Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
File: Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json)
Hash identifier: 70FKnWzf/BX4rnRjJ5HslVKJhr1u57bJZYost9c1yr4=
Subject key identifier: 3A:80:B9:32:FF:49:72:F7:5C:8F:41:DA:D9:52:02:76:39:A3:84:6C
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 01A0D6B94EF278FC6D168B19C6FF1FB5EDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
Manifest number: 1531
Signing time: Fri 25 Sep 2026 04:01:03 +0000
Manifest this update: Fri 25 Sep 2026 04:01:03 +0000
Manifest next update: Sat 26 Sep 2026 04:01:03 +0000
Files and hashes: 1: 45NAgDB6reu-erXNEESN-p09cvM.roa (hash: tQMQESDB/lcPTItmMJXfJlwNUfLcCJXoZ+NN7/bh2WQ=)
2: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: jeQIApdRusf+syXE85HDJzpZaJ6fdTGBaMfPsXtZnG8=)
3: ZyJM5BuiXRdQwp8CTGPeW7hXFhQ.roa (hash: sJFYdvfIFI7XLe3RcotKCLHPJQZ5SZe+aPUoxKb9ID4=)
4: lyRXIvB-zm4H5fi5XUDSXwMzWYk.roa (hash: PP50Q9MOjUz3zniPrlR3x+kz4+woEcIafSr6taXbTAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:4e:f2:78:fc:6d:16:8b:19:c6:ff:1f:b5:ed:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Sep 25 04:01:03 2026 GMT
Not After : Sep 26 04:01:03 2026 GMT
Subject: CN=3a80b932ff4972f75c8f41dad952027639a3846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:1b:03:3a:db:b2:e2:30:4f:0f:9e:62:2f:
14:0e:aa:2c:cd:b0:f3:74:e8:92:ff:1b:9d:bc:c2:
95:20:3e:c4:df:ae:0e:65:4b:5c:4f:af:7e:13:91:
7c:39:71:f5:6f:11:60:bd:60:db:f5:4b:e9:c0:46:
c9:fe:23:cf:55:0a:21:56:38:b1:7d:69:95:b2:10:
ec:0a:80:13:b9:df:d0:cb:b1:f6:ff:7d:e1:8a:cd:
56:a7:eb:32:72:6a:23:b2:b2:58:ae:4c:84:06:51:
7a:d6:2b:a8:90:3c:65:21:70:a5:8c:67:9a:91:ba:
de:d8:93:47:ee:4b:36:88:7d:87:16:84:40:6f:d6:
16:12:69:57:3d:11:a0:c6:01:83:21:89:7a:05:7a:
39:c6:18:10:96:e5:5f:28:55:6d:71:ea:b4:57:d2:
d0:39:6e:31:3c:54:ed:b5:a8:c9:f5:bd:de:f5:0d:
bb:81:9f:18:b8:80:42:f9:b9:12:d7:93:84:02:1b:
29:a9:8a:3f:0c:fd:64:3d:3d:46:5c:cd:8b:fc:6d:
4b:af:e8:f3:b3:98:56:e8:27:a7:ae:60:b5:fa:13:
a4:e4:8c:be:2a:ba:2c:f1:a3:f0:bc:e8:80:e9:99:
7e:64:d4:07:b4:fb:32:f6:89:7d:02:57:30:6b:a7:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:B9:32:FF:49:72:F7:5C:8F:41:DA:D9:52:02:76:39:A3:84:6C
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:38:12:ae:3d:6a:95:23:22:bd:a0:21:65:f3:94:32:f8:08:
f4:41:77:6f:76:24:9d:17:31:8f:ee:41:c1:88:64:c1:2f:17:
aa:ff:19:f4:7b:03:57:bb:21:32:b2:87:f6:7e:a8:d5:9c:f1:
87:8d:d5:29:e5:d2:1b:3b:56:d5:4d:79:ad:a0:3c:00:73:36:
0f:5c:75:54:88:5a:07:11:24:4c:f8:de:5e:3e:c2:ca:3d:f2:
ea:2d:f5:ad:b6:f7:60:23:91:72:83:03:76:8e:73:73:71:07:
33:17:30:e3:bd:40:b1:ff:53:67:d5:0e:cc:04:98:ef:3a:e7:
ae:32:6f:56:7e:ac:42:cf:a3:8c:cb:c4:3c:73:5b:9c:d1:0a:
fc:35:f3:fc:22:0b:7d:da:4a:15:30:75:d9:04:2f:9c:87:f3:
7d:db:ba:ed:c4:bf:e6:59:12:ea:b8:f4:0a:bc:c7:70:59:5a:
54:d3:ab:04:d5:3c:14:8e:43:28:6b:24:d1:df:b4:cf:70:6d:
32:c1:7f:eb:02:2b:c2:25:21:3d:53:1f:4b:aa:4a:13:36:ad:
3a:be:b3:71:8e:92:4f:ef:8f:ee:ec:4b:1e:d6:eb:df:fb:c4:
2e:d7:a0:28:74:82:e6:54:2f:8b:bc:ac:e7:45:c8:0a:56:fc:
45:c7:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:54:07 2026 by rpki-client