Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
File: OLB6ACu3vw06zI3UqV8jesYf1ng.mft (raw, json)
Hash identifier: CLiioSIyTHY9gFRCZCFadGGyKDRTzh7zLykjy3HOPvk=
Subject key identifier: 5E:59:2B:E4:51:8F:18:16:3E:3F:16:01:6B:BC:C9:C0:40:CD:3B:5F
Authority key identifier: 38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78
Certificate issuer: /CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678
Certificate serial: 019CADC80F3C45037583A603FD2E7038F417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
Manifest number: 4B
Signing time: Mon 02 Mar 2026 09:01:35 +0000
Manifest this update: Mon 02 Mar 2026 09:01:35 +0000
Manifest next update: Tue 03 Mar 2026 09:01:35 +0000
Files and hashes: 1: OLB6ACu3vw06zI3UqV8jesYf1ng.crl (hash: KN0avsBOhUhUU5akIBYrVsgFDvXLMAc2CYIUhPa89us=)
2: X9K0l2rCyvUlNf67QetfDPsKTvk.roa (hash: SYfx2ip5BHRTUDDyhzpCkqxXM0rSgBrsGDJc73Lx6mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:0f:3c:45:03:75:83:a6:03:fd:2e:70:38:f4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678
Validity
Not Before: Mar 2 09:01:35 2026 GMT
Not After : Mar 3 09:01:35 2026 GMT
Subject: CN=5e592be4518f18163e3f16016bbcc9c040cd3b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:03:61:67:ce:61:a6:df:e4:be:95:0a:70:33:
fe:11:51:9e:6d:58:46:15:ca:96:63:68:6d:9e:ba:
2b:c7:4d:a5:f7:17:9f:b8:48:3b:bf:df:db:65:72:
62:f1:b8:01:cc:03:65:d9:df:8f:8a:35:27:6f:9e:
1f:f3:49:86:19:a6:11:74:b5:52:ea:43:b3:2a:21:
ce:7a:36:0b:05:79:fd:ea:b3:49:27:23:de:09:57:
9f:e5:ec:00:0f:79:a7:39:72:c4:4e:f4:73:80:e9:
11:16:d1:4d:03:09:42:d8:29:70:03:94:4b:6e:9c:
8b:7a:6c:a4:62:64:da:16:7a:15:86:c6:57:8c:76:
c7:80:ed:43:f0:ce:89:73:85:22:af:05:62:d4:72:
6c:d8:61:a2:7a:8e:c3:ae:73:bf:48:2b:b8:ea:00:
2b:c6:7b:77:f1:af:52:31:96:08:f3:ab:28:c1:84:
50:eb:5a:b2:2f:16:46:53:c5:18:4f:66:2f:3e:74:
ac:e6:a8:c7:09:4a:55:57:3b:0b:4b:58:5f:3c:4a:
14:b7:70:bd:b8:8c:e6:71:52:b5:b1:dd:4c:75:58:
5e:cc:b2:d5:c4:1f:8c:29:cc:08:ee:ca:95:58:9b:
50:a0:f3:a8:67:38:8d:14:c1:03:a3:07:80:89:06:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:2B:E4:51:8F:18:16:3E:3F:16:01:6B:BC:C9:C0:40:CD:3B:5F
X509v3 Authority Key Identifier:
keyid:38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ba:fb:5f:1c:33:26:1b:18:3f:5c:ec:eb:51:11:3c:9e:e8:
78:0b:72:29:26:83:ef:47:ff:42:ea:13:84:e7:1a:a5:67:02:
2b:2b:3d:54:af:26:26:b3:b7:37:84:ba:c8:7f:ad:4e:f1:dd:
94:b1:38:4b:e2:0f:d8:69:08:80:3c:68:11:2a:3a:87:39:b8:
d2:37:85:5e:4a:c0:f4:86:a8:22:11:b4:dc:e2:03:1c:ac:88:
03:15:bf:fc:36:85:da:38:d4:a8:8d:02:cd:59:cd:1d:db:5b:
86:fe:81:46:4b:a9:8d:dd:68:2d:14:5d:3f:88:e8:7e:d5:44:
34:5d:81:21:30:38:f3:75:37:b8:ec:62:f2:85:37:7a:9e:36:
88:ba:ea:00:fd:51:a9:f6:02:f5:a2:5d:72:8e:06:a2:f3:ab:
3c:b2:6a:20:dd:9d:bf:98:90:86:b8:e7:27:74:4f:cf:27:9a:
e3:c6:1e:b7:ce:34:6e:21:7a:2c:d0:39:f3:27:4a:87:8e:5f:
8a:37:be:a9:e8:d3:b0:18:eb:4d:bc:67:77:d2:b9:3b:3b:ea:
b5:09:87:4a:c5:09:32:6c:07:12:20:2b:7b:0c:e3:8c:20:1e:
f7:c0:e9:37:7a:d4:86:5b:a6:9b:70:2d:86:21:3c:b5:3f:f5:
ab:62:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:34:59 2026 by rpki-client