Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: GPpy1Xyx9AmPdsbHhT181SGr1TMm9g/3Fh3f1XNN0Mw=
Subject key identifier: C0:64:3D:43:47:60:EC:9B:14:77:CB:CC:5D:77:F3:35:41:E3:E5:F1
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 019F916CC744B876873880E9E8856410FB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 16FD
Signing time: Fri 24 Jul 2026 00:00:52 +0000
Manifest this update: Fri 24 Jul 2026 00:00:52 +0000
Manifest next update: Sat 25 Jul 2026 00:00:52 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: Z9sHaOE870BGdgs5WoqI1jUEPCmUeDQLoMZcy1BQVJk=)
2: UdkdeVYhwTzpcwHkoNvEUuMpazQ.roa (hash: eDyrZayqrLgVtB6FmDplU9vweUILeJT/mHR1qcLq2hM=)
3: bkKdE-ml19Mi2TTfavDD2rmqF1A.roa (hash: STEngSq5bxIYeXx8qDikLklKr6/aEKO2CosuuqQOS8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:c7:44:b8:76:87:38:80:e9:e8:85:64:10:fb:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jul 24 00:00:52 2026 GMT
Not After : Jul 25 00:00:52 2026 GMT
Subject: CN=c0643d434760ec9b1477cbcc5d77f33541e3e5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:aa:4a:f2:46:70:fd:bf:0f:79:8d:6c:97:
30:44:35:09:93:b0:74:dd:4c:a5:0c:af:b3:2a:5e:
c2:33:0e:ad:e2:92:05:bb:a9:73:ba:c0:1d:5f:6b:
e6:ee:79:fc:80:ed:2b:ac:d1:0d:4d:53:cf:e9:50:
99:24:4c:c4:3e:71:3b:2f:b1:ef:cb:45:dc:89:7a:
8a:c5:39:9a:2b:fa:26:51:ba:79:e0:84:b4:1e:59:
fb:dd:55:e8:b0:28:9b:f5:d3:50:8f:fb:db:ba:6b:
ec:00:ad:50:e1:20:a2:d0:20:58:ac:10:07:8c:9f:
03:c8:20:c6:7e:2b:ce:82:3e:d3:2d:a8:62:21:84:
39:93:76:c7:30:73:e2:df:82:9e:e1:74:e6:9e:7b:
9b:55:23:ac:9a:18:0c:e9:f5:3b:71:5e:46:00:52:
84:58:8c:4e:43:42:1f:17:fa:52:d6:30:dc:07:bf:
45:c3:00:13:9c:41:30:b6:14:74:c3:ad:bf:eb:bf:
55:a0:89:c9:55:e1:96:bc:8c:be:3a:ed:7c:57:0b:
72:a4:1a:aa:e3:c3:be:c3:35:97:75:91:ae:6d:4e:
2a:09:78:69:c6:2a:61:29:f3:cf:63:b4:67:54:0d:
b8:ec:de:d2:3c:cb:24:e4:d8:b6:ee:1b:37:49:80:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:3D:43:47:60:EC:9B:14:77:CB:CC:5D:77:F3:35:41:E3:E5:F1
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:30:b3:27:5d:5d:19:d7:7d:22:e0:62:21:0e:80:63:74:44:
9c:2a:10:7e:c9:30:41:89:34:7d:9d:e7:fe:31:0f:c1:05:17:
d6:17:e4:4d:89:2f:c0:cf:5a:9f:d0:31:89:f5:ea:36:81:c4:
c7:39:71:24:4f:9e:71:37:b2:72:79:44:62:6b:16:56:9f:ca:
48:c4:c6:03:af:e2:aa:95:b6:f6:ff:49:f9:a0:ca:d2:f9:8d:
39:58:d4:65:ac:a5:a3:e5:1a:6c:9c:5a:3e:5d:04:cd:c4:1f:
51:6a:b8:6e:b3:0c:27:f0:41:04:e7:2f:f6:28:06:0d:5f:a8:
b2:a1:3e:72:dc:72:47:c5:7b:70:bf:75:b0:57:27:ad:68:d2:
29:79:25:47:ac:87:5d:e0:8e:8e:ef:8b:f1:f3:a4:bc:d0:e1:
dc:0a:0c:8f:ea:ea:1e:df:22:87:a2:76:8e:cd:60:e4:e3:6a:
56:26:1c:ff:4f:0a:3b:b1:8a:4a:0b:89:e3:87:e5:aa:83:55:
2a:2d:98:1e:05:bb:e3:d1:ab:f6:aa:0b:42:b4:30:d7:a4:96:
e3:de:1f:cf:76:b9:64:18:f5:fd:ef:e7:58:33:38:63:bc:20:
77:54:c7:d1:f3:4c:c0:05:5d:ca:b8:78:a5:de:b8:45:99:5e:
72:94:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:32 2026 by rpki-client