Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
File: olrSzhcYk-YHpyuunQVE_AHTCao.mft (raw, json)
Hash identifier: BH1O9SKxS1EDoM9a8IVC1xhFYY9nX5gJiKysExIk3Bo=
Subject key identifier: 32:AC:F7:4A:C2:1A:F2:01:33:D8:F0:32:E6:BC:CC:02:CD:77:CA:D1
Authority key identifier: A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
Certificate issuer: /CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Certificate serial: 019EC036495A72980C0CE114AD2DD4C9AB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
Manifest number: 75
Signing time: Sat 13 Jun 2026 09:00:43 +0000
Manifest this update: Sat 13 Jun 2026 09:00:43 +0000
Manifest next update: Sun 14 Jun 2026 09:00:43 +0000
Files and hashes: 1: hB7k-pSsmCCA65cdeBOLaQ0pu5c.roa (hash: VeZsd2ieUrYDf4TqpzlV6sh6N/ypni7g2R6QNYjKO6A=)
2: olrSzhcYk-YHpyuunQVE_AHTCao.crl (hash: NAue5BKS82vqeUnduUZrloT8yfUxCPZ2XM+hFeL+s6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:49:5a:72:98:0c:0c:e1:14:ad:2d:d4:c9:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a25ad2ce171893e607a72bae9d0544fc01d309aa
Validity
Not Before: Jun 13 09:00:43 2026 GMT
Not After : Jun 14 09:00:43 2026 GMT
Subject: CN=32acf74ac21af20133d8f032e6bccc02cd77cad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:5f:a5:4f:6e:15:43:f2:61:a8:bf:2d:5b:
ea:92:e0:64:b3:9d:09:b1:77:28:a8:36:6a:e6:38:
ad:43:0c:fa:45:67:90:50:05:56:d3:84:58:71:fe:
2f:3a:14:ec:c4:ec:5e:14:c9:97:5a:0a:29:ff:98:
6c:f3:ab:06:27:6d:81:21:4c:17:9e:c4:46:e3:9f:
61:a5:af:c9:b2:5a:58:83:46:a9:23:68:c8:64:14:
9d:b8:d6:32:32:10:5e:53:09:ca:21:c5:d8:9e:86:
bf:8e:a8:4f:a7:8b:56:b6:17:b2:75:9f:92:25:8d:
d6:3b:c7:94:33:fc:94:fe:46:4b:9c:37:9a:70:be:
04:2a:b6:f9:9f:f4:2e:fc:d2:b7:82:c2:ee:50:43:
2a:26:b1:53:72:ec:af:26:b9:66:ab:58:f8:85:a6:
a9:27:f8:e6:0c:d1:01:5e:fe:a5:6d:44:31:9e:3f:
32:8c:00:84:40:fb:62:60:8a:b7:58:5d:6b:8f:7d:
24:0a:ad:58:eb:6e:5c:cd:74:0d:96:32:7d:5f:96:
85:e4:39:0e:fd:17:86:ec:22:10:47:de:4a:0d:d5:
fc:14:a9:f5:e7:ab:ae:6c:8b:32:c9:c3:07:99:1d:
a1:8e:e4:be:9a:6a:22:61:7e:1b:08:bf:65:93:8f:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AC:F7:4A:C2:1A:F2:01:33:D8:F0:32:E6:BC:CC:02:CD:77:CA:D1
X509v3 Authority Key Identifier:
keyid:A2:5A:D2:CE:17:18:93:E6:07:A7:2B:AE:9D:05:44:FC:01:D3:09:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olrSzhcYk-YHpyuunQVE_AHTCao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/663453-cf92-4915-af26-d2f1cebb63aa/1/olrSzhcYk-YHpyuunQVE_AHTCao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0f:cc:ed:85:87:d5:0f:5f:f5:16:2d:d8:8e:41:9a:27:5d:
