Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: bli+JeOCahCc7umgyecpwHeey4Thu5xjprkw1RklTuA=
Subject key identifier: B7:12:83:1F:78:D5:0B:EA:CD:BE:FA:7C:9B:09:D8:74:CD:BC:5E:8E
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 01A0D94D7DBE028D2FBBE6BAAF1D89FD12BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0E7C
Signing time: Fri 25 Sep 2026 16:02:09 +0000
Manifest this update: Fri 25 Sep 2026 16:02:09 +0000
Manifest next update: Sat 26 Sep 2026 16:02:09 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: 7U/IGrfCAskllaIgBLaK7juH8C6MNDGJ5pjCSKalZ4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:7d:be:02:8d:2f:bb:e6:ba:af:1d:89:fd:12:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Sep 25 16:02:09 2026 GMT
Not After : Sep 26 16:02:09 2026 GMT
Subject: CN=b712831f78d50beacdbefa7c9b09d874cdbc5e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:a3:16:b0:36:17:da:0e:9f:34:ec:a3:00:
9f:d4:de:33:bf:6d:e1:3a:85:05:b1:56:5c:1d:3c:
ae:43:49:09:f2:01:02:a3:31:60:09:e2:e5:fd:80:
0b:8a:be:a7:73:fe:b6:39:82:da:d2:0f:ff:ab:fe:
d6:a5:75:e9:2b:6c:ab:1d:bf:4e:65:13:40:2d:db:
fb:fd:2c:95:e7:b3:b0:3c:93:bd:3f:59:89:33:7c:
d7:51:96:ab:66:d5:6d:41:e1:94:5b:9e:fc:7d:b9:
f3:98:e0:14:98:62:5d:89:57:26:9c:73:8a:df:78:
c0:72:d7:e3:e8:31:5c:b4:fb:fe:72:1b:a9:89:6a:
f3:49:7c:f7:4c:41:af:c5:9f:c3:58:22:2d:ea:a6:
02:f8:d8:ee:4b:19:29:54:ea:16:70:8a:2e:ae:b9:
fa:39:bf:77:e9:9d:f2:0d:66:4a:13:81:fd:48:7b:
8e:99:eb:d5:93:5b:ca:19:88:2b:32:c7:5d:6f:22:
79:9d:9a:59:4f:39:87:4f:f9:b4:d9:84:af:12:81:
47:fe:c8:2e:40:cb:86:93:a3:50:e4:79:d4:10:29:
66:65:7f:d0:ef:9b:1b:92:7a:aa:ff:03:fb:81:78:
80:8a:41:1c:4c:b0:d5:72:4e:31:a7:af:89:62:4e:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:12:83:1F:78:D5:0B:EA:CD:BE:FA:7C:9B:09:D8:74:CD:BC:5E:8E
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8b:d5:26:ee:a7:99:0f:df:fa:ea:11:ec:ad:b7:da:9c:f6:
01:66:69:c9:25:ee:22:a6:aa:a6:6c:3e:2d:b2:76:fc:fd:2a:
47:e8:dc:c0:2f:6a:7a:4f:92:b5:ed:3d:f5:a8:95:30:2f:b8:
e0:9d:e9:06:01:dd:75:01:49:ef:21:98:81:63:d9:4a:0c:e2:
95:8b:69:b1:b8:66:ef:2f:06:33:9c:84:dc:c8:0f:3a:35:35:
5e:3d:82:7a:11:73:51:99:b9:19:28:58:63:72:a3:b7:aa:7f:
ab:df:38:e5:77:9a:f9:19:21:59:e9:fd:4f:17:4b:2f:76:10:
2e:7e:a8:9d:46:ac:71:f4:be:18:0c:55:74:17:18:6e:3d:f5:
17:c0:97:d0:66:85:31:85:43:1b:16:5b:2c:86:fb:37:2b:fe:
5f:5c:f1:83:0a:8b:32:4e:3d:d4:d1:36:3f:2f:90:f1:92:b2:
bb:59:5f:b7:67:ee:d6:26:1d:f3:57:c6:12:d5:c2:b7:c6:0c:
dd:25:0e:c3:e8:4f:43:d4:df:e2:f8:50:69:19:3f:e2:5f:cd:
20:e3:39:54:0b:3b:d0:d3:6d:84:42:ae:da:bb:45:55:bb:46:
f9:1d:8a:70:49:43:3f:55:9c:ae:64:56:53:22:57:32:78:80:
c7:2c:d3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTX2+Ao0vu+a6rx2J/RK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODk3YjMzNTM4MmY4MjI0ZjVkODkwZTMxYjM4NjMyMWM2
YmIzZWQwHhcNMjYwOTI1MTYwMjA5WhcNMjYwOTI2MTYwMjA5WjAzMTEwLwYDVQQD
EyhiNzEyODMxZjc4ZDUwYmVhY2RiZWZhN2M5YjA5ZDg3NGNkYmM1ZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPKjFrA2F9oOnzTsowCf1N4zv23h
OoUFsVZcHTyuQ0kJ8gECozFgCeLl/YALir6nc/62OYLa0g//q/7WpXXpK2yrHb9O
ZRNALdv7/SyV57OwPJO9P1mJM3zXUZarZtVtQeGUW578fbnzmOAUmGJdiVcmnHOK
33jActfj6DFctPv+chupiWrzSXz3TEGvxZ/DWCIt6qYC+NjuSxkpVOoWcIourrn6
Ob936Z3yDWZKE4H9SHuOmevVk1vKGYgrMsddbyJ5nZpZTzmHT/m02YSvEoFH/sgu
QMuGk6NQ5HnUEClmZX/Q75sbknqq/wP7gXiAikEcTLDVck4xp6+JYk6qKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcSgx941Qvqzb76fJsJ2HTNvF6OMB8GA1UdIwQY
MBaAFNKJezNTgvgiT12JDjGzhjIca7PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80ZGU4MDUtZDVkYy00NmY3LWIzOTct
NWI1MzMyYWYxODUxLzEvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80ZGU4MDUtZDVkYy00NmY3LWIzOTctNWI1MzMyYWYxODUx
LzEvMG9sN00xT0MtQ0pQWFlrT01iT0dNaHhycy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApovVJu6n
mQ/f+uoR7K232pz2AWZpySXuIqaqpmw+LbJ2/P0qR+jcwC9qek+Ste099aiVMC+4
4J3pBgHddQFJ7yGYgWPZSgzilYtpsbhm7y8GM5yE3MgPOjU1Xj2CehFzUZm5GShY
Y3Kjt6p/q9845Xea+RkhWen9TxdLL3YQLn6onUascfS+GAxVdBcYbj31F8CX0GaF
MYVDGxZbLIb7Nyv+X1zxgwqLMk491NE2Py+Q8ZKyu1lft2fu1iYd81fGEtXCt8YM
3SUOw+hPQ9Tf4vhQaRk/4l/NIOM5VAs70NNthEKu2rtFVbtG+R2KcElDP1WcrmRW
UyJXMniAxyzTCQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:00:55 2026 by rpki-client