Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: 9rwuli4JsTVcXCQ0o+mabgdRfrm/pkx6wF0GmnIEHVg=
Subject key identifier: FD:D9:B1:16:74:C5:92:CC:C9:9B:E6:5B:7F:00:4C:0E:63:74:0D:4E
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 019D2A04C4DF865E1665C123EE1DFB22EE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 1077
Signing time: Thu 26 Mar 2026 12:00:48 +0000
Manifest this update: Thu 26 Mar 2026 12:00:48 +0000
Manifest next update: Fri 27 Mar 2026 12:00:48 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: cYj4W2Gt+EQr+4mzshEo1RheKGhDIq0G0NajHOPNxnw=)
2: lN4-DHRIzePvaAlUx-G8m9WU1Yc.roa (hash: 0H44nitsqtD09E43wUKTwpu5uxvURYIo4SfJ0gjjYAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c4:df:86:5e:16:65:c1:23:ee:1d:fb:22:ee:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Mar 26 12:00:48 2026 GMT
Not After : Mar 27 12:00:48 2026 GMT
Subject: CN=fdd9b11674c592ccc99be65b7f004c0e63740d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:5e:0f:dd:d8:92:c9:36:de:0e:73:ed:57:
28:a1:a1:9e:42:0d:fe:99:2d:30:ab:a0:d9:42:22:
1f:9f:87:51:32:c5:13:8f:23:c5:b8:3f:19:90:9c:
bc:79:a2:6f:73:53:f6:c8:65:e8:bb:41:a4:c1:b1:
f7:4d:30:88:7a:04:12:c8:63:d5:c3:2e:b4:77:93:
ae:7a:fb:4e:0c:16:7a:d4:41:39:e4:8f:14:ed:70:
9a:68:75:2c:b3:13:88:48:f9:b1:88:58:64:f6:23:
e4:bc:96:9c:8a:0e:09:bb:07:66:2f:1a:d6:d5:c3:
12:1e:c9:fa:e5:bc:50:27:c3:dd:3a:dc:5e:61:c1:
b6:7e:16:96:4d:c7:ab:1f:2e:b4:c2:b3:ab:57:09:
65:02:0b:6d:4a:45:45:d8:cc:ca:17:9e:5d:2f:f4:
1a:f4:09:a2:38:10:de:f9:47:14:c6:ea:45:31:da:
db:f3:b2:24:10:1b:2e:62:e3:01:ee:e7:cf:2c:39:
12:44:5d:fa:ed:e6:3f:70:d0:ea:d4:c8:fb:41:39:
82:47:0b:18:fa:eb:48:4f:94:e6:88:9e:cb:18:41:
96:e5:6b:89:7e:47:f0:7e:aa:13:a1:86:3f:7a:60:
f0:04:1f:ac:8c:01:50:3e:0e:b6:7a:e1:c4:d0:37:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D9:B1:16:74:C5:92:CC:C9:9B:E6:5B:7F:00:4C:0E:63:74:0D:4E
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:00:00:f6:2e:08:0f:ec:c0:9b:df:32:6e:9c:cb:07:30:16:
f6:9e:ad:8b:58:85:8f:00:f8:fb:0d:35:9a:26:ab:9c:b7:7d:
6c:77:87:73:b5:8d:0d:88:de:9e:07:9c:64:e2:8b:2d:c0:d6:
c0:90:7e:c4:ac:93:26:ec:da:bd:f1:a0:9f:7c:be:3d:1e:00:
a7:19:9a:6f:76:d7:0f:b7:c8:6a:04:b5:91:d7:b6:62:e7:1c:
0a:26:73:31:9c:2d:71:fe:02:f1:16:5d:aa:58:e0:e8:62:8d:
c1:7b:d8:6a:53:86:3a:ca:55:a6:bf:40:ae:35:41:09:6c:8a:
60:15:88:94:2c:be:01:c6:d1:9a:55:24:12:52:2e:b9:2d:14:
b6:27:d0:f6:f3:10:fc:12:9d:99:84:b0:ee:93:27:f2:84:03:
6f:0d:bb:35:bf:a6:99:d1:dc:b5:11:b0:ba:50:1d:96:c0:a4:
24:50:0c:bd:5e:54:36:24:25:f9:5b:20:26:f6:b3:a3:92:fe:
0c:98:05:82:29:f4:3a:5b:db:c2:3d:e6:f4:be:99:be:2d:9e:
c2:d6:a5:ec:d1:72:86:0b:59:db:e2:ed:d3:f1:fd:2a:87:cc:
76:8d:4f:84:b1:c7:d7:aa:06:d4:45:96:ea:dd:0d:c5:b1:48:
16:34:6d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:14 2026 by rpki-client