Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: ARBs5gMXV/qc31skIrnaa2qEFCjnmX9wNs0rcIItJoY=
Subject key identifier: CE:CE:E3:DA:0F:98:3E:52:2F:B4:F9:7D:09:CF:CE:C2:74:D3:C3:D2
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01A0D23717A034555B1AE0DC2B9839AC3BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0AEF
Signing time: Thu 24 Sep 2026 07:00:20 +0000
Manifest this update: Thu 24 Sep 2026 07:00:20 +0000
Manifest next update: Fri 25 Sep 2026 07:00:20 +0000
Files and hashes: 1: 1-OTLSt9bxerjVQrXim1tii-2o9E.roa (hash: pXJ9LGfvy4+1EbvSdA31KaVxZBu7t1Z+nzZrQNY4cjI=)
2: 3jhOZIWBBUYNhlF2h5lBua-ajBs.roa (hash: Ea8xHXLjFbr2D9v27/3IzBBK8ffF3N5VQDLBS2f2VpM=)
3: Axb5MTof7fk-anNZXzHyNvLvYvg.roa (hash: HOYWdRZLCpSn9qcwi8QakMqzLqB9ckVUi9jVW/8+P2w=)
4: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
5: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: kAJNlpn4cwUGCbovyxwYv78x3JEq/NIdrJM9GM+q0H4=)
6: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:17:a0:34:55:5b:1a:e0:dc:2b:98:39:ac:3b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Sep 24 07:00:20 2026 GMT
Not After : Sep 25 07:00:20 2026 GMT
Subject: CN=cecee3da0f983e522fb4f97d09cfcec274d3c3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:d9:88:36:16:31:53:f6:ff:bb:95:4d:87:
4c:35:50:93:bb:ef:76:29:0b:98:33:b2:1f:1e:f0:
09:e4:62:83:60:da:fa:5b:41:c7:fc:83:91:8b:b5:
2c:64:18:94:76:e5:15:84:40:74:f2:e7:c0:90:cc:
ab:ae:5c:f6:1d:77:b7:a6:5a:07:ee:bb:33:16:cc:
8d:e3:75:b3:e6:ee:81:80:e2:03:01:c0:cf:76:ef:
57:df:f4:83:e9:75:26:0b:1b:d5:a1:53:6a:b5:71:
19:28:0b:1a:6a:7d:a4:f4:d8:43:bf:9c:70:2f:5f:
08:70:51:2f:5a:53:22:b0:f3:c2:ab:3c:7d:2b:65:
3d:b4:33:de:d7:8a:12:09:d9:8c:f5:86:e8:2e:d6:
8f:5a:ab:8b:b0:41:bf:80:f7:8e:d8:12:b8:23:ca:
2c:c0:67:b5:35:ae:a6:95:f1:ee:97:88:10:60:05:
8a:d9:c2:e2:ec:67:a9:27:5c:59:6d:36:fb:55:4e:
ce:6d:b6:07:1f:9b:19:f7:75:da:88:9f:fe:e2:ef:
47:24:b5:eb:75:46:71:16:09:78:8c:0e:b1:fd:e2:
10:be:8f:80:6b:cf:6d:63:44:e8:0e:f4:9e:34:f4:
5f:80:58:3b:3d:66:63:45:8a:9c:da:f9:d0:d1:f2:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:E3:DA:0F:98:3E:52:2F:B4:F9:7D:09:CF:CE:C2:74:D3:C3:D2
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9d:36:f3:6e:08:ae:3b:f6:da:45:c4:da:ac:a7:c9:72:4a:
fc:f6:1e:f5:e7:5e:c8:11:3d:05:60:27:7f:9e:ca:c1:00:3a:
58:b5:56:14:7b:5a:b8:dc:c6:76:0c:1e:6b:b3:71:f6:8e:2e:
59:07:26:c8:bb:40:71:59:a2:26:00:d1:fe:04:5a:a1:b1:ba:
ce:ea:f3:00:7f:cb:c3:0d:51:8d:ca:45:58:e1:74:7b:a1:7d:
c9:14:85:42:72:b0:68:b6:85:1d:6a:66:e3:f9:eb:95:3b:65:
51:66:af:dc:fb:7c:57:78:ed:ef:07:23:47:14:3d:08:a6:d7:
33:3a:5a:00:36:14:16:e6:a2:bd:f3:52:26:40:6e:53:53:8d:
b2:da:e4:53:11:90:c8:96:71:9b:7b:d5:2a:d9:d6:83:99:e6:
b9:90:64:f0:23:72:30:11:a0:00:db:71:be:43:35:c4:b2:de:
a8:d2:9d:2e:2e:fd:95:84:e6:54:8b:f2:a0:ea:e0:0c:94:ac:
54:e7:d1:0e:53:45:09:80:03:38:0e:01:7e:a6:50:c3:06:88:
36:7a:c3:e5:4e:15:a1:f4:07:1f:7b:1d:d2:55:ce:eb:ca:b1:
24:2e:c2:2e:ab:02:74:d3:9e:b0:76:88:09:fd:87:e5:bd:f3:
17:34:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:27:23 2026 by rpki-client