Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: pnbbHOaCt/pVGOEvCDr1F9UOo3qEa/n5xqlEDGhQEUw=
Subject key identifier: CE:5A:76:C7:41:71:A4:F1:19:64:FD:C5:BE:58:FE:33:C7:CC:2F:CC
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 019EC4B80AB18EADFA4A2E8F202319993C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 06:00:56 +0000
Manifest this update: Sun 14 Jun 2026 06:00:56 +0000
Manifest next update: Mon 15 Jun 2026 06:00:56 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: uToh/tBo4EyGzLg0f73EGI4lnGd9a7SPwlELyD5Zq5U=)
2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:b8:0a:b1:8e:ad:fa:4a:2e:8f:20:23:19:99:3c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Jun 14 06:00:56 2026 GMT
Not After : Jun 15 06:00:56 2026 GMT
Subject: CN=ce5a76c74171a4f11964fdc5be58fe33c7cc2fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:51:0d:68:82:77:9f:42:d6:b0:f3:2f:b6:
e4:10:57:7e:ff:07:03:83:0e:5a:b9:67:34:25:9d:
45:5a:b3:19:9c:87:7a:67:f9:dc:fe:54:a8:03:95:
35:26:c7:43:64:fb:21:4e:b0:e9:84:a5:22:96:9f:
85:12:65:d6:f3:a4:55:00:cf:ba:15:e4:63:76:21:
1d:22:bd:20:e5:fb:8c:5d:82:16:d2:2b:43:6d:b8:
b2:e3:9d:99:81:bd:22:e3:92:6c:b5:eb:61:01:a5:
f0:4b:fe:d5:61:a5:b6:39:05:ac:e6:59:e7:98:6d:
73:a3:fd:b4:78:8d:41:89:52:9a:2b:5e:bd:4c:22:
bf:7e:04:7a:1b:6d:fa:e6:be:f9:17:b8:e0:52:52:
eb:aa:22:67:ab:ce:56:30:d8:c3:22:50:7b:94:30:
9c:19:84:09:8e:69:6c:f6:72:a3:8d:0c:37:c9:da:
96:c2:8b:c5:eb:6a:4c:2d:0e:d7:63:0c:dd:8c:64:
ac:24:0e:61:34:bb:04:a6:49:60:28:30:93:db:05:
df:d6:1f:e4:82:7b:13:9a:1c:40:0b:97:72:24:fe:
91:3f:fd:f6:64:de:f9:b7:0e:e9:07:b1:d5:e4:11:
87:41:a2:7b:c8:11:62:c7:cc:48:3f:e0:2f:9a:6d:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5A:76:C7:41:71:A4:F1:19:64:FD:C5:BE:58:FE:33:C7:CC:2F:CC
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4e:07:cd:c4:4f:64:1d:96:af:4f:aa:fb:04:fb:7a:b2:ef:
40:b0:24:f8:d1:5f:2e:bd:20:81:18:6e:ae:be:5b:67:3e:70:
71:af:62:e7:dd:1e:71:28:9e:b8:b3:eb:31:5c:62:01:75:7d:
85:d2:eb:d2:8d:36:06:b4:b1:33:5e:f5:f5:2e:8b:d8:64:a9:
93:6c:e3:60:fc:d4:40:06:81:fe:45:c7:57:09:08:89:9c:e7:
ee:a1:de:c4:f6:87:fc:3d:9c:0c:ca:ab:23:60:24:36:e7:87:
a3:5b:a1:4f:cf:51:94:24:39:fe:b7:7b:c9:1c:21:0a:83:1f:
81:c0:9e:95:f4:59:b2:db:67:cb:69:c9:4b:86:4b:da:9c:38:
2d:a2:2f:ad:ac:53:c9:42:48:76:78:de:cd:16:ce:15:e7:ad:
a3:6a:71:b6:c2:22:0f:05:1c:ed:2d:94:9b:ba:dc:86:69:13:
b7:15:4a:4b:14:70:a1:57:3b:23:72:bc:b8:2c:ec:09:cc:1f:
5d:17:aa:40:67:3b:8e:ed:89:09:48:3d:d2:06:3f:34:47:4c:
15:84:a3:b0:16:10:62:f7:fd:61:c5:60:d2:5d:3e:0d:af:80:
00:f4:4d:fc:f0:f8:58:53:ab:83:39:30:f4:d5:cb:d9:13:7a:
5c:98:bd:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7EuAqxjq36Si6PICMZmTwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy
NGIyOGQwHhcNMjYwNjE0MDYwMDU2WhcNMjYwNjE1MDYwMDU2WjAzMTEwLwYDVQQD
EyhjZTVhNzZjNzQxNzFhNGYxMTk2NGZkYzViZTU4ZmUzM2M3Y2MyZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BxRDWiCd59C1rDzL7bkEFd+/wcD
gw5auWc0JZ1FWrMZnId6Z/nc/lSoA5U1JsdDZPshTrDphKUilp+FEmXW86RVAM+6
FeRjdiEdIr0g5fuMXYIW0itDbbiy452Zgb0i45JstethAaXwS/7VYaW2OQWs5lnn
mG1zo/20eI1BiVKaK169TCK/fgR6G2365r75F7jgUlLrqiJnq85WMNjDIlB7lDCc
GYQJjmls9nKjjQw3ydqWwovF62pMLQ7XYwzdjGSsJA5hNLsEpklgKDCT2wXf1h/k
gnsTmhxAC5dyJP6RP/32ZN75tw7pB7HV5BGHQaJ7yBFix8xIP+Avmm0+CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5adsdBcaTxGWT9xb5Y/jPHzC/MMB8GA1UdIwQY
MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt
ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw
LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEE4HzcRP
ZB2Wr0+q+wT7erLvQLAk+NFfLr0ggRhurr5bZz5wca9i590ecSieuLPrMVxiAXV9
hdLr0o02BrSxM1719S6L2GSpk2zjYPzUQAaB/kXHVwkIiZzn7qHexPaH/D2cDMqr
I2AkNueHo1uhT89RlCQ5/rd7yRwhCoMfgcCelfRZsttny2nJS4ZL2pw4LaIvraxT
yUJIdnjezRbOFeeto2pxtsIiDwUc7S2Um7rchmkTtxVKSxRwoVc7I3K8uCzsCcwf
XReqQGc7ju2JCUg90gY/NEdMFYSjsBYQYvf9YcVg0l0+Da+AAPRN/PD4WFOrgzkw
9NXL2RN6XJi9bg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:38 2026 by rpki-client