Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: V7MOZCsW7NFmMhDyY0QUzz+CXgCx72o/4Qp74ZayRC4=
Subject key identifier: 04:FA:A5:A4:F7:C4:DC:4B:17:4B:35:04:81:10:D7:FD:42:B7:5C:AF
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 019CADC7ABCF67667A3289E26E98A7F554D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:01:09 +0000
Manifest this update: Mon 02 Mar 2026 09:01:09 +0000
Manifest next update: Tue 03 Mar 2026 09:01:09 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: KXyOYOO9IAUtoWj2Q8F7WxERcrcioNBv1FHnwPXpaWs=)
2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ab:cf:67:66:7a:32:89:e2:6e:98:a7:f5:54:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Mar 2 09:01:09 2026 GMT
Not After : Mar 3 09:01:09 2026 GMT
Subject: CN=04faa5a4f7c4dc4b174b35048110d7fd42b75caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:41:c4:e3:e0:eb:ed:f6:3f:e3:f2:ed:9f:
9d:72:1e:c7:df:f5:7c:5c:b8:19:66:23:26:b9:ac:
f3:5a:cc:98:03:3a:a6:0c:d5:9b:64:71:fa:fd:f0:
8b:aa:cb:4e:cb:35:79:82:e5:7a:70:d9:9a:34:84:
71:b8:45:12:95:4d:4a:aa:b2:c9:30:3e:6e:76:eb:
dd:72:21:c6:d9:6e:e1:27:bc:3d:1b:e2:3a:37:b7:
16:3f:2f:7c:6c:27:28:a6:dd:4f:39:d3:48:64:48:
72:dd:11:1b:c5:d0:e8:82:05:c8:ab:88:95:e6:4e:
0a:a7:72:d5:8b:56:f9:1c:1f:22:ab:42:29:3b:32:
e6:40:ad:61:71:47:76:da:c1:32:68:ad:eb:40:91:
f7:ab:30:30:1e:ad:83:8c:6d:33:e1:13:d2:ba:7f:
88:b2:0a:d9:32:6f:24:17:04:6e:5a:10:6f:d9:92:
c2:7e:a7:52:94:db:f5:fc:24:9c:ec:94:0d:3c:a2:
6b:01:0a:f5:13:76:0f:56:f6:be:d5:be:8a:d0:a7:
58:a9:0c:70:ff:0e:52:d8:f0:1d:5b:46:8c:96:77:
f7:58:e1:2c:b5:db:6b:01:f7:99:6f:ec:fd:a9:d6:
42:04:54:1f:58:a9:5d:cd:96:d1:bd:78:7d:a2:9d:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:A5:A4:F7:C4:DC:4B:17:4B:35:04:81:10:D7:FD:42:B7:5C:AF
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e1:c4:fd:ed:eb:a9:d6:f6:bf:ba:ad:be:d7:0a:0a:8b:39:
65:e4:01:9d:eb:17:65:eb:35:58:c9:e8:3d:51:7c:c1:f8:76:
7c:c9:fa:8c:00:ed:57:d7:e3:13:88:7a:d4:0e:8e:93:2e:97:
61:e4:0f:cb:7b:35:03:c5:a5:d2:f3:22:8f:b9:4d:c7:68:63:
40:98:fa:34:e5:39:d0:7a:ea:45:c0:93:c7:44:8a:ea:08:69:
17:65:b3:ca:25:2a:cb:18:02:21:d9:e4:22:56:39:a7:c3:34:
81:cc:db:b6:ae:d5:97:ae:3b:ce:8e:0e:bb:84:76:9a:07:7a:
e0:98:d9:5e:7e:9f:57:47:3a:a2:db:91:af:93:34:9a:1c:07:
39:bf:98:7b:d8:73:06:72:68:4f:aa:28:cf:fc:52:33:a5:a8:
80:80:ca:7a:4b:3d:9e:26:35:92:62:82:cf:70:1d:01:a0:6e:
77:b3:c3:cb:8f:88:4b:cf:dd:d7:54:d3:3d:d1:08:a3:a7:64:
02:15:74:89:b4:63:d6:2a:bc:c9:ed:0f:00:23:e4:b7:dd:36:
49:4d:a9:6f:64:a8:8f:05:82:17:58:99:af:0f:80:59:1d:70:
8a:62:c3:18:5b:eb:07:76:05:e4:aa:4f:1b:39:31:75:71:7e:
15:2a:cd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:31:43 2026 by rpki-client