8a:b1:c9:f7:d8:d2:1f:81:be:d7:65:1b:57:54:73:53:d7:e8:
b3:6c:89:5a:30:90:80:08:1c:c6:b2:da:a0:b4:83:0a:1c:ff:
9f:52:2c:fa:b5:c7:f6:d5:7d:8f:a9:77:11:91:61:ff:97:2f:
28:18:5b:d6:87:ae:4e:d2:3b:ab:92:54:2d:b6:b3:e3:84:06:
96:42:f0:41:0b:ab:72:83:06:e4:d1:32:49:18:64:b6:f5:4a:
26:f6:76:7b:04:58:8e:7c:87:6d:93:fe:1b:40:ac:46:65:1f:
df:da:48:31:56:ce:53:21:b0:b6:c9:25:88:94:fa:38:a1:1f:
97:4e:0c:ed:8c:a2:06:b6:e3:9d:b3:44:91:40:13:c8:51:06:
5f:81:31:02:61:3e:ea:22:76:b3:ee:c4:94:a7:e0:61:8c:7d:
3e:b2:34:d3:b6:70:f9:4f:c9:20:1c:72:dd:de:51:73:e0:e8:
5e:15:c6:57:01:3e:57:cd:05:50:59:df:e4:32:3e:9a:07:ea:
fd:51:e2:2f:f2:f6:3b:c4:11:8a:af:d6:ca:03:77:3a:fd:6e:
47:0a:f2:38:c5:fa:9d:c8:7f:66:f0:3c:0a:65:44:f9:ed:ca:
6c:a6:97:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANklacpgMDOEUrS3UyatOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNWFkMmNlMTcxODkzZTYwN2E3MmJhZTlkMDU0NGZjMDFk
MzA5YWEwHhcNMjYwNjEzMDkwMDQzWhcNMjYwNjE0MDkwMDQzWjAzMTEwLwYDVQQD
EygzMmFjZjc0YWMyMWFmMjAxMzNkOGYwMzJlNmJjY2MwMmNkNzdjYWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOhfpU9uFUPyYai/LVvqkuBks50J
sXcoqDZq5jitQwz6RWeQUAVW04RYcf4vOhTsxOxeFMmXWgop/5hs86sGJ22BIUwX
nsRG459hpa/JslpYg0apI2jIZBSduNYyMhBeUwnKIcXYnoa/jqhPp4tWtheydZ+S
JY3WO8eUM/yU/kZLnDeacL4EKrb5n/Qu/NK3gsLuUEMqJrFTcuyvJrlmq1j4haap
J/jmDNEBXv6lbUQxnj8yjACEQPtiYIq3WF1rj30kCq1Y625czXQNljJ9X5aF5DkO
/ReG7CIQR95KDdX8FKn156uubIsyycMHmR2hjuS+mmoiYX4bCL9lk4/oQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKs90rCGvIBM9jwMua8zALNd8rRMB8GA1UdIwQY
MBaAFKJa0s4XGJPmB6crrp0FRPwB0wmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xyU3poY1lrLVlIcHl1dW5RVkVfQUhUQ2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82NjM0NTMtY2Y5Mi00OTE1LWFmMjYt
ZDJmMWNlYmI2M2FhLzEvb2xyU3poY1lrLVlIcHl1dW5RVkVfQUhUQ2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82NjM0NTMtY2Y5Mi00OTE1LWFmMjYtZDJmMWNlYmI2M2Fh
LzEvb2xyU3poY1lrLVlIcHl1dW5RVkVfQUhUQ2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgw/M7YWH
1Q9f9RYt2I5BmiddirHJ99jSH4G+12UbV1RzU9fos2yJWjCQgAgcxrLaoLSDChz/
n1Is+rXH9tV9j6l3EZFh/5cvKBhb1oeuTtI7q5JULbaz44QGlkLwQQurcoMG5NEy
SRhktvVKJvZ2ewRYjnyHbZP+G0CsRmUf39pIMVbOUyGwtskliJT6OKEfl04M7Yyi
BrbjnbNEkUATyFEGX4ExAmE+6iJ2s+7ElKfgYYx9PrI007Zw+U/JIBxy3d5Rc+Do
XhXGVwE+V80FUFnf5DI+mgfq/VHiL/L2O8QRiq/WygN3Ov1uRwryOMX6nch/ZvA8
CmVE+e3KbKaXhg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:41:31 2026 by rpki-client