Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: Qo8vHOH5hqqoN1xUf6Z9GwtBMjbpAmv9F9Ec9ueA78U=
Subject key identifier: 3A:CC:C5:6E:86:C8:41:DA:BB:C4:78:D2:83:B3:38:1A:BA:CB:AA:1B
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 019E1E6C8AE02D6EED82F44ABBC42989D902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 1445
Signing time: Tue 12 May 2026 23:01:30 +0000
Manifest this update: Tue 12 May 2026 23:01:30 +0000
Manifest next update: Wed 13 May 2026 23:01:30 +0000
Files and hashes: 1: 6tZKYli0xFjSrMTaPxgthKbfu_g.roa (hash: lqL9qb+FKGUxGrpBLb7Tf9OnZbQiDT4OvdfFGjgah0c=)
2: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: 1tUyHWpwD2y9PeL7q9oEGIJkT5c8vBFSD3RRhPLxsLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:8a:e0:2d:6e:ed:82:f4:4a:bb:c4:29:89:d9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: May 12 23:01:30 2026 GMT
Not After : May 13 23:01:30 2026 GMT
Subject: CN=3accc56e86c841dabbc478d283b3381abacbaa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:e1:26:82:6e:51:d6:ec:bc:d2:3c:68:7d:
d3:d5:0e:a2:fa:ea:2c:42:ec:36:c0:73:20:40:db:
cf:92:a5:6b:f9:8f:24:7e:87:af:ee:f3:48:a7:92:
43:d2:4b:8a:45:1b:6e:62:99:4f:00:bb:c4:a9:73:
3a:56:10:71:c7:ce:64:34:a3:c3:0f:c6:33:e2:1d:
c7:0a:bc:60:6b:6a:e5:06:2f:8d:01:a6:d4:28:66:
3c:20:99:a9:96:a1:29:9a:fc:37:c3:6d:55:fb:ca:
08:16:de:db:7f:a5:ee:fb:f1:e5:bf:2d:61:b8:1c:
83:47:e0:c5:1f:73:d3:8b:bf:21:c5:87:33:d4:5d:
e1:30:3a:e1:94:a9:49:49:6c:0a:98:e7:ae:8b:95:
15:63:74:30:52:cc:2c:10:d6:5d:19:4e:a1:68:ac:
61:c9:1a:bd:a7:0e:22:84:9d:a7:ef:61:98:77:51:
0f:22:62:41:ad:d6:e2:1b:9f:ca:51:4f:a0:2d:03:
6b:9a:72:16:79:72:cf:93:3d:a4:32:1d:4e:d3:c1:
47:85:01:16:92:a6:cb:1d:46:3a:c2:6a:1b:72:00:
31:fc:55:5e:e9:72:98:7d:cd:f0:6c:ee:bb:7c:ae:
c2:1b:78:81:ff:4f:31:63:44:1b:f3:82:7b:11:c9:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CC:C5:6E:86:C8:41:DA:BB:C4:78:D2:83:B3:38:1A:BA:CB:AA:1B
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:db:bb:e5:d7:36:1d:9f:1e:c9:0b:6b:94:f5:d0:f3:03:5f:
f2:c5:07:ac:a5:50:2c:1d:82:98:a9:23:0d:c8:8b:a4:13:27:
e4:90:69:af:09:57:ac:6c:1e:ff:1a:d8:6d:79:94:a2:1e:76:
c8:9b:34:94:59:e9:c8:2b:dd:90:4a:d7:11:bc:67:ed:15:1f:
6c:28:97:02:66:5f:be:26:59:81:0a:1a:02:3f:d7:c1:a1:07:
f7:05:7f:6b:d8:71:68:2d:4c:fe:38:1d:84:96:15:6a:e6:bc:
3c:ca:54:aa:11:70:05:fb:25:93:cd:58:2d:82:c9:55:cc:bb:
a7:cf:1d:1b:7a:1c:98:b9:7f:a9:67:b7:9e:31:a5:5f:3a:b9:
de:2d:bb:f4:86:5f:8c:d3:a2:6b:30:ea:ac:35:97:ff:3b:4c:
6a:15:89:51:14:e6:8f:53:41:13:4f:87:44:6b:74:ee:2d:ff:
ec:ed:20:a3:17:3d:24:db:2b:1a:30:53:f8:46:bf:fd:c8:c5:
0a:5d:62:9f:f6:3f:e0:3d:d8:f0:6d:7b:df:41:51:26:05:6c:
9b:d7:7c:b9:03:ba:ce:6a:bf:22:16:84:d1:84:11:31:89:ca:
0e:15:58:55:e0:77:bf:8d:9d:f3:93:28:57:33:85:48:dd:bd:
7c:8b:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:45 2026 by rpki-client