
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: 3ccuyuv7GrxkrJjKRtxefsn36w8WU+qPF+r4JsfwfTI=
Subject key identifier: 28:30:D8:2F:BC:EF:CD:A0:86:D4:3E:F7:59:FC:DF:B8:0D:47:74:14
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 019F92480AA2AF24DB8720C6EC37921826D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0A49
Signing time: Fri 24 Jul 2026 04:00:22 +0000
Manifest this update: Fri 24 Jul 2026 04:00:22 +0000
Manifest next update: Sat 25 Jul 2026 04:00:22 +0000
Files and hashes: 1: 1-OTLSt9bxerjVQrXim1tii-2o9E.roa (hash: pXJ9LGfvy4+1EbvSdA31KaVxZBu7t1Z+nzZrQNY4cjI=)
2: 3jhOZIWBBUYNhlF2h5lBua-ajBs.roa (hash: Ea8xHXLjFbr2D9v27/3IzBBK8ffF3N5VQDLBS2f2VpM=)
3: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
4: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: 2QsZeMmo5zaJNJvOdQe5Cw1mDe1JKEkiLrzbTBBg+yo=)
5: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:0a:a2:af:24:db:87:20:c6:ec:37:92:18:26:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Jul 24 04:00:22 2026 GMT
Not After : Jul 25 04:00:22 2026 GMT
Subject: CN=2830d82fbcefcda086d43ef759fcdfb80d477414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:30:b2:71:70:fd:87:e5:de:00:80:df:2f:
d4:3b:d0:1f:45:4e:14:90:6e:e3:1f:d3:d6:88:ca:
78:f2:60:0d:b4:e3:2d:51:44:f2:a8:eb:e2:64:de:
dc:f1:59:32:2f:98:f0:d9:39:55:8d:6b:52:35:3e:
cc:c4:2c:f5:9a:4d:22:d0:45:63:cc:06:8f:51:4a:
32:fb:7c:7c:b7:29:74:22:ef:5f:a6:84:fb:88:91:
d7:50:af:34:43:7f:f4:29:1a:c6:12:51:5c:bc:d7:
60:e8:fb:25:8c:ff:b8:6a:c9:95:eb:3c:fc:7b:52:
d1:b0:4a:b5:e3:d9:d3:29:52:20:b9:51:8f:ec:eb:
6e:7f:aa:6c:9b:96:e8:37:25:d6:5f:8a:2f:d0:95:
fd:40:4b:f2:81:6c:0c:43:ab:58:6d:72:ce:00:fa:
8d:96:8d:64:f0:f4:7c:e0:03:b4:fa:67:a4:6e:ef:
49:c6:af:37:4d:85:b6:5a:85:54:56:72:42:39:4f:
95:04:80:e9:08:66:a3:20:b6:1a:28:a9:52:11:4b:
2f:29:d5:f5:fd:c0:ad:86:f1:ca:2a:f9:9c:cb:ed:
95:d1:ee:4e:5e:f0:e5:74:c5:20:c7:39:9e:76:a2:
86:97:b3:bb:b2:d7:d1:57:36:83:b9:7a:26:f1:78:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:30:D8:2F:BC:EF:CD:A0:86:D4:3E:F7:59:FC:DF:B8:0D:47:74:14
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bc:2f:8f:d4:ca:cd:b8:f2:59:38:e1:af:e9:04:bf:bc:c4:
45:d4:31:4e:c0:d8:a5:58:93:5b:de:7c:85:e6:b7:ba:a3:af:
53:52:23:8c:3f:50:38:64:b1:14:d9:20:7d:47:27:2b:29:7b:
0a:b1:3e:10:dd:af:e8:44:98:0f:21:f2:43:ee:32:ca:b2:77:
4b:3c:1c:76:51:7e:fb:d7:b4:4d:8d:24:b6:38:6e:1e:c2:8c:
4b:5d:21:52:78:62:92:ea:d1:d9:51:77:37:9d:a1:6b:96:97:
30:1f:2b:a0:f8:67:d5:2c:c8:7d:8a:43:25:56:ee:1b:15:92:
63:e9:ef:d3:bb:98:a4:ca:f0:07:7a:39:61:b7:cd:c1:f0:49:
ef:bf:2e:01:9f:0f:b2:69:62:b7:39:a1:7b:f7:72:da:72:d3:
a6:5d:80:fd:61:e3:18:5d:fa:b6:6a:22:35:f2:9f:c7:28:45:
81:f5:4c:26:11:31:c2:4f:c7:33:f0:88:41:48:32:3e:98:92:
71:51:2a:12:c9:68:27:31:1e:fa:f6:90:e6:d2:6d:ff:19:f8:
1a:0f:ff:d3:23:04:83:53:00:03:08:eb:41:7e:f5:b7:51:08:
02:f0:29:28:51:0d:19:ff:10:28:06:aa:68:e4:7d:b5:6f:24:
f1:f9:b2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:19 2026 by rpki-client