Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: V2/ocnKMbmXs/rXksYGDmDd0e/SHoB0p+bqPCm/uATE=
Subject key identifier: E2:EE:6F:82:B2:5A:43:F2:01:D0:59:B2:68:44:05:6F:85:0A:AA:A9
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 019E1EA31FDA4D1F64A177A7B60419D08EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0987
Signing time: Wed 13 May 2026 00:01:07 +0000
Manifest this update: Wed 13 May 2026 00:01:07 +0000
Manifest next update: Thu 14 May 2026 00:01:07 +0000
Files and hashes: 1: JoUKfEu67T1yJyCyuLRPbJCk_UQ.roa (hash: /JFcfYSQ61PUPBzY8BJBcJYoayzrujrEpWXJsY4TO/o=)
2: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
3: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: Uo27ehN8jR8DLA5DqfKYzLUSBUNsAt7U3enIwAGeyWc=)
4: T9bowjYXEErwoaVYRV05cPhQNYY.roa (hash: K7Owe1SM069q+ebSYvPGJjD8paXxVB14K/5eVIO60Es=)
5: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:1f:da:4d:1f:64:a1:77:a7:b6:04:19:d0:8e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: May 13 00:01:07 2026 GMT
Not After : May 14 00:01:07 2026 GMT
Subject: CN=e2ee6f82b25a43f201d059b26844056f850aaaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:00:a3:f9:b2:6c:b0:93:78:1e:b5:78:13:
e7:9d:2c:94:9f:ff:49:4a:63:53:75:ef:d8:5f:a1:
4b:3b:91:5c:8e:2b:ea:a0:1e:42:4a:65:a8:a6:6f:
98:8a:78:2d:05:a7:ce:7d:44:58:35:aa:bb:01:60:
b4:2b:46:06:ee:77:07:ca:5a:50:3b:34:7f:a9:87:
03:51:24:4f:eb:7d:28:c5:cb:76:85:74:a3:78:82:
f8:a0:23:f1:f2:c9:ee:cf:6a:3a:78:e5:b0:e7:66:
fd:a5:24:84:23:33:49:6c:ee:79:14:3e:6d:15:51:
8c:85:3e:db:62:bb:c8:32:f1:f9:04:95:e1:bb:cb:
e4:5c:f8:e7:56:55:85:42:87:8a:fa:e4:75:63:8e:
e6:30:4d:22:b7:43:cd:49:f3:69:76:b1:53:7a:5f:
bf:71:eb:cb:b7:1b:51:3a:25:3c:8b:79:16:8c:af:
e8:c7:e8:54:57:f4:5e:6a:b6:7a:41:6c:ac:28:d1:
2d:3f:82:01:de:92:d3:fe:d0:fb:32:93:3b:28:0d:
c5:ed:e3:34:e6:00:ed:80:da:3c:21:7b:cd:be:24:
e7:b9:c7:e3:cb:6b:72:29:cf:c7:06:a2:50:6b:81:
a5:83:e8:4e:aa:c9:d3:17:28:e7:f1:d6:1e:2f:9d:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EE:6F:82:B2:5A:43:F2:01:D0:59:B2:68:44:05:6F:85:0A:AA:A9
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a7:23:72:3a:d9:a6:37:34:01:72:bf:ca:32:b5:5a:ec:50:
51:17:51:f5:29:f1:b4:72:de:53:bd:92:19:50:54:74:70:3e:
65:f7:d6:55:b7:de:10:4d:b9:8e:cd:a1:b2:6a:cb:f2:ae:44:
e6:90:4f:2f:58:bf:3e:b3:98:d0:ec:21:83:37:a9:8a:cc:f4:
52:d4:1a:a7:e6:e1:b6:e2:9a:9c:27:6b:28:ce:36:8c:46:09:
e2:4b:f7:3c:53:7b:48:d6:93:a1:cb:f9:90:3f:64:76:a8:6e:
b5:86:88:a0:dc:07:6a:75:b3:99:c7:21:63:89:2c:98:47:ea:
1f:bc:e3:4b:a8:e4:30:46:df:cd:53:ef:a0:fc:f4:38:b8:5a:
72:d2:b5:6c:35:60:b6:95:95:b7:60:82:44:8d:38:af:7d:f1:
08:d1:d6:b4:40:49:56:37:a2:e2:ab:3d:db:3f:c5:ef:a5:01:
bd:79:b1:a6:c0:57:6d:18:eb:63:00:b8:47:d0:38:ff:71:03:
55:7c:2a:8f:36:f7:22:be:a3:be:a5:61:68:4f:f2:ac:66:38:
ed:da:0f:5b:72:5f:ba:56:17:0c:e2:99:4a:26:11:7e:78:8e:
46:a6:08:77:d1:9d:cd:f4:96:2c:6d:e0:23:57:c4:7f:b2:d7:
bc:49:3e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:23 2026 by rpki-client