Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: 0qnByJetZ/LKE+0g1cgq2IBbSCoGHtuC+GmsGeGvNtA=
Subject key identifier: AC:AF:06:03:DB:B9:50:C2:C5:95:3A:2C:11:DC:FF:31:B4:CD:3E:39
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01A1DE70D67DCF8223723E44E4518398E63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 1831
Signing time: Sun 15 Nov 2026 09:01:39 +0000
Manifest this update: Sun 15 Nov 2026 09:01:39 +0000
Manifest next update: Mon 16 Nov 2026 09:01:39 +0000
Files and hashes: 1: CTTk0MJE0an_xvk9FO8LwJZsYUc.roa (hash: bFQlLHsnA4tD0Drty9z2fAjdBaovM/tdDu6dG5CtC+0=)
2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: w1NmO+aveTAYl4t1BHTpmhNe6dzwCAgbS2KbUrFkLxo=)
3: W4GS62Mu_Fm3ttwFkJp7YSUb9tg.roa (hash: wUDaqbqn0E9CXKfgHQO9vRDvinlTxO3uC4POwPywJo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:d6:7d:cf:82:23:72:3e:44:e4:51:83:98:e6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Nov 15 09:01:39 2026 GMT
Not After : Nov 16 09:01:39 2026 GMT
Subject: CN=acaf0603dbb950c2c5953a2c11dcff31b4cd3e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:59:66:f2:2b:a5:ca:c5:25:1d:c1:bc:d7:bc:
65:44:07:d4:57:a9:a4:a4:9d:e1:77:60:b4:40:0a:
c9:66:91:a2:c5:df:38:7e:79:33:43:52:37:7a:db:
54:39:1f:73:2d:cc:f8:af:65:98:58:e7:a1:45:a4:
d6:55:a4:9b:0f:9e:48:7d:7e:6f:da:5c:24:c4:68:
57:c7:4c:1c:d6:ee:a1:5e:72:43:90:a8:9f:46:b6:
cb:f1:4d:48:58:f2:17:3a:07:d6:26:c6:60:b6:26:
e4:cc:8f:a8:c9:0f:60:12:38:55:15:82:18:85:ed:
2d:41:0f:96:58:00:fe:00:0a:06:67:4e:9e:e7:01:
00:ef:23:19:f4:cc:fe:16:cf:dc:49:a3:8d:49:ac:
6d:12:1e:87:5a:40:ee:ec:b2:44:f9:a2:6d:41:ea:
51:af:91:a7:b6:ea:a2:41:40:61:21:4f:1b:ea:65:
ad:b6:19:2b:0a:ec:32:dc:fe:e7:85:a4:c4:ad:31:
36:9c:47:40:fa:47:6b:a6:1b:38:c6:27:a7:43:c8:
02:bc:f6:ff:ab:c4:cc:ae:8c:5d:64:24:fe:7a:7c:
4e:e6:c0:06:bc:29:8d:49:1e:10:09:2c:19:b6:7f:
51:0b:5b:58:6f:8c:85:e9:9e:2a:19:e7:4d:5d:15:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AF:06:03:DB:B9:50:C2:C5:95:3A:2C:11:DC:FF:31:B4:CD:3E:39
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e8:ae:7a:a4:1d:8a:57:9f:4d:8c:05:30:6c:b0:6b:b5:e3:
7f:89:e6:3d:23:f7:c2:38:3e:79:c9:c0:62:51:5d:eb:27:06:
23:a1:a6:48:94:b2:7e:10:22:df:bd:4f:db:ac:6c:af:a6:45:
57:dd:c5:19:d8:91:30:fa:38:eb:11:1b:2d:07:4d:d5:65:13:
a9:a4:40:e9:fa:5c:5e:fa:85:b5:0c:5d:85:25:70:00:d3:f5:
f9:8f:3c:9f:8d:23:c1:e3:7f:e0:24:0b:b5:c0:66:f4:2d:36:
d6:f8:80:a2:c1:b3:bf:e2:ad:bc:4c:ef:4b:21:f7:aa:2b:5d:
bb:b9:26:60:1b:c3:dd:b0:f7:11:6d:1f:dc:14:7d:46:23:e8:
22:5f:21:2c:e8:7a:c5:66:0e:95:4a:56:16:a0:fd:b1:78:2d:
8c:78:cf:59:74:27:06:14:9b:5c:18:6d:8a:02:42:d4:d2:ef:
27:e2:08:87:6e:7a:e1:98:e4:c4:3f:af:77:0a:7e:83:a3:61:
ee:40:8d:ec:ee:c8:af:d5:62:83:d3:78:8b:80:34:37:71:f0:
1f:b2:86:8c:2a:ac:25:83:8a:29:be:a0:95:9b:a7:f3:5a:fa:
c9:44:99:36:4f:c1:e6:b7:fc:36:de:fe:f7:e4:94:d5:e8:82:
44:2e:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:47 2026 by rpki-client