Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
File: olrSzhcYk-YHpyuunQVE_AHTCao.mft (raw, json)
Hash identifier: dESo+jM3qSAMGx+IGpKYId265S47Ecfqzu6mSBu4pP8=
Subject key identifier: A6:76:96:9E:EF:AF:D4:98:B4:69:34:0F:35:40:58:0D:0D:C8:2E:F3
Authority key identifier: A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
Certificate issuer: /CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Certificate serial: 019FA9E2DE7CE5BA957226776D4464052035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
Manifest number: EE
Signing time: Tue 28 Jul 2026 18:00:45 +0000
Manifest this update: Tue 28 Jul 2026 18:00:45 +0000
Manifest next update: Wed 29 Jul 2026 18:00:45 +0000
Files and hashes: 1: hB7k-pSsmCCA65cdeBOLaQ0pu5c.roa (hash: VeZsd2ieUrYDf4TqpzlV6sh6N/ypni7g2R6QNYjKO6A=)
2: olrSzhcYk-YHpyuunQVE_AHTCao.crl (hash: TsgcTLMIKwNMSl2+TL/xGqDKkjOtd5uF0lhCV18vfH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:de:7c:e5:ba:95:72:26:77:6d:44:64:05:20:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Validity
Not Before: Jul 28 18:00:45 2026 GMT
Not After : Jul 29 18:00:45 2026 GMT
Subject: CN=a676969eefafd498b469340f3540580d0dc82ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:3c:6f:4a:0e:5e:19:bc:1a:b3:4b:cc:a7:
08:b5:d0:68:3a:fb:e9:eb:f0:76:6d:3c:59:06:54:
ad:f4:01:39:9a:c3:b5:fa:33:6f:11:ae:a7:85:4d:
76:d4:d3:f8:08:58:f8:a7:b8:23:c3:64:a7:17:46:
d2:3d:0e:e6:16:f8:86:d2:fc:32:42:eb:ee:93:7a:
03:91:bb:69:58:72:f4:9a:7d:cd:81:0e:50:54:d1:
0f:bc:35:32:23:4c:64:64:64:ed:57:b2:63:6b:87:
75:21:9f:80:cf:5c:37:8a:41:43:f9:34:d7:ff:52:
5b:44:22:51:7a:0d:67:ec:ee:12:fd:aa:e4:69:28:
88:ec:65:a4:f3:9b:b3:9e:99:64:10:9e:d4:66:7e:
00:13:ce:34:78:a5:34:4f:2a:36:69:39:b6:18:84:
98:86:53:1d:41:64:c3:7a:9d:07:0f:57:6d:4e:ec:
23:c7:7d:59:12:70:0a:bc:95:65:39:47:23:05:4e:
26:07:92:e3:5c:6f:51:03:44:4d:ff:1f:bb:c7:8d:
b9:a7:92:88:c9:55:e6:9e:cb:c0:c9:10:7b:49:e1:
8e:36:53:1f:12:20:41:10:bb:75:8f:6c:de:d5:12:
19:2a:cc:aa:94:91:14:6b:5b:a7:7d:f3:c6:9a:0d:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:76:96:9E:EF:AF:D4:98:B4:69:34:0F:35:40:58:0D:0D:C8:2E:F3
X509v3 Authority Key Identifier:
keyid:A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:28:30:00:1c:5e:42:20:13:8f:e8:89:dd:a4:57:c5:81:
a4:4b:ab:cd:b0:05:6e:ee:3e:4a:e4:f6:f2:57:83:9a:bd:b6:
58:15:e9:bb:55:99:7a:c0:59:50:14:bd:07:f0:bd:c2:63:ad:
12:c0:6d:ec:b9:57:aa:3d:9c:7d:53:06:b1:5c:31:d5:75:36:
f6:62:07:14:dc:db:27:fc:c2:83:41:56:94:04:e4:82:68:04:
08:d9:00:bb:4e:fa:f2:05:c7:8e:37:11:2b:63:85:93:c1:43:
2f:6f:01:0d:4c:4b:b3:63:23:44:67:4c:16:4e:3c:a8:d1:bc:
84:ae:e7:e9:4e:7b:78:14:cf:15:0b:09:1b:74:99:04:65:e5:
bc:d1:13:d9:6b:ea:ce:67:b9:a0:5b:1c:bf:1a:8e:43:4e:16:
ae:de:d8:3d:db:d8:8c:4a:c1:3b:a6:3d:8c:66:71:cf:85:eb:
19:4f:b2:3e:37:92:b2:5e:9a:28:97:8f:90:49:5f:60:83:da:
7d:db:83:cf:ca:12:f6:40:88:92:0b:45:52:e7:ab:0f:36:e2:
56:86:4e:ea:b1:16:c1:09:80:a0:22:4f:e2:87:9e:bb:18:47:
9d:b2:70:7a:96:c3:d7:66:9f:0c:ec:16:d3:8d:c3:c0:c0:49:
55:09:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:25:34 2026 by rpki-client