Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: VwEfAEn0pWp4A4lOzwniS4+McO34hA4F+lewU+tgYBU=
Subject key identifier: B0:99:DD:CC:58:D4:B3:18:4C:88:52:4A:53:0E:15:78:84:84:65:02
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 01A0CEC8430FC9B8E05D70CE67F51A5239B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 15:00:25 +0000
Manifest this update: Wed 23 Sep 2026 15:00:25 +0000
Manifest next update: Thu 24 Sep 2026 15:00:25 +0000
Files and hashes: 1: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (hash: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38=)
2: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (hash: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80=)
3: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: 4g4yq9t37pqJu/GP15Y3jf+3R/gJy7jQPvES/aBiuHE=)
4: tQUf77NTQrBxw1fcSdCVANHeaJc.roa (hash: CFQEHCkhPkChPEYjQ/kOlbiTx1FtdSWfctFe9uQ1V1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:43:0f:c9:b8:e0:5d:70:ce:67:f5:1a:52:39:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Sep 23 15:00:25 2026 GMT
Not After : Sep 24 15:00:25 2026 GMT
Subject: CN=b099ddcc58d4b3184c88524a530e157884846502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:87:a3:58:4e:ba:be:02:64:8b:50:8b:ce:
e6:17:ca:20:c2:50:9a:e6:39:74:e9:6b:8a:ec:0c:
30:6b:bd:f3:60:9d:6a:48:43:85:85:fd:b1:1e:0b:
d9:ce:97:13:e6:50:2a:31:cc:f0:3c:66:c2:2d:5d:
da:46:ab:db:f1:ba:4e:70:b3:0a:58:49:1d:88:dc:
f1:bd:8f:bd:06:73:db:e6:bf:7b:f9:25:5e:71:38:
7e:fd:17:da:02:70:4d:5a:84:d6:df:96:9d:92:e0:
6d:23:f1:2b:e0:6b:05:57:80:9c:63:4f:e2:70:be:
fe:e8:59:83:b7:c7:3b:9d:2d:be:5d:fd:e5:d6:d5:
81:39:78:ab:10:61:53:3f:d5:2a:2e:38:a9:fe:3b:
03:bb:ba:76:bc:91:bc:ba:f8:2d:05:3a:ca:02:48:
48:0a:cf:de:75:7f:0b:6d:18:86:9b:9b:dd:9c:57:
e9:34:e3:51:aa:5c:41:c4:97:9d:3f:3d:ab:f4:fe:
90:12:63:9a:af:8b:ce:59:cb:88:8f:2e:be:51:3e:
f8:50:cb:a5:12:f0:85:3c:9d:6f:aa:f0:c7:9f:c7:
c3:55:8b:be:db:77:9f:34:ea:e6:a4:0a:b1:56:6f:
23:e9:63:dd:85:74:87:3a:73:8a:93:80:c5:82:37:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:99:DD:CC:58:D4:B3:18:4C:88:52:4A:53:0E:15:78:84:84:65:02
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9d:31:f0:d8:2b:f1:5c:c0:37:87:15:91:18:ad:9e:ed:e5:
1e:15:45:71:1f:8e:00:68:ee:bf:9a:fe:74:9c:45:67:55:ce:
30:14:f4:82:74:b6:a7:1d:9f:d4:09:fa:a6:28:af:2b:4d:32:
0f:d7:d3:6e:9d:5d:c3:36:f1:27:51:e9:27:fe:a1:64:5d:5d:
74:a8:f4:0f:ae:c0:2b:87:50:c2:ac:6d:0d:55:75:fa:89:ea:
07:06:08:f8:af:60:5c:78:29:03:fc:29:06:40:2f:9c:8d:78:
70:d5:93:fc:38:5e:d2:da:f6:cd:63:fb:f9:69:70:6b:31:41:
97:c2:ab:47:87:41:20:ea:1f:67:15:2e:94:f1:f2:c8:e9:8a:
7b:0c:40:ee:d4:fa:05:30:b1:8e:3a:c9:c2:f8:7e:ea:be:d6:
eb:18:fe:27:1c:37:f1:e0:64:af:4a:a9:10:a4:05:6d:39:c0:
8b:6b:16:a6:71:a1:fb:d7:6b:51:68:94:ba:69:8d:61:7e:2d:
ae:18:36:f9:8a:85:a6:1c:32:d6:94:66:8d:b5:bc:18:79:c5:
ed:4d:50:94:58:70:a1:bf:4c:f7:47:d1:60:22:d3:82:49:22:
ee:26:80:c6:cb:68:b0:08:7a:bd:12:2e:2d:21:49:09:d6:9a:
6f:92:ef:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:39:46 2026 by rpki-client