Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: sLQqwLHK+EWdb3pUqnznx4qb2o5fY0T5td5HoRFlaVg=
Subject key identifier: AA:A5:E0:2C:34:91:56:FF:21:72:F9:C6:C5:61:FB:FF:B8:0A:BF:4F
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 019D2960C034E4BCE24885897CB90E71BE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 04D7
Signing time: Thu 26 Mar 2026 09:01:39 +0000
Manifest this update: Thu 26 Mar 2026 09:01:39 +0000
Manifest next update: Fri 27 Mar 2026 09:01:39 +0000
Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: D7+Ugb2q70y0k+viC19BCADLiQ5BrG/CKRaUYE6bKYk=)
2: QTaYixkWug0WkImFD5gnGK_ASr4.roa (hash: w7qx/N8YQKmCAl0otduhK8XuUZj0HapOBC1Dku0mdTQ=)
3: xo3gR3-KM6S_Zel79WurR5Cgqhw.roa (hash: Dhbvi9g1SOEv1jJ9w629oy4OgTHWzucQiL6zYBKcTBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c0:34:e4:bc:e2:48:85:89:7c:b9:0e:71:be:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Mar 26 09:01:39 2026 GMT
Not After : Mar 27 09:01:39 2026 GMT
Subject: CN=aaa5e02c349156ff2172f9c6c561fbffb80abf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:13:07:e9:21:8b:55:c9:6b:1e:ff:ca:28:
f8:91:10:6d:5b:2a:89:d6:24:7e:ea:1b:74:ba:2a:
2d:87:0b:6f:fb:49:77:18:27:77:57:34:f0:de:23:
d2:62:b1:b0:df:3d:77:9e:55:56:a1:22:a4:40:59:
2f:78:f9:e3:b1:f7:9b:71:67:3e:7e:b5:6d:cf:11:
d0:f8:e9:78:42:d2:c7:90:15:85:17:c5:52:04:f2:
48:06:20:80:14:5f:9d:6d:0a:06:a6:2b:7f:cf:ed:
f9:2d:19:f4:72:f8:b5:fe:99:d6:c8:fc:2f:b3:68:
14:a4:28:1b:be:5c:ae:91:ce:9a:b3:44:c7:be:84:
52:95:7a:cc:c1:3d:ae:82:02:78:a3:c3:4f:2c:b8:
93:4f:5a:7d:57:64:e0:e8:65:a3:2b:94:61:f7:4b:
27:f9:6d:c5:f0:cc:fa:0e:92:18:0f:6e:5f:79:34:
cc:f5:4f:33:b6:15:89:ad:b2:34:a3:ad:48:2c:0a:
be:12:da:aa:3a:18:22:e5:0d:25:6e:80:d5:88:49:
b1:38:97:4e:51:cf:7d:a1:32:10:69:e6:95:8a:a1:
5f:55:d8:48:df:03:17:a7:f4:f9:80:97:c5:99:d1:
31:44:30:7b:60:91:fb:d1:a0:6d:48:18:4f:44:c9:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A5:E0:2C:34:91:56:FF:21:72:F9:C6:C5:61:FB:FF:B8:0A:BF:4F
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f7:6e:e1:19:34:53:46:03:85:57:be:20:4a:0d:6f:54:e3:
eb:7f:52:77:32:a0:08:37:40:73:25:9f:37:b8:b5:12:ab:7d:
f5:66:17:cf:3f:64:97:f0:85:ee:58:db:1b:92:08:43:d8:4d:
3a:84:fc:fc:cd:61:78:3f:0e:b9:73:d1:82:68:39:18:bf:df:
35:b5:80:43:a3:08:de:03:62:b7:4d:bb:18:d7:86:5d:1b:78:
53:2f:6c:0f:04:37:93:ed:c8:27:70:68:d4:6f:38:f5:a0:79:
c5:e3:4f:d4:ba:00:f7:f5:fd:a9:85:f4:9b:4d:d5:9a:38:25:
7a:af:02:98:c3:e0:f2:bb:7f:fc:d0:d8:64:21:4d:ed:33:4d:
ba:10:ad:df:ac:82:d8:54:8c:c2:59:29:0d:bb:3f:bb:5a:45:
56:bd:5b:d9:08:48:7a:91:f0:56:b0:c3:8c:88:e4:9d:63:fb:
b4:1f:1b:3c:d9:82:ef:7d:7d:69:ab:4f:85:9d:fc:37:91:63:
92:ca:49:53:7c:ba:58:24:1a:8e:1f:96:ac:5f:2b:b7:14:74:
13:9c:1c:de:36:cd:9a:6b:03:cd:5a:e8:6a:e9:26:37:c0:95:
ba:9c:6c:80:e5:15:e7:69:77:c7:11:5e:84:37:ce:13:67:4a:
0c:7b:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:21 2026 by rpki-client