Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: kKgZ/1/iZXNRLzNB7VKEteTy7mlxdlfzdWaS6su6sRQ=
Subject key identifier: 03:36:20:89:96:8F:F0:6A:E0:E8:0F:CF:F8:69:24:0C:BD:0D:E3:71
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 019F9023135A6602BF8953D1C29815CA313A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 11B5
Signing time: Thu 23 Jul 2026 18:00:45 +0000
Manifest this update: Thu 23 Jul 2026 18:00:45 +0000
Manifest next update: Fri 24 Jul 2026 18:00:45 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: mGV3HfQjPyizlFLMz8VaHuOCBQD+4NObLuMO3IWOueA=)
2: lN4-DHRIzePvaAlUx-G8m9WU1Yc.roa (hash: 0H44nitsqtD09E43wUKTwpu5uxvURYIo4SfJ0gjjYAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:13:5a:66:02:bf:89:53:d1:c2:98:15:ca:31:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Jul 23 18:00:45 2026 GMT
Not After : Jul 24 18:00:45 2026 GMT
Subject: CN=03362089968ff06ae0e80fcff869240cbd0de371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:cc:2d:28:79:22:2f:65:99:aa:af:f1:64:
27:bf:83:aa:3d:db:e0:13:53:7a:20:be:be:ab:d2:
ff:f5:58:43:d1:ea:44:79:dd:1a:02:6a:e1:cd:0e:
ca:cf:bd:58:3b:51:f3:88:df:36:73:06:08:39:cc:
f5:bc:a7:8e:ec:91:ff:98:9e:cf:0f:93:2e:2a:23:
ca:ae:63:5d:e3:a5:e7:1e:90:7d:59:98:7e:51:a1:
21:b2:d4:29:55:27:4f:22:33:b7:58:9f:c4:29:eb:
02:5e:71:e8:7f:ac:36:10:60:b3:41:9c:76:51:00:
74:91:41:48:6b:04:dd:0c:0b:59:23:20:ff:ac:ab:
ef:4d:ab:06:07:cb:08:ad:d4:94:cb:c4:be:b3:d4:
56:83:a5:e1:1a:57:c9:48:b5:9a:09:e1:75:a3:26:
3e:e3:4e:2c:ee:b9:e7:b6:08:70:60:d1:9b:de:87:
12:6c:c9:30:e3:4e:ba:0f:f7:9b:e9:a2:4f:e9:dd:
20:f9:05:80:c9:32:6a:ed:f9:0f:97:d9:0b:ad:f6:
fc:67:18:46:47:39:73:78:e6:4c:7e:e1:1c:4c:9c:
ee:04:f7:00:4c:c6:6f:d3:35:ae:dd:14:4b:e0:7c:
3b:28:4a:93:d0:f6:1d:bb:90:3d:31:9b:41:d7:98:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:20:89:96:8F:F0:6A:E0:E8:0F:CF:F8:69:24:0C:BD:0D:E3:71
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cd:54:fd:48:f3:27:46:c7:19:9b:f0:df:5a:ad:51:9b:c2:
c7:13:6d:bc:14:bb:af:90:52:5d:38:92:33:51:78:26:9c:8c:
f7:0f:32:35:87:d0:a5:34:88:98:c6:f8:01:35:90:44:86:4d:
72:13:82:89:58:75:ee:31:ea:2d:df:1f:25:f2:73:95:d2:5a:
80:66:fd:42:cb:87:1f:43:ec:2b:d3:49:c8:af:a9:16:76:0f:
32:c8:6f:07:91:94:b6:e7:d4:01:c9:30:12:6f:a0:20:5b:1c:
a3:7c:ed:2d:36:1e:b4:54:b3:25:93:cb:64:28:10:95:c7:dd:
e3:37:5e:33:6a:f1:da:44:08:13:f6:8f:ca:f2:14:b4:91:a7:
b1:af:0c:59:8d:81:2a:48:d6:2b:b3:2f:30:0f:5e:97:ce:c8:
22:6f:d5:4d:78:81:35:e4:1d:09:a7:bd:18:a5:5e:50:13:d8:
69:6e:af:d7:7e:b9:67:6a:ff:f4:8b:02:a3:03:f7:03:1e:0d:
d7:5c:8e:61:1f:02:ba:91:e0:d1:3e:76:fe:52:23:b8:1c:91:
70:7d:b1:8a:6e:1f:a3:ba:cd:65:cb:13:f0:70:2e:13:cc:ca:
d3:27:47:e7:cd:62:70:2a:d0:44:8b:22:7d:77:dd:de:22:41:
24:02:21:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIxNaZgK/iVPRwpgVyjE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ODk3MWVhMWQyMmI1ZWNkYTFhOTc1OWYwNWMyNmM4YzU2
YTQ2OGMwHhcNMjYwNzIzMTgwMDQ1WhcNMjYwNzI0MTgwMDQ1WjAzMTEwLwYDVQQD
EygwMzM2MjA4OTk2OGZmMDZhZTBlODBmY2ZmODY5MjQwY2JkMGRlMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcbMLSh5Ii9lmaqv8WQnv4OqPdvg
E1N6IL6+q9L/9VhD0epEed0aAmrhzQ7Kz71YO1HziN82cwYIOcz1vKeO7JH/mJ7P
D5MuKiPKrmNd46XnHpB9WZh+UaEhstQpVSdPIjO3WJ/EKesCXnHof6w2EGCzQZx2
UQB0kUFIawTdDAtZIyD/rKvvTasGB8sIrdSUy8S+s9RWg6XhGlfJSLWaCeF1oyY+
404s7rnntghwYNGb3ocSbMkw4066D/eb6aJP6d0g+QWAyTJq7fkPl9kLrfb8ZxhG
RzlzeOZMfuEcTJzuBPcATMZv0zWu3RRL4Hw7KEqT0PYdu5A9MZtB15g/tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAM2IImWj/Bq4OgPz/hpJAy9DeNxMB8GA1UdIwQY
MBaAFNaJceodIrXs2hqXWfBcJsjFakaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80MmMzNTUtNTg1YS00OGJiLTllNGEt
YTQ3NTQwZmVkNGI5LzEvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My80MmMzNTUtNTg1YS00OGJiLTllNGEtYTQ3NTQwZmVkNGI5
LzEvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc1U/Ujz
J0bHGZvw31qtUZvCxxNtvBS7r5BSXTiSM1F4JpyM9w8yNYfQpTSImMb4ATWQRIZN
chOCiVh17jHqLd8fJfJzldJagGb9QsuHH0PsK9NJyK+pFnYPMshvB5GUtufUAckw
Em+gIFsco3ztLTYetFSzJZPLZCgQlcfd4zdeM2rx2kQIE/aPyvIUtJGnsa8MWY2B
KkjWK7MvMA9el87IIm/VTXiBNeQdCae9GKVeUBPYaW6v1365Z2r/9IsCowP3Ax4N
11yOYR8CupHg0T52/lIjuByRcH2xim4fo7rNZcsT8HAuE8zK0ydH581icCrQRIsi
fXfd3iJBJAIhCA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:27 2026 by rpki-client