:4d:15:0b:61:60:d4:6b:ce:ed:f8:91:2f:38:cd:c5:cf:
3c:0e:91:fd:f3:32:a9:a9:28:7d:a8:6b:94:30:ff:76:3d:03:
9d:8a:e2:fa:43:cb:28:0a:d9:7e:43:5d:6c:b4:96:c8:ae:74:
88:41:2d:60:82:cb:85:c5:8a:b2:c1:ba:0e:26:ad:53:46:c1:
ee:e6:96:c7:4f:60:0a:2f:7b:e0:1e:18:b0:c4:a3:8d:58:05:
19:f3:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:09:33 2026 by rpki-client