Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: yCq/AX68FwcdaiQUVPcGYGnYURWR3G1vGYaGXQYLv/g=
Subject key identifier: B3:06:7D:C0:37:83:B0:DA:7C:0C:16:C9:ED:C7:21:09:94:0A:EE:38
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 019E1D594F055C8FD2CF8C701A2D26681FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 10F5
Signing time: Tue 12 May 2026 18:00:52 +0000
Manifest this update: Tue 12 May 2026 18:00:52 +0000
Manifest next update: Wed 13 May 2026 18:00:52 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: GJm6k96WymPUXXLxEEmzQgzvAhkzaxPmn1JLnokkUvo=)
2: lN4-DHRIzePvaAlUx-G8m9WU1Yc.roa (hash: 0H44nitsqtD09E43wUKTwpu5uxvURYIo4SfJ0gjjYAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:4f:05:5c:8f:d2:cf:8c:70:1a:2d:26:68:1f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: May 12 18:00:52 2026 GMT
Not After : May 13 18:00:52 2026 GMT
Subject: CN=b3067dc03783b0da7c0c16c9edc72109940aee38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:7d:25:6a:cc:85:8a:ad:48:de:9b:09:2d:
a5:8a:0c:73:ee:ca:16:d9:5d:48:e8:29:62:28:f9:
ca:86:90:b0:71:1c:77:a4:57:27:a0:4c:53:32:80:
93:f7:ef:0d:48:fe:89:98:92:5f:bd:f6:1d:0c:14:
48:c2:f2:9e:ce:d9:a6:ce:d8:e7:3b:c1:43:c3:54:
bc:a2:b1:4a:40:9f:93:b1:eb:16:71:a3:f0:5b:86:
e4:e4:ee:83:0a:96:3b:77:86:d1:62:4e:c1:de:f6:
90:71:0c:1b:24:73:2c:d6:dd:a0:91:aa:7d:a0:65:
d5:52:4d:32:89:d1:f1:ef:74:39:d6:94:61:cf:a6:
3e:fb:aa:9c:af:c6:c7:d3:0b:2b:e3:f4:bf:dd:af:
59:72:ad:a0:8d:3f:82:d5:ef:2f:41:6e:f9:35:5f:
43:20:9b:69:f9:c2:ac:f4:19:09:85:20:4f:b4:fb:
8e:ac:7d:47:f3:c6:76:1c:21:34:35:fe:79:1e:e5:
8f:d1:ef:ac:d7:63:b4:5d:28:4e:b5:55:98:0d:50:
e3:0f:5f:ec:2c:cc:2c:79:b4:b4:b8:bd:4a:0e:e6:
01:88:8e:c3:4b:8c:9c:16:75:ea:2f:61:74:cb:b3:
8d:a3:70:a1:5a:5c:86:80:9f:59:8f:85:0c:d2:f5:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:06:7D:C0:37:83:B0:DA:7C:0C:16:C9:ED:C7:21:09:94:0A:EE:38
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c7:ac:dd:94:8d:95:e5:08:ac:27:4f:75:fb:8f:27:28:b1:
19:e1:3d:f2:50:c1:9e:d5:37:46:a4:3e:8e:2b:59:bf:c0:8a:
d3:e8:5a:23:85:df:ff:a6:3b:5f:9b:b7:88:14:e5:e8:b2:01:
d0:06:84:f8:e6:89:24:b3:18:97:e9:ef:72:df:03:f0:a4:49:
11:af:72:bf:f3:bc:56:ef:b4:67:f1:0c:3a:28:82:80:c9:9e:
b6:85:03:be:7f:84:74:19:aa:ba:11:d4:f4:4c:15:78:b7:ca:
6c:48:32:f4:f8:2c:f0:11:82:51:ec:15:bf:4e:b3:e1:28:eb:
65:2b:e4:6f:2b:20:06:6d:fb:59:7d:60:43:c5:f1:20:5f:7e:
b9:e6:92:cb:dc:45:58:e1:7e:6c:8e:a8:af:fc:25:00:fb:c6:
b2:a2:ca:2b:5e:12:06:3f:b5:24:e1:a5:23:bb:ea:e2:66:23:
12:72:dd:ce:b3:2e:49:b6:17:bc:12:84:26:20:56:1b:c4:ad:
b6:1e:6f:4f:54:30:f0:4b:cf:3b:3d:3f:ac:df:9d:9d:41:52:
67:dd:40:b1:c4:88:a7:04:13:13:9e:fb:15:98:9d:e2:ae:f8:
7d:ea:a3:c8:55:70:90:f9:4e:e4:15:05:e6:3e:fe:e9:b2:71:
60:74:45:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:19 2026 by rpki-client