Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
File: OLWdrt1DzJV1rDWVPj85biG7bYA.mft (raw, json)
Hash identifier: HOoiSyPthY3oX4d7yQv/FKTK1yzjAJDWGmMO0fTA6a4=
Subject key identifier: AF:28:E0:4D:44:95:A5:E5:69:4B:C5:12:4A:E9:09:2F:51:15:00:B8
Authority key identifier: 38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
Certificate issuer: /CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Certificate serial: 019FAD1B1CFCF34136169729F69F4E2CA5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
Manifest number: 19DA
Signing time: Wed 29 Jul 2026 09:01:02 +0000
Manifest this update: Wed 29 Jul 2026 09:01:02 +0000
Manifest next update: Thu 30 Jul 2026 09:01:02 +0000
Files and hashes: 1: 0i1-OTcsLdrtIGxm6KpHsFL0gyw.roa (hash: HqlWU31euma2LZs0fBV7UGuIyQL3lMazfFxeoUWAb38=)
2: MSxVNeZIaUTnQ09QCFKlvE2JmPc.roa (hash: t0Woy4aQHLtDkNP8+0WebeAc7UeivpCxzJ9xCQ6jK80=)
3: OLWdrt1DzJV1rDWVPj85biG7bYA.crl (hash: MrRvJmGHwgBvA4f0rjcO4vmWOWFlThoBFWA8YwTn1vU=)
4: tQUf77NTQrBxw1fcSdCVANHeaJc.roa (hash: CFQEHCkhPkChPEYjQ/kOlbiTx1FtdSWfctFe9uQ1V1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:1c:fc:f3:41:36:16:97:29:f6:9f:4e:2c:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b59daedd43cc9575ac35953e3f396e21bb6d80
Validity
Not Before: Jul 29 09:01:02 2026 GMT
Not After : Jul 30 09:01:02 2026 GMT
Subject: CN=af28e04d4495a5e5694bc5124ae9092f511500b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:05:2d:0e:71:e9:53:e8:ec:3a:b2:fd:56:
e6:1e:3d:ab:73:c4:cf:10:41:e3:8d:57:e8:a0:64:
3e:26:28:85:a4:55:c9:15:cf:7d:6b:dc:74:c5:03:
b1:e9:76:88:d3:b4:3b:b2:2c:64:9e:ef:bf:6b:b4:
84:46:6b:63:dd:36:99:8e:03:02:ef:88:e7:96:ee:
39:32:a5:53:ae:a9:ae:bb:01:74:6d:b0:2b:0e:4d:
a0:b6:71:22:d7:00:d6:02:4b:84:82:df:0d:b7:6c:
6c:a7:b9:18:ab:16:f9:f8:34:ae:5f:1c:66:9d:3d:
b2:d1:90:48:64:2f:c2:73:fe:d0:bb:01:9e:cc:59:
c1:81:4a:d6:b1:63:15:53:d8:a4:c1:60:aa:59:72:
0c:d1:c6:26:29:bc:8e:b9:df:2c:27:55:39:76:02:
3f:e5:ef:10:85:b0:fe:3e:b8:56:66:97:75:f6:c1:
c7:e5:31:32:03:76:46:93:57:7b:87:1c:c2:cd:87:
65:86:71:a5:9a:bd:09:4a:9d:a7:94:0c:87:11:c6:
2d:fc:58:e8:06:14:2b:60:24:23:40:5c:49:40:8c:
87:54:16:7d:3b:a6:ea:ed:3c:fc:2b:e6:2a:76:b6:
ba:b2:a3:14:16:a7:7a:e6:39:90:7f:89:ac:68:bd:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:28:E0:4D:44:95:A5:E5:69:4B:C5:12:4A:E9:09:2F:51:15:00:B8
X509v3 Authority Key Identifier:
keyid:38:B5:9D:AE:DD:43:CC:95:75:AC:35:95:3E:3F:39:6E:21:BB:6D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLWdrt1DzJV1rDWVPj85biG7bYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/433127-e2cf-41a1-9913-7a0f72cbb2d5/1/OLWdrt1DzJV1rDWVPj85biG7bYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:11:95:48:bd:42:85:66:17:a0:91:6d:b4:43:8b:d2:7b:1a:
79:9b:25:c5:72:00:3c:94:8b:dd:3c:a2:a7:6e:1a:57:01:10:
d3:56:1c:99:04:c1:67:b3:f6:51:be:fd:3a:25:11:58:c0:25:
f4:77:d8:63:a0:fa:2b:04:eb:7c:be:de:c5:35:c8:3d:f7:e6:
bc:bb:ac:8d:3a:f4:b9:41:47:e5:bd:2c:98:d5:a3:3a:3e:43:
d7:12:33:99:d7:4f:63:70:2c:eb:51:09:fc:07:4d:e7:2c:34:
ba:34:7e:a2:a1:02:30:4f:94:d7:8b:41:09:93:c3:aa:f8:8d:
c7:e7:d0:c7:8a:4d:e5:99:8e:ae:85:b9:78:5e:63:08:b8:3c:
41:10:da:9f:31:84:82:1e:c7:d8:3d:01:a4:9c:d9:2e:04:46:
eb:c7:3c:b1:0d:7e:4e:77:2e:50:f0:f5:6f:b5:60:2a:02:13:
8c:78:4d:86:a3:6d:76:e1:cd:30:79:f3:97:14:4d:29:53:34:
d9:47:c2:d2:68:86:6a:17:b7:95:7e:88:51:10:f2:a3:1c:2e:
40:a1:de:78:83:ff:04:2a:a7:98:79:fc:97:b0:65:ac:4c:2f:
83:ba:f7:8c:03:e6:28:93:d9:8e:ec:cc:39:e9:a0:56:3c:29:
70:4f:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:43 2026 by rpki-client