Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: Xfc9NdJqOmsPwlujwmfUwVc10z5ZHLOEIMdhYUDVQI0=
Subject key identifier: 48:28:F5:0E:DE:52:2A:ED:2D:37:A3:D3:E1:FE:DD:81:B5:F9:B3:EC
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 019E1E355FADF05BF644383D3E767C994B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 162E
Signing time: Tue 12 May 2026 22:01:14 +0000
Manifest this update: Tue 12 May 2026 22:01:14 +0000
Manifest next update: Wed 13 May 2026 22:01:14 +0000
Files and hashes: 1: 2J3fFhmx0wri0cr3gQX2QZQE-Fo.roa (hash: +5jybQBt2/zFXmV8kpOhPIv0xIWtAN1LRB0misvjOhk=)
2: JlmLPl8yZYajDEDYFJIxQblUllA.roa (hash: OZunBJk4QSRLEbPmLCf0a9buRk1XuEa/uVL88IZWWcY=)
3: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: WdbMySsdjHOiv3NNrYUstOQz8q7oYEFKdqEpqRouShI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:5f:ad:f0:5b:f6:44:38:3d:3e:76:7c:99:4b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: May 12 22:01:14 2026 GMT
Not After : May 13 22:01:14 2026 GMT
Subject: CN=4828f50ede522aed2d37a3d3e1fedd81b5f9b3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:e9:37:89:3d:93:ef:33:88:7c:05:0c:7d:
99:4f:87:ef:33:13:d9:62:c9:1f:de:e2:a6:88:ad:
32:e5:af:46:8a:7a:ec:1b:5c:16:e6:0e:78:27:36:
d3:1a:e2:58:2a:6a:14:d7:10:0d:31:33:bd:f1:f2:
69:e3:42:32:31:3b:8c:03:cb:58:52:d4:85:89:64:
80:e8:bb:20:72:51:67:7c:03:10:c3:3c:ab:0b:a3:
fc:e6:5a:a4:90:6b:61:91:20:38:69:42:f8:84:c5:
42:e2:57:85:cd:9e:a0:62:a0:0c:05:81:8d:63:98:
a8:d2:dc:64:45:74:c1:21:fb:8a:0c:6f:e3:bb:c2:
c3:53:07:03:e5:92:ef:ad:4b:3c:31:4c:30:cc:ec:
65:82:22:5e:d9:b3:cc:41:bf:06:8a:2b:f9:0d:e6:
e5:ee:06:ad:20:86:0f:6d:65:72:0b:f0:eb:55:48:
7f:6c:e3:bd:c3:73:87:a3:2a:52:dd:cf:6c:a1:f9:
e4:37:37:9b:7e:c5:48:e5:42:94:cd:2c:c6:73:07:
fe:81:09:71:df:7e:0f:72:1f:7d:7e:99:7f:13:27:
2f:0d:02:9b:f2:ef:45:f8:f9:6d:3d:3a:39:d7:ec:
29:29:7a:3c:17:2c:c0:af:5b:8b:26:fe:0a:53:d1:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:28:F5:0E:DE:52:2A:ED:2D:37:A3:D3:E1:FE:DD:81:B5:F9:B3:EC
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0a:3b:ac:67:b3:87:6c:a2:1a:d2:5a:a5:65:c5:eb:41:39:
c1:00:b1:ea:b8:10:69:81:5b:4b:9d:9b:3e:0b:eb:09:c3:d1:
de:bd:05:59:09:40:a1:ad:1e:d9:b2:95:cd:3c:a7:5c:04:96:
d0:9d:f6:37:55:66:c3:8f:b8:f4:77:4b:cf:d5:f4:b9:91:b8:
49:3b:ea:c8:a0:e7:08:b0:d5:29:26:4a:d9:07:20:c1:e2:28:
7b:2b:81:51:c9:14:40:7d:2f:e4:68:21:d2:7b:7e:a2:95:f9:
65:75:73:4c:85:f8:6d:11:9a:e3:f1:0b:5b:7c:cf:ca:f2:5a:
8c:bc:c1:18:f0:76:ed:a3:96:60:5d:55:56:3b:dd:09:ab:56:
20:13:64:26:c5:c6:d6:f0:98:cb:50:b8:6f:6c:c1:bd:85:cf:
0c:32:0f:55:9d:84:5f:b8:85:cb:fa:cb:81:4a:e0:76:c3:56:
f8:2b:39:89:1c:a4:ee:98:82:85:1b:a9:de:a9:ef:ad:4b:b5:
e1:83:cd:06:61:a9:33:6e:bf:ff:39:48:1b:04:88:bd:0f:a6:
e3:7f:37:2d:dd:a7:d9:84:de:2d:cb:26:7a:bf:79:55:4d:4d:
bf:73:20:29:a4:c0:7d:c5:e0:e2:69:2b:4e:2b:27:e2:ca:a1:
0c:66:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:29 2026 by rpki-client