Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: gVOK86HFnujh/JiECM8NmovjQm+5TN5NyylFb1UW9W4=
Subject key identifier: A0:2E:14:FC:67:3B:12:EA:E6:EB:C8:C3:74:AD:DE:BF:FD:8A:1C:5C
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 01A1046DBCAC579B1B3718747C5BE439C5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 06D7
Signing time: Sun 04 Oct 2026 01:01:02 +0000
Manifest this update: Sun 04 Oct 2026 01:01:02 +0000
Manifest next update: Mon 05 Oct 2026 01:01:02 +0000
Files and hashes: 1: A2yTP0lhhFqNva3nkV1odyS6nwE.roa (hash: hsckG++ZXCzFReA5qOo98hpc0d00fMoMGiw+xttmqVs=)
2: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: wSQ2kbtn9jo27z48B8Vr2sZz7aJ7XL9ST2F7NtE/QJs=)
3: uBcATutWZCzBK8D7bBIKL9bxPlQ.roa (hash: JIPy3fI3722I5dmkOB2XD2F/6xuJic82XKrmU7yYHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6d:bc:ac:57:9b:1b:37:18:74:7c:5b:e4:39:c5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Oct 4 01:01:02 2026 GMT
Not After : Oct 5 01:01:02 2026 GMT
Subject: CN=a02e14fc673b12eae6ebc8c374addebffd8a1c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:c9:8f:18:45:f4:a2:ef:fa:8a:36:c5:04:
d7:f4:ef:10:1f:59:a4:32:0d:4f:34:b1:ff:b8:6f:
72:98:8a:2a:bf:54:58:29:e9:ca:de:b2:22:7a:c7:
0a:cf:f2:44:10:a1:31:f6:2b:65:05:0f:00:c9:96:
49:da:70:c0:4c:51:a5:ec:a6:dc:ea:0b:21:1d:cc:
bb:29:ca:20:39:79:cd:ea:fd:6b:84:7d:50:b3:f7:
84:7a:02:62:6e:81:63:dd:b2:18:da:2e:ea:09:7b:
2f:73:8f:44:4d:fa:42:ee:4f:4b:ec:49:02:20:cc:
0d:55:f8:da:f1:2e:26:ff:0c:a3:50:9b:9b:de:b8:
6d:c9:67:be:3c:b7:6b:57:c0:36:59:aa:75:19:9d:
11:9c:f9:47:43:ab:a1:35:f8:c3:7d:e2:c3:40:ca:
2d:09:4f:cf:e5:b2:81:a4:7b:cb:1e:6e:98:12:76:
20:c9:63:b6:32:d3:71:14:72:bc:76:78:a7:75:94:
00:b8:56:d9:06:ce:80:b7:fb:97:d7:e7:f1:c9:35:
53:30:20:01:9e:b4:0b:7c:de:25:b9:d2:f2:db:42:
19:10:17:59:23:b7:6b:d2:3a:07:be:db:c0:70:e5:
05:9f:eb:05:08:e5:01:48:8e:f8:55:1d:c6:ad:f5:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:14:FC:67:3B:12:EA:E6:EB:C8:C3:74:AD:DE:BF:FD:8A:1C:5C
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:79:2a:49:cb:70:91:8c:e6:0c:b5:45:74:4b:2c:59:2b:c3:
4a:ba:97:1c:32:34:d2:06:79:43:c2:12:36:83:f6:da:9c:6d:
8d:8c:dd:fc:c5:89:fc:da:32:87:99:37:3b:fa:f3:91:94:44:
6c:fe:f5:52:4a:a0:69:60:c8:4f:53:bb:41:36:99:49:b9:43:
22:4d:e2:90:fb:73:15:3e:e8:2e:d6:ef:ea:64:be:a3:a8:28:
ae:a5:51:d6:32:91:34:a8:36:e8:6e:a2:5e:82:8c:ec:08:21:
af:0e:31:a9:f8:3f:f5:29:aa:6b:aa:8e:0a:79:c1:56:84:9c:
33:ff:47:7b:31:7c:8f:68:e2:4a:58:49:11:c7:e6:e9:7d:05:
c7:1a:39:f6:b6:d8:26:52:84:d2:24:0b:50:01:f3:77:a0:51:
01:4e:46:e1:9e:c6:b9:45:41:7b:84:30:47:dc:0f:1e:8b:55:
71:6f:c0:83:77:1d:3b:a7:05:87:ed:4e:c4:7f:43:8e:7d:1e:
0e:78:1c:e2:07:15:98:7f:30:0a:fe:39:b0:94:ae:d7:ff:7e:
ed:88:65:38:4e:00:6b:08:15:21:88:c7:89:21:18:cb:88:af:
4e:87:f9:a5:21:22:d3:b1:11:0f:90:fe:22:47:f5:ca:0d:4a:
99:5d:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:38:37 2026 by rpki-client