Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: IFMlvTkSl2f7cTz5d4hKQgZ8JUK6Dp3JMjEsr7dq3ro=
Subject key identifier: 4B:FD:48:77:01:FA:08:85:6D:58:3B:A6:07:48:32:92:F9:62:B6:23
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 01A1DE02B2DBE2226A527816DAF60FA792C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0F03
Signing time: Sun 15 Nov 2026 07:01:21 +0000
Manifest this update: Sun 15 Nov 2026 07:01:21 +0000
Manifest next update: Mon 16 Nov 2026 07:01:21 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: QA4/3tsX/818e0+ERfnAPPwQW0A1NHIeY2DSR6RMvKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:b2:db:e2:22:6a:52:78:16:da:f6:0f:a7:92:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Nov 15 07:01:21 2026 GMT
Not After : Nov 16 07:01:21 2026 GMT
Subject: CN=4bfd487701fa08856d583ba607483292f962b623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:8f:35:c9:2b:8a:2e:68:fc:92:b5:10:38:
53:4f:f6:4a:0e:3a:ba:33:ef:04:76:f5:10:44:07:
68:ab:22:c1:9b:1c:3d:7a:43:f3:ee:f9:b3:d6:32:
46:9e:91:9b:6b:bd:24:c9:85:b2:1d:46:cd:19:81:
15:c1:c3:18:0d:6d:10:34:9b:e6:91:5c:10:83:f9:
85:ff:24:8d:44:31:50:b6:df:20:1c:39:99:7a:f1:
00:c1:0b:23:20:ec:72:10:78:7d:8b:82:b0:46:65:
d0:cb:18:5c:e6:1f:11:a9:b0:36:51:a9:ca:30:bc:
06:11:5b:20:13:c2:75:d2:a6:4f:86:16:9a:75:91:
cc:c5:8e:fe:66:3a:ff:96:5d:c7:7c:70:ef:f0:04:
7e:15:df:d8:6c:90:ee:b9:59:17:b9:24:2e:41:e3:
e6:9b:5e:b5:7b:60:9a:1a:e3:e0:c3:d0:d1:c8:04:
64:69:98:86:16:79:63:2f:11:b5:02:3a:3e:73:3c:
ee:43:73:fa:92:79:ca:d2:ce:d7:d8:f3:fe:c7:e6:
c3:45:4d:99:67:ad:58:09:c7:8e:e9:fa:55:4c:2c:
52:aa:41:42:bb:25:1b:32:87:ea:bc:4e:2e:a4:42:
6b:25:2f:77:18:80:0a:77:3a:ae:23:e0:2a:7b:12:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:48:77:01:FA:08:85:6D:58:3B:A6:07:48:32:92:F9:62:B6:23
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:62:aa:f8:2d:98:b5:53:1b:4a:1f:99:5a:13:e2:43:77:e1:
ff:38:3e:0c:d1:4a:67:39:6e:47:53:55:5f:67:00:00:ce:88:
ed:6b:be:71:a7:76:13:d2:fd:31:7e:9b:eb:9b:15:0c:c0:32:
f2:64:09:2c:59:41:91:0d:8f:9c:d1:11:23:b9:00:f7:d3:c3:
71:d4:2d:bf:a4:5e:9a:f9:0d:32:7b:6e:e4:4b:2d:41:41:95:
e6:14:8f:d4:d5:2f:1c:f1:16:7c:4b:38:0a:5a:fd:08:83:27:
fc:d5:ef:1c:bc:c6:47:b4:8d:7b:93:c0:78:8a:e1:67:ea:53:
da:84:79:7d:a4:88:28:cf:a1:37:d1:a8:8a:de:8e:64:55:a2:
48:d2:7a:aa:51:4c:0e:13:fb:bd:08:5d:bb:50:13:f4:09:e2:
85:99:78:76:c1:1c:0c:c8:19:9d:21:08:8c:d0:e8:33:5c:6a:
08:50:33:2a:70:68:4c:f2:66:d0:cf:16:ac:ba:c8:9f:86:bd:
e5:34:75:dc:19:1d:54:b7:3a:57:90:14:6c:13:9f:b6:3b:31:
61:7d:2c:56:a9:0e:71:3c:92:4e:e2:c7:53:f1:50:d2:5f:cf:
1c:33:46:39:b8:06:45:93:91:f2:d9:bb:2e:7c:1a:53:dd:9a:
c3:48:8e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:21 2026 by rpki-client