Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: l5fm8WzSiuGkrdBpZnaMjnc//3IvsZ751Cre27IHVMk=
Subject key identifier: 99:4A:78:63:69:84:B9:CF:AA:75:E9:3B:B3:F7:41:11:C5:39:3A:5C
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 019D9B50514E6ACB2B8EA8786226457E099B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:00:25 +0000
Manifest this update: Fri 17 Apr 2026 12:00:25 +0000
Manifest next update: Sat 18 Apr 2026 12:00:25 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: 1ELE2kcVz56HmwZtqTy6aDjB4ObrY4KQHOdhUJLfH/E=)
2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:51:4e:6a:cb:2b:8e:a8:78:62:26:45:7e:09:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Apr 17 12:00:25 2026 GMT
Not After : Apr 18 12:00:25 2026 GMT
Subject: CN=994a78636984b9cfaa75e93bb3f74111c5393a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:5a:82:ba:5f:46:e1:cb:5a:57:1d:79:44:
ff:f4:43:8c:cf:32:3f:66:1a:79:a8:fd:c3:56:dd:
d0:e9:3f:71:3c:df:17:7d:27:4d:78:e8:bf:29:34:
f5:a0:1d:e0:85:b3:bd:99:c8:0b:75:f2:e2:52:cf:
34:1a:3a:ec:9f:16:24:16:62:04:f7:07:de:fa:a5:
e7:9f:7c:a4:fa:e6:87:cb:9d:61:a1:6e:ef:74:42:
1a:a4:70:88:4d:1c:35:c6:ba:ba:23:b3:82:20:b8:
c7:fc:eb:c3:25:27:a4:e8:2d:1e:1e:a6:a6:8c:3b:
8b:59:36:2c:cb:a1:7b:cc:be:9c:ed:f2:31:72:1d:
cf:9e:47:08:c0:01:33:5f:ff:e1:bc:1b:ec:8c:f7:
e2:a7:7e:ae:e5:06:ed:d0:78:6e:df:e2:bd:30:22:
e2:db:a7:dd:5e:b3:f2:df:4c:c2:f2:8e:f2:61:5f:
59:a6:c7:23:30:39:52:b4:b6:6d:ed:7c:c3:92:e0:
f2:14:40:44:f2:bd:84:26:48:b7:cc:c2:9b:84:8a:
01:76:5b:83:e6:16:6d:ae:8e:df:88:98:04:3b:36:
69:37:ad:df:6c:4f:bb:2a:2e:e6:e2:d9:2d:47:64:
8e:c7:6c:cd:5a:2a:df:2c:92:09:cf:40:27:e2:f1:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4A:78:63:69:84:B9:CF:AA:75:E9:3B:B3:F7:41:11:C5:39:3A:5C
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c7:05:f7:08:14:17:ea:07:f2:73:b6:1a:ba:09:cd:95:8c:
b2:8e:76:e8:be:e8:d5:79:24:ce:1a:d0:1f:da:2e:59:0a:7e:
c0:52:e9:b8:ad:97:70:fb:fd:1a:7d:3a:1a:05:7d:68:8a:3f:
3f:25:e7:20:0c:e2:2a:79:eb:da:58:a0:15:1e:1f:92:bf:ab:
08:97:27:08:cd:fe:78:68:4d:ed:d1:c5:6a:97:37:2e:f0:ed:
22:b5:9c:6f:bf:61:d7:a7:bb:c8:df:ed:f8:2d:11:05:3e:fa:
ca:dc:24:fb:6c:66:2c:db:2e:02:29:4d:3e:28:8f:27:32:62:
86:df:7e:28:50:b0:3e:f9:1b:f9:1a:9b:ef:7d:6c:d6:ca:f2:
65:60:01:25:7e:44:3c:7f:e4:8b:89:2c:e8:5b:f4:45:76:6e:
60:5c:18:52:f7:93:3d:9c:b0:c2:9e:00:bc:7a:da:c8:16:22:
30:c2:b1:40:52:36:16:35:7c:df:00:4d:f9:4c:66:01:63:82:
2d:1e:76:64:05:16:03:47:ae:f3:0e:3a:69:63:96:83:e2:c8:
fc:62:81:20:ad:66:dd:0a:9b:54:91:0a:5d:fb:4e:90:3a:a7:
00:b8:74:0d:e0:ea:46:83:f7:f0:56:1b:80:0e:0f:6e:94:c4:
7b:70:69:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUFFOassrjqh4YiZFfgmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy
NGIyOGQwHhcNMjYwNDE3MTIwMDI1WhcNMjYwNDE4MTIwMDI1WjAzMTEwLwYDVQQD
Eyg5OTRhNzg2MzY5ODRiOWNmYWE3NWU5M2JiM2Y3NDExMWM1MzkzYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgZagrpfRuHLWlcdeUT/9EOMzzI/
Zhp5qP3DVt3Q6T9xPN8XfSdNeOi/KTT1oB3ghbO9mcgLdfLiUs80GjrsnxYkFmIE
9wfe+qXnn3yk+uaHy51hoW7vdEIapHCITRw1xrq6I7OCILjH/OvDJSek6C0eHqam
jDuLWTYsy6F7zL6c7fIxch3PnkcIwAEzX//hvBvsjPfip36u5Qbt0Hhu3+K9MCLi
26fdXrPy30zC8o7yYV9ZpscjMDlStLZt7XzDkuDyFEBE8r2EJki3zMKbhIoBdluD
5hZtro7fiJgEOzZpN63fbE+7Ki7m4tktR2SOx2zNWirfLJIJz0An4vHhlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlKeGNphLnPqnXpO7P3QRHFOTpcMB8GA1UdIwQY
MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt
ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw
LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMcF9wgU
F+oH8nO2GroJzZWMso526L7o1XkkzhrQH9ouWQp+wFLpuK2XcPv9Gn06GgV9aIo/
PyXnIAziKnnr2ligFR4fkr+rCJcnCM3+eGhN7dHFapc3LvDtIrWcb79h16e7yN/t
+C0RBT76ytwk+2xmLNsuAilNPiiPJzJiht9+KFCwPvkb+Rqb731s1sryZWABJX5E
PH/ki4ks6Fv0RXZuYFwYUveTPZywwp4AvHrayBYiMMKxQFI2FjV83wBN+UxmAWOC
LR52ZAUWA0eu8w46aWOWg+LI/GKBIK1m3QqbVJEKXftOkDqnALh0DeDqRoP38FYb
gA4PbpTEe3BpVQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:12 2026 by rpki-client