Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: PEOzPMjyH4JzC6q761C2UmudIfo5KiQiK6Cn8cUqHmw=
Subject key identifier: FE:3D:3D:54:3D:48:E2:7E:70:8B:9B:3F:97:58:A1:84:5B:B8:B9:5E
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 01A1DB3881C9D19771D06B5D797A8662F7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 12E5
Signing time: Sat 14 Nov 2026 18:01:15 +0000
Manifest this update: Sat 14 Nov 2026 18:01:15 +0000
Manifest next update: Sun 15 Nov 2026 18:01:15 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: 6nkKaDYV/+2NNEgxTHY4k8Iox22dKNWujSYcSov/jEI=)
2: lN4-DHRIzePvaAlUx-G8m9WU1Yc.roa (hash: 0H44nitsqtD09E43wUKTwpu5uxvURYIo4SfJ0gjjYAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:81:c9:d1:97:71:d0:6b:5d:79:7a:86:62:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Nov 14 18:01:15 2026 GMT
Not After : Nov 15 18:01:15 2026 GMT
Subject: CN=fe3d3d543d48e27e708b9b3f9758a1845bb8b95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:4a:75:91:15:c1:3f:95:13:cd:95:f8:5d:
69:35:68:9a:06:25:37:d9:83:28:2b:d0:e9:d4:7f:
b8:2c:55:fc:67:ce:af:0a:cc:e9:63:6e:92:36:e8:
a3:c8:ea:17:ff:c3:12:d7:f9:ef:43:9e:f8:b2:1f:
43:fc:06:f9:b6:2c:b0:e9:12:ff:65:43:bc:f6:de:
d4:7a:af:3c:b5:7b:ea:bd:de:09:e6:55:5a:2d:1e:
fa:be:35:90:27:25:cf:cd:1c:d4:c7:c3:47:57:9b:
4f:ac:76:a2:7d:54:63:4b:96:80:f9:4a:de:8b:05:
2e:7c:45:d4:d4:80:bf:0a:fe:a4:63:20:ca:c6:80:
49:9f:b6:04:e9:aa:82:13:a9:12:01:d9:63:34:83:
d2:50:6d:6a:8c:27:fc:3b:34:5e:6f:27:8a:c3:74:
e8:da:22:39:10:29:01:45:9d:8c:7f:ce:79:2c:e5:
89:92:bd:87:ab:fb:df:50:1b:16:c0:ba:f9:55:06:
e4:eb:81:86:6c:a8:fa:04:c7:17:4a:ed:65:37:f3:
b7:2c:8b:55:20:1e:b6:a8:b6:d1:14:f8:4a:a2:20:
e3:97:1b:81:ea:6a:e5:a7:67:98:4a:51:01:47:35:
fa:b8:16:bd:e6:5c:65:15:57:1f:8c:1f:ab:91:19:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:3D:54:3D:48:E2:7E:70:8B:9B:3F:97:58:A1:84:5B:B8:B9:5E
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:13:bb:fd:3b:1e:ca:75:81:5a:ac:7c:a6:69:b2:de:51:28:
da:8a:24:0c:b9:9f:f1:50:8a:a1:b3:19:bd:c4:65:15:57:9f:
b6:96:88:45:23:67:e5:a6:df:d9:dd:61:cb:d5:97:ad:70:4a:
ac:6d:e9:99:58:b7:7b:6e:ce:f8:19:da:96:9d:61:1e:00:b9:
35:ed:42:0e:b3:0a:24:13:8d:bd:ef:65:83:1c:9e:49:92:9b:
c4:73:b8:3b:4d:d9:e0:25:c7:41:f8:6d:8f:cf:e9:0e:88:c1:
f4:46:6c:cb:5d:cb:33:97:eb:59:6f:2d:ce:00:d8:2f:a8:f2:
9d:9d:82:37:18:ee:92:ce:e2:b2:0b:e5:b3:af:87:38:25:c1:
09:c6:08:17:a9:0e:b3:2f:23:69:72:84:66:f1:32:a4:2d:c9:
09:a0:92:1c:26:32:0c:c8:ac:e5:2d:b5:93:97:72:bd:01:12:
81:a2:1f:76:fb:a4:98:a8:33:f8:2c:35:ab:c2:29:71:91:3e:
bf:58:42:c4:80:0a:71:a0:b2:cf:d7:c3:a5:96:e7:9e:01:15:
4f:fd:18:86:95:ba:a1:ef:90:bb:a8:8c:c3:71:d1:ca:7a:c3:
ad:26:fc:74:ae:41:29:5f:34:34:f2:a5:30:0f:b2:48:9a:54:
8c:c3:65:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:23 2026 by rpki-client