Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: M9AX2xNfitjFvFkUJB2RwwS+/LBt4fnPwYF0vvVN8nM=
Subject key identifier: D9:EF:B2:DA:B9:61:6C:A6:2B:FF:0E:07:4F:EF:12:FF:17:A2:D6:83
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 019EC36E889065F0EEB24412B3EAC9DBF1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 1961
Signing time: Sun 14 Jun 2026 00:01:01 +0000
Manifest this update: Sun 14 Jun 2026 00:01:01 +0000
Manifest next update: Mon 15 Jun 2026 00:01:01 +0000
Files and hashes: 1: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (hash: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38=)
2: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (hash: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80=)
3: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: axmMdwUtlXNI3kz3tip5m8zdIS0vN2cy8j1d3p57S5U=)
4: tQUf77NTQrBxw1fcSdCVANHeaJc.roa (hash: CFQEHCkhPkChPEYjQ/kOlbiTx1FtdSWfctFe9uQ1V1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:88:90:65:f0:ee:b2:44:12:b3:ea:c9:db:f1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Jun 14 00:01:01 2026 GMT
Not After : Jun 15 00:01:01 2026 GMT
Subject: CN=d9efb2dab9616ca62bff0e074fef12ff17a2d683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:b0:1d:46:a0:97:0b:20:1c:e2:2e:a2:12:
11:20:94:a0:3c:73:4b:87:2b:98:c0:3a:55:0e:4c:
cf:e8:3e:3c:6d:f9:04:71:ab:06:c6:e9:51:3c:f1:
4b:7f:6e:ba:a4:e8:5a:72:7f:b7:dc:35:ab:b1:61:
d4:45:f1:ee:33:a6:76:25:97:ef:2c:85:87:c2:70:
84:ad:62:bd:a9:6d:c2:fe:fd:c7:07:aa:b8:c8:21:
95:13:27:b1:e0:d7:7e:de:bd:d2:38:a9:f3:bd:16:
25:8c:d2:b8:fe:ef:79:3a:cb:26:c9:88:fc:ac:c6:
95:6e:25:7f:44:49:fa:dd:77:6d:24:77:de:91:7c:
93:25:61:7a:cd:6f:d6:a4:cc:8e:ec:1a:4f:e8:23:
c2:93:b8:3d:f4:db:de:ac:1f:3f:e6:85:97:54:cc:
65:7d:2d:21:23:ed:2a:72:62:c5:8e:63:fd:44:44:
62:c1:41:12:80:70:1c:62:bd:da:30:0d:e5:50:b3:
e3:95:ef:ea:be:7e:48:38:55:eb:46:dd:76:1f:4a:
2e:b7:70:f2:a0:e4:e7:4c:3e:0e:27:3f:56:37:c4:
ab:16:e5:92:c4:11:62:2a:5b:18:79:84:ec:69:fd:
ea:08:3a:5c:43:e5:23:75:fd:3f:ce:25:9f:17:05:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EF:B2:DA:B9:61:6C:A6:2B:FF:0E:07:4F:EF:12:FF:17:A2:D6:83
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:df:b5:35:74:69:ca:83:58:08:ac:3e:42:64:92:c2:35:22:
28:33:70:ce:d8:16:5b:5b:78:68:7b:ae:1b:7b:e5:3a:1e:d3:
ce:5c:95:ea:ed:7f:c2:b9:bb:d6:48:5e:78:31:78:86:f9:ee:
73:9a:7f:ca:69:3d:c2:04:eb:e4:07:13:b0:33:a6:09:7d:3a:
27:eb:01:82:0e:61:7a:a1:62:da:8b:22:39:fb:e4:c2:80:c1:
fe:e3:f0:1a:93:d5:1d:42:d7:38:b6:34:b2:e7:d4:c0:1a:b6:
88:5c:de:66:bc:cc:72:d9:d5:ae:be:ab:f7:6d:bf:59:22:76:
dc:b7:0a:6c:0b:8e:55:7a:40:3e:66:54:5a:02:07:fc:eb:2f:
0f:36:46:b7:5c:a3:5f:55:65:01:37:bd:41:8b:dd:cb:35:e9:
76:c5:de:a6:2c:a9:8c:6f:9f:e4:85:6c:b0:d8:84:93:f7:c6:
d0:74:ae:12:42:08:ee:cd:3c:a0:fa:16:9c:17:66:09:23:5b:
4a:39:33:c3:d6:59:35:13:ad:ea:f8:0d:29:92:1b:30:e6:b6:
f2:e5:77:89:16:e1:a0:e3:6f:ad:61:12:68:da:bf:d6:93:82:
8f:89:b2:fa:bd:02:2e:dc:61:2a:fd:ce:c5:e6:ea:88:38:f5:
a2:2e:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:00 2026 by rpki-client