Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
File: Ol3CullC4E_di6mVFqG5Ox5PliQ.mft (raw, json)
Hash identifier: LccnlZ/W1ArZNkzgzYVfMuUiEorF7wsaxQQ/Op7NmBw=
Subject key identifier: EA:AF:44:A2:61:6F:2D:C8:40:BF:83:4B:11:6A:73:B7:2F:06:D2:C1
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 019D27044FCFAB1848553DC57078D87CAE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
Manifest number: 15AD
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: JlmLPl8yZYajDEDYFJIxQblUllA.roa (hash: OZunBJk4QSRLEbPmLCf0a9buRk1XuEa/uVL88IZWWcY=)
2: Ol3CullC4E_di6mVFqG5Ox5PliQ.crl (hash: L+UKi1qsYgAXqR7DLLeiENFdCZXbpthninKSHoLzlC0=)
3: iymLNSfrGteB5LjphJlzGYnT3TY.roa (hash: 4GFJqU/oRsMPs+tpQw0yC/lEWdSZBWtvgKAPRXVnoCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4f:cf:ab:18:48:55:3d:c5:70:78:d8:7c:ae:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=eaaf44a2616f2dc840bf834b116a73b72f06d2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:05:c8:47:d3:5e:de:8d:43:a2:02:d1:9d:
13:07:9a:22:2b:ec:83:eb:97:1f:77:b2:25:95:a9:
97:1c:87:ba:da:08:e1:e3:dc:b9:ba:75:22:39:52:
d2:71:e9:a5:d1:80:2e:98:0a:e8:cc:75:e5:65:ee:
05:72:65:19:bb:22:80:df:cb:75:2f:11:85:22:b7:
ed:46:a7:f7:ad:db:9a:dd:98:42:47:63:b9:b7:db:
d2:c7:d9:7a:97:23:1b:b4:35:7e:53:1e:a7:be:69:
e4:91:94:f8:7a:09:71:c0:dc:3a:fb:12:54:cf:49:
46:f0:a6:02:6a:85:b3:32:a7:01:fb:ac:2b:2a:ad:
40:cc:11:b5:ad:26:56:0f:e7:1b:94:b8:73:99:ec:
f7:1f:42:94:04:21:e9:f8:d1:ef:df:84:02:30:0a:
5d:0a:96:4e:9a:83:11:18:6e:6c:62:12:e3:b9:38:
2b:87:2d:b8:57:b4:46:92:0a:ea:d0:bb:fb:ae:8b:
ca:5c:93:8b:ba:dd:9b:a4:ed:bf:2e:80:e2:f6:38:
43:c3:07:57:6c:2b:2f:67:07:92:0f:9e:cb:d2:0e:
4a:e6:61:f4:41:47:cd:8f:ad:a1:c2:76:af:cf:83:
cf:87:66:ba:d5:b3:9a:78:38:f5:54:b4:86:67:8f:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AF:44:A2:61:6F:2D:C8:40:BF:83:4B:11:6A:73:B7:2F:06:D2:C1
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c1:14:87:fc:6d:f0:05:73:2e:32:5a:cc:a6:56:29:4a:2c:
56:07:e9:d2:1a:4e:45:f6:0e:cc:fc:77:9c:ca:bb:12:db:72:
60:03:97:77:5b:19:d2:75:aa:e2:ce:3d:2c:d3:c8:d4:45:d9:
07:fa:5e:f0:68:19:6e:59:b3:57:56:a8:be:dc:3d:90:a4:ac:
fb:12:95:75:0d:05:b7:d1:bb:67:fa:25:16:19:f2:b8:03:a4:
ad:78:3e:b4:a2:7e:89:ef:0b:0f:82:bc:db:35:d4:af:fc:66:
83:6d:75:3c:15:77:57:7c:88:19:a9:e0:de:c7:35:05:6c:c8:
08:48:ec:18:ce:b1:ab:8c:53:d7:b7:9f:db:87:5e:b7:8c:06:
84:27:8e:35:f8:ba:f6:8d:23:a8:51:72:e4:2e:ec:78:c0:bb:
1e:0e:14:e4:d7:be:df:21:75:c5:0b:f2:44:6d:7f:42:9c:58:
52:73:76:1e:71:b9:f1:08:c1:b3:f1:ae:ba:2a:ce:3d:d1:80:
19:37:c3:a6:a5:a4:22:c8:be:e5:f8:ef:04:62:5e:7d:f0:3c:
14:79:87:b8:42:58:0b:a7:ff:ac:d5:46:0c:f9:8b:a6:fe:57:
bd:cb:bf:78:c6:7e:4c:d0:cd:7c:db:2f:6c:5c:7b:02:71:3c:
e0:94:83:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBE/PqxhIVT3FcHjYfK6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWRjMmJhNTk0MmUwNGZkZDhiYTk5NTE2YTFiOTNiMWU0
Zjk2MjQwHhcNMjYwMzI1MjIwMTI2WhcNMjYwMzI2MjIwMTI2WjAzMTEwLwYDVQQD
EyhlYWFmNDRhMjYxNmYyZGM4NDBiZjgzNGIxMTZhNzNiNzJmMDZkMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW0FyEfTXt6NQ6IC0Z0TB5oiK+yD
65cfd7IllamXHIe62gjh49y5unUiOVLSceml0YAumArozHXlZe4FcmUZuyKA38t1
LxGFIrftRqf3rdua3ZhCR2O5t9vSx9l6lyMbtDV+Ux6nvmnkkZT4eglxwNw6+xJU
z0lG8KYCaoWzMqcB+6wrKq1AzBG1rSZWD+cblLhzmez3H0KUBCHp+NHv34QCMApd
CpZOmoMRGG5sYhLjuTgrhy24V7RGkgrq0Lv7rovKXJOLut2bpO2/LoDi9jhDwwdX
bCsvZweSD57L0g5K5mH0QUfNj62hwnavz4PPh2a61bOaeDj1VLSGZ4/9jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqvRKJhby3IQL+DSxFqc7cvBtLBMB8GA1UdIwQY
MBaAFDpdwrpZQuBP3YuplRahuTseT5YkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGIt
OWMxNWZiZDVlZTVlLzEvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83MTRmNTQtZmE3NS00MDkxLThjMGItOWMxNWZiZDVlZTVl
LzEvT2wzQ3VsbEM0RV9kaTZtVkZxRzVPeDVQbGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8EUh/xt
8AVzLjJazKZWKUosVgfp0hpORfYOzPx3nMq7EttyYAOXd1sZ0nWq4s49LNPI1EXZ
B/pe8GgZblmzV1aovtw9kKSs+xKVdQ0Ft9G7Z/olFhnyuAOkrXg+tKJ+ie8LD4K8
2zXUr/xmg211PBV3V3yIGang3sc1BWzICEjsGM6xq4xT17ef24det4wGhCeONfi6
9o0jqFFy5C7seMC7Hg4U5Ne+3yF1xQvyRG1/QpxYUnN2HnG58QjBs/GuuirOPdGA
GTfDpqWkIsi+5fjvBGJeffA8FHmHuEJYC6f/rNVGDPmLpv5Xvcu/eMZ+TNDNfNsv
bFx7AnE84JSDkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:51 2026 by rpki-client