Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: 9MfmRAlF1rCnn/rQLd6313ly+ai3VAaqpuqYIcmF7Io=
Subject key identifier: 05:6F:11:98:59:E2:B3:C4:DE:DE:99:20:54:19:4C:1D:1C:61:D0:C6
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01A0D682C8CECD2A6999988A112541BFA924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 17A8
Signing time: Fri 25 Sep 2026 03:01:30 +0000
Manifest this update: Fri 25 Sep 2026 03:01:30 +0000
Manifest next update: Sat 26 Sep 2026 03:01:30 +0000
Files and hashes: 1: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: SY4CRpqXvwuPMLt0DmkKBRZWpU19yVMd/6XC71OsFaI=)
2: W4GS62Mu_Fm3ttwFkJp7YSUb9tg.roa (hash: wUDaqbqn0E9CXKfgHQO9vRDvinlTxO3uC4POwPywJo8=)
3: XfzUpSsLIgSjz9aZWEspmkCgnpw.roa (hash: zb1226RCVb8WeusQc5XtD7bhS1O9w/HByQ9/hDPXvGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:c8:ce:cd:2a:69:99:98:8a:11:25:41:bf:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Sep 25 03:01:30 2026 GMT
Not After : Sep 26 03:01:30 2026 GMT
Subject: CN=056f119859e2b3c4dede992054194c1d1c61d0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:a0:91:52:be:5d:a9:65:31:c3:07:e1:0e:
36:33:33:f9:88:5f:57:88:69:70:cd:d4:4a:15:9e:
46:d8:7d:67:dd:59:9c:2f:17:71:50:cd:ff:3b:5d:
3d:36:a2:4a:00:02:1e:c7:25:4d:bd:bd:3d:63:a9:
4f:a3:61:2c:c2:b7:bf:d2:99:82:cc:4e:d8:e3:f4:
37:36:fa:f3:82:9b:bd:c2:20:23:34:b9:53:d6:d6:
3b:43:bf:29:2f:39:d8:fa:3d:f3:89:43:af:2c:07:
9f:c2:66:bb:b9:65:ff:73:ae:47:4f:ba:52:6e:2d:
08:27:12:36:a3:9b:fc:fc:e6:7b:43:89:38:4f:6e:
be:33:77:81:d0:5f:f4:3a:68:1e:07:22:6e:1c:05:
f1:0e:12:cb:f3:bc:4e:e9:5a:37:8d:0c:45:64:96:
a7:7a:3d:b8:d5:7b:24:4a:8a:3f:c7:33:c7:43:49:
2f:7b:ab:b2:f7:88:f1:34:12:0c:03:c2:5a:69:d4:
92:55:9c:82:5d:38:9b:a3:cf:7e:8c:7d:6a:37:1c:
05:70:b2:b2:48:35:97:ec:1d:86:b8:51:26:1c:a6:
dc:b3:68:2e:d8:82:c0:07:9e:09:11:90:ec:d8:a6:
26:94:74:9c:a7:1e:95:94:17:e6:d2:a1:4e:f3:5e:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:11:98:59:E2:B3:C4:DE:DE:99:20:54:19:4C:1D:1C:61:D0:C6
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:43:96:a1:75:c9:5e:d6:58:99:bd:69:4b:4b:52:0d:42:a7:
45:dc:80:84:64:74:81:35:35:da:85:c8:c9:d7:f6:40:64:93:
49:12:d2:9e:fe:88:e6:32:a2:16:9a:78:90:f9:70:7d:39:73:
17:09:81:e0:5f:37:c4:a1:b6:6f:4f:25:39:09:f3:86:7f:7c:
ce:8d:20:3b:e2:16:4e:20:45:fb:18:5b:f4:ce:f8:92:42:1b:
1e:d0:d9:d3:68:24:3d:ec:22:ce:fc:08:33:aa:66:cd:83:ad:
1a:fb:b2:d0:83:c8:24:0d:73:88:89:21:63:10:ab:fb:f2:02:
51:2a:61:74:75:a0:92:e4:2b:15:66:5c:d9:34:c4:b2:af:f7:
4b:32:4d:04:ad:49:11:4f:ba:52:58:0e:a4:4e:ae:84:8d:bf:
7e:93:de:73:a0:35:ca:96:3f:2f:43:df:6e:1c:20:9a:45:a8:
5a:db:4c:d7:15:e7:d0:ac:41:d1:c5:a0:12:14:4d:65:7c:be:
97:20:02:94:2f:43:5a:37:4a:76:40:fe:0b:29:d2:01:b6:70:
6b:4c:93:06:5b:b1:22:83:50:d1:e9:6c:78:67:b8:cc:a1:1a:
50:41:df:2c:4e:24:7a:81:1a:30:47:37:2b:0c:56:37:93:a8:
99:ac:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:54:48 2026 by rpki-client