Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
File: d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft (raw, json)
Hash identifier: i3snJgRTEGtnH+3Mdaem+As2H7CFLiy4onfhs46z7A4=
Subject key identifier: 53:29:C1:DE:E2:1E:20:DC:E1:48:F7:74:37:ED:B8:46:33:74:3E:B2
Authority key identifier: 77:4A:25:72:8C:95:0E:60:AC:69:AE:AC:3A:B5:74:5A:4E:3E:44:C3
Certificate issuer: /CN=774a25728c950e60ac69aeac3ab5745a4e3e44c3
Certificate serial: 01A0E17458A34B676DA93162C01743A18835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:33 +0000
Manifest this update: Sun 27 Sep 2026 06:01:33 +0000
Manifest next update: Mon 28 Sep 2026 06:01:33 +0000
Files and hashes: 1: Qo5Twpuw0PJHEUfRV8uv8sKD0Jo.roa (hash: /0O51CgL1416iwNlL7nR6ylxjftB4K89aEzhgfr+0xs=)
2: d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl (hash: 01j7a0U1EFqKtAeMGIzvKv56UcNvsCc5BT2rnTfW3ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:58:a3:4b:67:6d:a9:31:62:c0:17:43:a1:88:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774a25728c950e60ac69aeac3ab5745a4e3e44c3
Validity
Not Before: Sep 27 06:01:33 2026 GMT
Not After : Sep 28 06:01:33 2026 GMT
Subject: CN=5329c1dee21e20dce148f77437edb84633743eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:2b:fe:16:99:a4:0f:db:69:47:8b:f3:9e:
7d:68:a8:37:c4:66:cf:70:ad:4e:cf:a1:53:04:8d:
6f:66:bb:89:b1:cf:d5:2f:ea:1c:66:2d:0f:d5:d6:
36:5a:5a:39:fb:1c:5e:d8:d0:78:b5:ce:c2:37:43:
d5:c3:24:61:1f:98:30:6a:18:ff:d3:d9:66:b9:a6:
43:ca:a9:13:9a:6a:36:35:88:bf:27:93:02:8e:60:
a6:f5:44:b0:3b:94:95:57:69:41:87:93:77:40:31:
c0:c3:2a:dc:f7:fb:e4:6b:c2:1e:fd:30:20:0b:65:
6d:b4:41:0d:8a:ff:fc:5d:fd:2b:73:d8:de:e6:1c:
e3:b2:83:b2:ef:c5:c1:8b:32:65:f5:bf:8e:51:62:
38:cf:76:6a:74:c2:e4:ad:8c:20:c7:42:be:79:35:
79:34:1f:0e:75:68:17:de:a2:1f:04:e2:92:13:ac:
0b:63:ba:db:6b:fe:cb:6e:58:c3:f7:49:24:71:a8:
79:af:4b:20:e3:f5:23:62:9b:fd:9b:92:53:6b:47:
da:cf:7b:b6:e9:3e:e4:de:0d:90:19:86:9d:e6:ef:
a2:d3:33:23:3e:56:92:05:5c:51:e8:73:b6:10:5c:
82:bb:34:3f:7b:ff:f9:0d:5f:3c:3b:0b:a6:a9:a1:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:29:C1:DE:E2:1E:20:DC:E1:48:F7:74:37:ED:B8:46:33:74:3E:B2
X509v3 Authority Key Identifier:
keyid:77:4A:25:72:8C:95:0E:60:AC:69:AE:AC:3A:B5:74:5A:4E:3E:44:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d4:8b:61:a2:6e:00:c4:47:e0:72:fe:bc:e7:60:ea:e2:8d:
6f:bf:c9:9e:03:4c:09:fa:48:ea:3c:f0:72:dc:6c:8b:c1:82:
e0:ba:df:b1:b8:cc:4a:06:f4:d7:e8:76:c9:0e:fb:98:10:eb:
6d:ed:2e:9b:a8:de:37:43:b1:d2:0e:2f:d2:ef:47:cb:8e:b7:
3d:a8:25:97:c3:a6:de:b9:c1:b7:bc:b5:14:c1:6c:c3:f9:f6:
cd:56:f2:cb:c9:bd:de:96:ee:67:34:79:5b:01:c4:0a:e2:e6:
b9:9c:1e:d4:af:08:20:c9:e4:48:d9:0d:2e:8e:18:4f:d9:1f:
32:24:23:3c:f7:22:cb:93:ee:7e:78:e4:7e:d1:64:8e:5d:69:
8d:7e:a5:5b:03:68:2b:47:ac:04:ae:7c:a3:19:50:ec:d2:fa:
90:5a:93:ca:26:8c:43:bb:d0:83:f7:04:05:a1:5a:54:08:f4:
4e:9b:74:ec:4c:e7:4b:ee:36:11:9f:9a:9b:d0:63:ff:c7:4e:
fe:05:18:d4:33:05:c6:aa:ff:a6:03:a5:58:76:1d:69:8b:26:
bd:81:8b:b9:b7:d2:05:7b:fc:69:bf:35:b7:f1:68:53:1a:8b:
f4:3d:d5:ca:95:d1:d8:fb:17:97:be:7e:32:5d:05:d9:13:06:
3b:d0:2e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:24:58 2026 by rpki-client