Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: qF42AjYweUAXQzCl3IO/608r0yOoDjfii3VHMRThUng=
Subject key identifier: 91:34:DB:2B:93:92:B7:A1:BC:9D:60:B5:AC:5C:22:55:D2:B8:17:0F
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 019E1CEB896DE035729AC4FED76110B43BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 0776
Signing time: Tue 12 May 2026 16:00:58 +0000
Manifest this update: Tue 12 May 2026 16:00:58 +0000
Manifest next update: Wed 13 May 2026 16:00:58 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: TFIC+xQXlbzNPjM76MTGZy02hon/U0vEDUJmQRMqId8=)
2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:89:6d:e0:35:72:9a:c4:fe:d7:61:10:b4:3b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: May 12 16:00:58 2026 GMT
Not After : May 13 16:00:58 2026 GMT
Subject: CN=9134db2b9392b7a1bc9d60b5ac5c2255d2b8170f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:97:a0:79:9c:3c:09:4f:43:98:c2:61:1b:
8f:e3:4d:96:7b:c7:a8:53:d7:6b:67:b1:ba:01:00:
6b:37:ec:84:79:e7:5c:ea:7c:68:c0:86:50:9d:05:
20:c7:c5:51:59:c7:39:8b:61:a8:33:cc:a6:e0:ad:
5e:76:cd:2d:5c:0d:66:6d:f6:0f:dc:62:f2:49:3d:
a6:24:6b:ba:cc:b3:ed:49:4b:8c:fd:1c:86:e4:7b:
52:2d:76:7c:70:05:a9:60:70:a9:bb:9e:3f:e6:37:
50:50:da:bf:d8:8e:72:cd:e1:25:4b:20:6f:7b:f4:
99:35:3f:dd:9c:a4:a0:b5:74:a0:ab:30:36:4c:2f:
0a:73:74:ae:ae:a4:9f:d1:3b:5b:88:10:22:4b:fc:
50:33:8b:86:61:23:28:0b:1f:11:c4:08:fb:b4:38:
56:0b:ae:6d:32:0d:5b:9a:a1:b8:dd:9d:50:4a:7b:
a8:da:eb:48:32:47:82:15:61:92:05:5c:ae:91:90:
da:cc:02:23:01:c1:7f:51:99:4c:fc:41:e4:bb:07:
dc:da:9f:12:67:50:d9:2c:b3:1c:17:e1:8f:c7:d0:
31:d2:89:c2:e5:4f:3c:25:f1:a8:7a:d3:bb:94:9b:
1f:33:38:eb:b7:77:46:a9:72:71:4d:ad:d6:7e:eb:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:DB:2B:93:92:B7:A1:BC:9D:60:B5:AC:5C:22:55:D2:B8:17:0F
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c2:1c:3a:b7:c6:e5:29:37:aa:df:41:47:8d:59:e3:69:47:
86:f6:05:75:ef:bd:44:77:c7:37:c8:18:30:93:dc:e9:38:ec:
47:b9:b9:ce:44:46:f2:1d:84:b6:1f:63:7f:1f:01:f6:af:95:
d9:e5:3d:b4:a0:9f:11:47:10:81:80:18:e7:43:c2:aa:a2:d8:
5f:c9:3c:48:d6:bb:d4:55:00:0b:a1:6f:70:2c:ca:2d:fe:7c:
66:ed:27:90:97:b5:19:b5:0b:89:19:21:56:4b:a9:ba:4a:65:
97:29:33:11:d4:c4:5b:ff:47:a3:75:6c:76:cc:f3:49:21:ee:
ac:14:9b:10:b1:0a:a4:8d:95:86:5c:3d:b6:29:6c:d2:f5:cf:
08:49:9c:e1:14:60:ad:0f:4c:10:24:f7:e1:15:25:46:13:87:
14:6d:f6:c8:71:5e:ba:8f:cd:a4:dc:b5:88:c5:8f:cc:f7:a7:
38:3a:f6:d2:bb:f0:31:a7:74:d4:dc:9a:6e:3d:ad:36:59:47:
6c:9b:34:48:b5:f9:99:fc:16:6f:d9:43:90:65:0f:0e:12:74:
47:f8:72:9b:c7:62:ea:08:2d:95:a8:f9:c6:00:b0:94:b4:8a:
d7:0f:1a:7a:69:e7:03:56:b5:b7:78:b4:75:74:57:41:41:b2:
38:d8:c3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:24:01 2026 by rpki-client