
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
File: OLB6ACu3vw06zI3UqV8jesYf1ng.mft (raw, json)
Hash identifier: a+0CZmr6yZeae+S+uLHfPzNCm1voXaLQr7MN0vayGQo=
Subject key identifier: F0:EF:AF:44:1F:0F:C7:D2:1E:37:10:FD:EB:7A:5D:00:FA:A8:33:57
Authority key identifier: 38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78
Certificate issuer: /CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678
Certificate serial: 019DA4F8CADB425EF3AF980D8FF3E3A43266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
Manifest number: CB
Signing time: Sun 19 Apr 2026 09:01:01 +0000
Manifest this update: Sun 19 Apr 2026 09:01:01 +0000
Manifest next update: Mon 20 Apr 2026 09:01:01 +0000
Files and hashes: 1: OLB6ACu3vw06zI3UqV8jesYf1ng.crl (hash: L7COf/xzLr8IUHKEwJGpaVMFvYgW1/0C7mOmG3cUaqM=)
2: X9K0l2rCyvUlNf67QetfDPsKTvk.roa (hash: SYfx2ip5BHRTUDDyhzpCkqxXM0rSgBrsGDJc73Lx6mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:ca:db:42:5e:f3:af:98:0d:8f:f3:e3:a4:32:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678
Validity
Not Before: Apr 19 09:01:01 2026 GMT
Not After : Apr 20 09:01:01 2026 GMT
Subject: CN=f0efaf441f0fc7d21e3710fdeb7a5d00faa83357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:1d:c3:c7:26:0e:1d:fc:46:c6:0b:8b:4c:
6c:0a:7c:5e:67:ec:33:84:92:0a:ea:52:7e:6b:ec:
67:b1:bf:a0:78:3c:ff:c0:4d:4d:1f:00:b0:75:b5:
62:98:4c:ed:6d:01:71:7a:bb:5a:92:a4:0f:09:3f:
13:f8:b3:73:86:96:00:0d:f4:71:0d:e2:3e:48:0f:
2f:2b:04:44:94:9b:ea:35:c8:45:27:af:43:7a:1b:
57:f8:5c:b2:de:53:96:eb:e0:53:b7:0c:f4:bb:62:
5d:18:ed:6f:b3:fd:74:3e:16:ba:2e:3f:02:55:61:
1e:ac:0b:16:9a:98:c6:81:14:2d:dd:65:48:41:2c:
f7:0d:50:5b:5c:ce:4a:e5:83:e5:f4:fd:6b:6b:da:
00:56:fe:48:d2:ca:40:28:90:dd:7f:fa:dc:dc:88:
dd:cc:0a:60:96:8a:5f:49:50:66:ec:db:b7:29:16:
2a:bf:c9:b9:01:6f:7b:63:e9:9d:4f:6f:ba:38:13:
9c:57:02:66:75:af:6d:19:07:a9:f0:90:98:ce:c7:
e3:a2:1e:27:69:5d:3f:b0:50:d4:d8:60:e1:24:97:
c0:0b:b6:5f:c1:b4:a0:55:5d:fa:ef:96:e7:8a:87:
20:ce:70:fd:bb:85:07:b8:a6:64:71:c1:8a:31:dc:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:AF:44:1F:0F:C7:D2:1E:37:10:FD:EB:7A:5D:00:FA:A8:33:57
X509v3 Authority Key Identifier:
keyid:38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a8:af:dc:8a:16:cb:f4:09:c8:18:45:c8:3e:89:5e:60:75:
5e:00:d8:03:c1:83:8f:cc:85:64:e8:bd:da:a6:2b:c9:06:aa:
97:ac:78:ec:19:2d:0f:14:a1:38:98:1f:76:cd:58:c1:e0:44:
cf:73:e8:50:a2:c9:be:5b:92:8f:e8:50:d1:ed:ac:b0:64:54:
8e:67:b3:43:f5:e7:4e:4a:06:7c:af:97:5e:60:53:a8:b2:0d:
7a:8b:04:db:87:11:86:20:8f:78:fa:df:26:25:ef:7b:bc:b8:
e0:86:15:c7:2b:8d:a8:39:f7:1d:fb:e4:48:81:c7:2f:0c:07:
59:e9:73:20:0d:20:19:99:e3:9e:af:6f:3c:a1:f5:7f:91:f5:
eb:f5:8f:d7:5e:67:12:9f:74:bf:c9:a8:a9:c6:05:4f:13:1d:
7b:34:ad:92:c7:ce:08:c3:86:63:fd:4e:0b:2f:60:b2:54:7a:
fb:0d:da:42:64:ad:67:fc:ff:17:bc:d9:b5:9f:86:aa:3c:6f:
05:84:cf:bc:85:82:9a:cd:71:fd:7e:a0:b4:ea:9d:a5:8d:d4:
f3:ea:69:b0:25:c6:eb:81:71:53:56:32:7e:c1:c7:e7:33:ca:
9b:e3:d1:d1:1a:39:3c:5d:b9:c8:22:64:08:4a:9c:ad:de:8e:
40:18:ac:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:57:48 2026 by rpki-client