Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: HD5Ij2Ns6y9XQ6mw1sJJqQJ1Z/z0rY4Wf6BKFjeKLmw=
Subject key identifier: 02:DA:3B:BC:A9:E6:42:A0:1A:25:9D:D9:F9:6E:5E:4B:DF:00:38:C0
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 019D2772CDE2DBA5EBD6E86B431EFA71D405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0907
Signing time: Thu 26 Mar 2026 00:02:08 +0000
Manifest this update: Thu 26 Mar 2026 00:02:08 +0000
Manifest next update: Fri 27 Mar 2026 00:02:08 +0000
Files and hashes: 1: JoUKfEu67T1yJyCyuLRPbJCk_UQ.roa (hash: /JFcfYSQ61PUPBzY8BJBcJYoayzrujrEpWXJsY4TO/o=)
2: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
3: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: n/tN9DO8begpFEH35SrwihRCmJGY07Y2Ddm9lse8/YQ=)
4: T9bowjYXEErwoaVYRV05cPhQNYY.roa (hash: K7Owe1SM069q+ebSYvPGJjD8paXxVB14K/5eVIO60Es=)
5: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:cd:e2:db:a5:eb:d6:e8:6b:43:1e:fa:71:d4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Mar 26 00:02:08 2026 GMT
Not After : Mar 27 00:02:08 2026 GMT
Subject: CN=02da3bbca9e642a01a259dd9f96e5e4bdf0038c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:5a:f8:69:06:67:02:e9:e6:87:57:9a:0f:
ef:c6:97:07:c3:01:49:3d:6a:63:75:29:58:08:0c:
26:f1:a4:c0:a8:9e:26:f5:ef:8a:c1:85:ed:43:10:
e8:c8:67:b0:68:17:12:66:96:29:c9:ee:83:09:3d:
dc:e0:2e:f5:9f:d6:8d:b3:83:c9:59:37:04:7f:ef:
dc:aa:00:df:e9:8d:1d:6d:ca:0a:6a:6f:e3:23:62:
08:c9:a9:cf:9b:36:d8:9d:c9:82:88:4d:f9:46:ea:
4a:fa:4d:dd:3e:86:c0:1b:d6:6d:ad:82:b6:4f:00:
37:93:11:77:e8:aa:fb:28:1f:0d:74:24:c5:04:3f:
3e:38:17:b6:70:31:5b:3b:34:0c:e6:7d:de:ca:4a:
59:5d:9f:7c:8f:15:b6:0a:12:ae:25:9d:a6:95:f8:
9b:4e:58:3f:2d:69:67:cf:cf:22:41:2f:b5:a7:39:
00:17:a4:1d:b6:67:f8:a4:e8:89:c9:5f:d0:ab:1b:
e6:dc:ec:e7:05:e1:a9:7c:f9:7d:e4:eb:c5:7f:be:
dc:86:9c:30:ac:d5:13:60:b4:ff:ba:8d:e9:e9:bc:
4b:d8:0f:65:85:89:7c:0f:d9:5b:0e:9f:7c:00:74:
4d:3f:11:aa:cd:41:cd:20:01:87:51:bd:ca:dd:8b:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:3B:BC:A9:E6:42:A0:1A:25:9D:D9:F9:6E:5E:4B:DF:00:38:C0
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ba:60:f1:b1:d9:be:ab:a5:7e:56:ca:2b:1e:b8:2a:cc:ec:
41:23:7c:9d:0e:c3:8a:66:44:6b:7f:8a:9e:a5:96:49:29:35:
84:cb:e5:1d:b4:1b:54:53:b1:09:44:e5:82:6b:d5:43:82:e5:
28:ed:47:55:f6:ec:c6:75:2c:6d:f9:bc:2d:d8:66:10:aa:14:
c5:5c:bf:fb:0e:3b:7e:3d:e8:23:b9:a0:aa:e7:6f:eb:7e:10:
54:fc:de:1a:b6:26:b8:03:99:15:52:c1:2a:36:c2:9f:b0:e6:
c3:b4:e3:e8:11:cc:75:05:e6:11:95:66:53:9b:e2:79:e3:19:
fc:06:e5:fc:2e:42:67:09:47:0c:be:d0:fd:b5:4e:7d:84:fb:
49:5e:87:24:a2:35:4d:c2:ff:25:cf:da:84:88:85:d4:3d:06:
8f:09:a2:43:0c:99:80:1a:80:ca:5d:0e:d9:14:3d:30:47:8e:
8b:b2:af:d1:f8:5b:51:0d:37:59:06:69:f3:69:50:5b:3b:88:
af:bc:34:8c:2a:97:fb:79:f4:6d:25:8f:08:38:54:fc:4d:99:
3f:d9:0c:91:12:83:a2:16:72:91:5c:cd:16:08:31:6e:ba:6c:
e7:0c:2e:37:98:6a:23:fe:ce:b6:d8:aa:ad:71:75:01:9d:80:
89:61:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:53 2026 by rpki-client