Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: URwsDRror9B8XtrxQkD86CZXHckC3MeB36UHICxT/Lo=
Subject key identifier: AD:5D:05:12:9E:E7:A4:8F:0D:D0:70:4E:4F:C1:81:94:14:4A:E5:FC
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 019F8FB55BF91EC80B885A87FB20EB0ECDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 0836
Signing time: Thu 23 Jul 2026 16:00:55 +0000
Manifest this update: Thu 23 Jul 2026 16:00:55 +0000
Manifest next update: Fri 24 Jul 2026 16:00:55 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: iHAh297KUdSUwBgSXU2pmj7+DyQguRAwkMAYrBuzz9Q=)
2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:5b:f9:1e:c8:0b:88:5a:87:fb:20:eb:0e:cd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Jul 23 16:00:55 2026 GMT
Not After : Jul 24 16:00:55 2026 GMT
Subject: CN=ad5d05129ee7a48f0dd0704e4fc18194144ae5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e9:d4:b1:bc:53:e1:4e:eb:b3:c0:fa:4b:8a:
be:10:6b:90:02:22:d0:5d:de:1b:93:3b:25:88:42:
18:c9:49:a8:46:83:cf:8d:2e:58:f1:3c:60:66:47:
6d:aa:4a:a1:2d:51:e2:51:5d:2b:c2:d9:1e:ce:8e:
a7:da:7a:b7:b0:34:69:08:76:35:e8:12:5a:7c:42:
fa:7c:b4:a9:06:f3:f5:d1:c8:77:ef:7c:18:7d:cb:
59:f2:84:e4:5c:60:23:96:24:ea:9a:da:7b:8a:64:
ed:8b:cc:8f:5b:cd:b6:6b:35:0b:2b:ea:bc:4b:ab:
f8:43:a8:90:b6:40:b4:50:a3:7f:f0:87:3f:02:70:
ba:f6:47:95:a4:ec:20:ea:b0:78:5b:1f:7c:83:99:
41:7e:5e:6f:1f:44:d4:3d:03:82:bf:fe:f9:c4:25:
32:21:18:e2:c9:2e:bf:24:00:c7:1f:aa:ee:07:a2:
8f:09:2e:a0:f8:1d:05:71:43:f2:4d:f5:4a:79:bb:
c4:e1:81:43:dd:9f:03:21:58:6d:70:81:b1:c5:f6:
3a:3e:30:e1:66:64:f9:26:9a:47:15:5c:ec:e0:d4:
1e:72:5d:47:f7:4b:05:21:a6:e2:f4:a4:23:d7:d6:
b6:c2:55:3a:6d:3b:4d:31:75:99:48:03:a3:9b:fe:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5D:05:12:9E:E7:A4:8F:0D:D0:70:4E:4F:C1:81:94:14:4A:E5:FC
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f2:73:a1:79:84:cf:f0:53:5e:5c:4c:8d:8e:59:86:f0:35:
a5:f5:54:b1:59:b5:68:cf:02:cc:40:5c:0e:04:70:e1:31:03:
eb:ce:5a:5b:1b:00:70:1f:61:e4:d9:9e:27:a8:e9:1b:73:11:
34:b9:49:7c:7a:a6:27:b4:a2:70:c5:ba:cc:31:d8:47:ca:e5:
b2:23:f1:9c:be:8c:8a:f2:00:12:fd:8b:ed:d9:99:90:5e:4f:
3d:98:24:1b:0a:2d:56:e7:1f:f1:96:80:88:bb:19:f6:1f:ed:
a9:01:68:54:23:c8:65:99:bc:42:4e:10:ce:5a:83:54:96:fb:
0f:66:25:54:4c:58:d7:e8:e8:7d:b1:62:aa:53:ef:f1:68:2c:
ed:85:67:7a:c2:1b:4f:32:b9:b3:bd:c0:61:51:2d:8a:49:f2:
62:e8:75:ea:7a:57:05:c5:a1:15:c1:48:39:1b:94:f6:53:d8:
2d:b2:e1:90:47:dc:ae:84:0b:82:85:88:9b:f9:1b:5f:bc:db:
55:29:ce:84:16:4f:7b:8a:ad:f7:05:3c:9c:48:1e:8d:75:a3:
ce:df:f6:27:d3:1f:fd:1e:f2:10:72:17:e7:7f:c2:35:91:30:
64:f3:14:31:38:b8:6d:f7:c7:e0:75:f2:73:98:7d:9e:3e:39:
10:be:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:14 2026 by rpki-client