
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
File: d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft (raw, json)
Hash identifier: 6pgLZmAHZv7yK/gsRZ4CNrGHdKJ5XBiNERVyYIKc1Zg=
Subject key identifier: A4:EE:EF:E9:23:9A:45:09:A9:63:55:1B:4A:0B:1C:54:04:B1:3D:07
Authority key identifier: 77:4A:25:72:8C:95:0E:60:AC:69:AE:AC:3A:B5:74:5A:4E:3E:44:C3
Certificate issuer: /CN=774a25728c950e60ac69aeac3ab5745a4e3e44c3
Certificate serial: 019FAC7725E338EE737A408DD641CEBF19C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:57 +0000
Manifest this update: Wed 29 Jul 2026 06:01:57 +0000
Manifest next update: Thu 30 Jul 2026 06:01:57 +0000
Files and hashes: 1: Qo5Twpuw0PJHEUfRV8uv8sKD0Jo.roa (hash: /0O51CgL1416iwNlL7nR6ylxjftB4K89aEzhgfr+0xs=)
2: d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl (hash: Z6eHIu91vdlqREWXvLF7gR9kjsawkV/FJRL8gApPGwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:77:25:e3:38:ee:73:7a:40:8d:d6:41:ce:bf:19:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774a25728c950e60ac69aeac3ab5745a4e3e44c3
Validity
Not Before: Jul 29 06:01:57 2026 GMT
Not After : Jul 30 06:01:57 2026 GMT
Subject: CN=a4eeefe9239a4509a963551b4a0b1c5404b13d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:14:63:fd:42:8f:68:e1:7c:9e:dc:cb:ea:
1f:0f:a0:4d:5e:4a:44:37:ac:68:7d:c0:e3:69:09:
92:5a:75:9e:b8:38:c1:c0:dc:e9:fc:e1:95:45:20:
87:82:af:ef:56:a4:6f:aa:a4:5f:92:0f:db:ee:6b:
fd:1e:3d:70:38:fc:5a:30:c1:94:3c:9f:c3:63:ed:
f5:77:2a:4c:e7:46:c8:3c:14:77:ce:cf:42:f5:55:
98:de:fe:12:fa:5c:37:fa:a8:fd:59:51:6c:b0:08:
86:9f:94:33:71:87:e3:a4:31:06:82:88:38:5b:ef:
7c:fc:e4:15:d2:e3:c0:94:4d:6f:92:53:60:2a:3b:
8c:b8:3d:24:43:c4:c4:d8:1a:b6:dd:2f:11:74:d8:
a2:74:d1:ea:13:f0:e2:64:7a:e8:69:d3:3e:a9:21:
2b:84:1b:30:4f:88:3a:7a:89:28:8d:b4:8c:a2:b7:
e1:cb:5d:42:de:90:02:71:ec:9f:2c:ca:84:46:a9:
79:c1:ce:ca:e9:4c:2b:48:10:51:25:41:dc:df:3c:
28:54:3a:69:db:e3:9c:a6:31:33:ec:7b:f5:fa:a5:
a6:fc:b0:f8:6b:34:fe:39:13:00:55:8d:63:c7:31:
06:f7:2a:c6:65:01:13:d1:b0:31:c0:c1:b4:c1:43:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EE:EF:E9:23:9A:45:09:A9:63:55:1B:4A:0B:1C:54:04:B1:3D:07
X509v3 Authority Key Identifier:
keyid:77:4A:25:72:8C:95:0E:60:AC:69:AE:AC:3A:B5:74:5A:4E:3E:44:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5d:be:05:c8:3f:fe:0b:ae:0e:01:2f:3b:34:54:e5:4f:91:
5b:e6:bf:ae:be:5e:78:96:df:ae:df:71:97:6d:6d:e4:f5:f3:
10:3f:4e:85:b6:53:40:d4:59:70:2f:b3:bf:6d:18:42:c2:26:
a5:1d:ac:b4:3f:fb:6e:38:03:d9:90:34:49:78:50:7f:62:25:
3e:7e:ea:c4:3d:77:aa:36:b9:90:dc:7d:f9:1e:6c:35:c6:59:
6c:a5:82:ae:f4:0b:60:84:48:01:22:92:95:2b:6b:93:ed:35:
76:ca:9a:87:14:2e:7c:b8:50:95:f5:fb:17:dd:6a:97:e1:35:
fb:81:00:bd:90:29:3e:59:4e:8b:c5:23:3d:2c:5a:22:ff:50:
66:f8:50:c2:01:17:31:17:e0:11:39:45:37:4a:5d:cc:ec:aa:
75:17:2b:42:1e:65:5b:2c:52:e4:a5:1b:9f:69:b2:a2:ae:f0:
2e:d5:70:e7:f3:f3:e5:96:85:1a:ec:4d:01:40:08:87:8c:98:
f1:11:41:e8:d1:3f:a9:e9:21:e9:cf:71:5c:50:2c:e3:f0:42:
b8:54:6b:75:b5:e4:23:3f:05:12:e0:ce:51:f9:ae:64:4a:5a:
80:34:b5:a9:68:4f:85:f6:ab:53:27:a4:ad:e8:46:44:0c:b8:
47:cf:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:41 2026 by rpki-client