Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: DtH0MmyYOMZamchpHsfPjvmeAEqAxM7CeCYAHQcTY1I=
Subject key identifier: 42:9C:8A:4A:35:4E:4B:BC:EA:EA:98:4D:69:02:F0:6D:78:B9:BC:D8
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 019E1E34F3363755435B82928BDE8ED02D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0D12
Signing time: Tue 12 May 2026 22:00:47 +0000
Manifest this update: Tue 12 May 2026 22:00:47 +0000
Manifest next update: Wed 13 May 2026 22:00:47 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: 0Vu1cwcLThNSK+ib9nLLh4EOf/OLAgc9P34RXwJXs24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:f3:36:37:55:43:5b:82:92:8b:de:8e:d0:2d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: May 12 22:00:47 2026 GMT
Not After : May 13 22:00:47 2026 GMT
Subject: CN=429c8a4a354e4bbceaea984d6902f06d78b9bcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3c:51:88:83:19:6b:9e:60:ea:1a:5f:3a:ab:
6d:5a:ba:9a:d8:c4:11:f6:37:d0:cd:9f:27:0e:9b:
64:51:a5:cd:12:71:e8:7b:c5:d2:6e:39:53:2a:57:
a0:1a:86:92:ef:96:29:3c:d8:0d:dd:77:cf:37:c1:
18:2a:a5:5f:ea:fe:d8:6e:f5:71:f1:d9:e3:98:fc:
50:02:9e:ee:a2:d1:45:29:d5:90:9e:6e:b1:29:90:
bd:7b:4a:22:10:1b:65:07:1e:df:0f:c1:0c:78:23:
bf:78:80:e2:3f:b1:e9:57:a3:19:2f:44:ec:b8:5b:
ad:e3:71:db:6f:73:ee:c3:9d:5d:2e:b5:61:eb:6a:
51:18:e5:9e:b8:c7:01:cf:55:84:a9:c4:55:95:88:
5c:56:bf:b4:0a:9c:c3:fa:a0:0d:81:02:c0:5b:a7:
f3:51:c4:bb:f3:81:41:56:05:5f:ef:f6:e4:27:ab:
b1:f5:e8:fc:14:80:8a:df:16:0e:2f:43:bb:00:02:
92:72:c7:af:1d:f5:21:8b:d3:35:6c:02:f3:af:b3:
22:18:62:bd:8e:20:49:58:ac:23:a7:d3:73:0a:6f:
87:83:de:7a:e8:04:9f:7e:27:3e:8b:fb:07:9d:4b:
50:f6:4d:9f:3e:10:13:87:7f:78:0d:18:c6:d5:30:
84:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:8A:4A:35:4E:4B:BC:EA:EA:98:4D:69:02:F0:6D:78:B9:BC:D8
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8e:9d:6a:f5:39:c5:87:ab:84:1b:01:be:f1:29:95:cf:a0:
4d:4e:83:73:99:3e:70:04:e9:b5:e6:43:a6:c4:c1:d8:3d:9a:
cf:92:28:38:c7:58:34:47:6e:1f:60:52:4c:6c:c2:d9:71:64:
02:14:56:96:d2:16:3f:ea:da:bf:91:4e:02:25:25:86:94:30:
fd:94:6b:1e:a9:f2:06:6c:38:5f:5d:2e:6a:00:37:04:ec:d5:
b9:32:57:e1:0b:50:60:86:8b:10:6c:80:6a:db:fa:7c:7d:84:
5b:4f:c1:8c:d7:2d:82:f5:77:ff:01:32:5c:b4:f1:27:7a:5b:
41:67:03:6e:2d:f6:4b:37:a0:04:c3:6e:69:90:f5:8b:6a:5b:
54:12:85:2d:21:ca:05:88:60:9a:df:86:be:2f:b6:d5:02:ae:
21:f6:33:16:a2:8e:48:a5:dc:9b:9c:eb:60:84:e9:6f:85:c6:
23:79:fb:7e:9a:84:75:44:d1:62:3f:76:f1:db:03:14:a3:f5:
f9:d1:37:b1:a7:f5:aa:52:0f:fd:86:f0:78:14:a0:01:70:e1:
e9:64:8b:11:07:5b:7c:20:8c:f1:a6:0d:8a:32:8d:d8:c0:de:
35:ad:53:69:2d:20:a4:e4:a3:92:1b:25:34:cf:cf:bc:b3:f5:
82:2f:00:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:26 2026 by rpki-client