Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json)
Hash identifier: I2MwOx8SxW3gdy0uwXUxVg74cQmPCtZKX74cRAtONfM=
Subject key identifier: 15:4A:FD:D2:5C:E2:CD:05:A7:30:0D:6D:C7:68:85:88:42:A1:68:D7
Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Certificate serial: 019CAAFCFEA5524476EAC14859821CCE33B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: 3UFKdhSe5fu7xglWFmPr0Ai1uTm7oVV6l+WwLaiJOMU=)
2: ojj60KvEfIbBq__ojwSvccF3vWk.roa (hash: d0sPYG2tha8/FS0gE9+VMYJY8H3oZde90RvtZHcEaNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fe:a5:52:44:76:ea:c1:48:59:82:1c:ce:33:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=154afdd25ce2cd05a7300d6dc768858842a168d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:ef:15:66:2e:21:98:19:a7:80:b8:64:7a:
ed:1e:5a:86:13:e7:6e:c7:0a:74:6b:6e:97:b9:af:
1e:b8:c7:4c:f0:96:b1:78:b1:15:97:4a:58:86:0e:
2f:8f:ab:7d:1e:56:65:fe:c2:3f:18:b7:f0:92:99:
b0:03:aa:9e:ae:59:a4:57:6a:41:53:fe:4d:3b:53:
4d:ba:bc:36:29:40:48:9e:3c:22:f4:ce:fe:68:a9:
b1:9d:0f:06:78:27:67:9b:0c:dc:f7:75:c0:5c:95:
2f:43:c8:6b:5c:32:04:fa:4f:7a:f5:02:e0:4e:9d:
44:0a:b5:ac:85:80:4d:4b:40:a8:f9:cd:b3:87:cc:
d4:02:c4:2a:a3:15:27:e4:f2:d3:25:dc:aa:b7:84:
32:54:80:3c:c7:4b:ba:19:04:d8:d8:93:4d:9e:df:
e8:f4:57:a6:88:ce:d7:1c:a1:1a:4f:6d:12:89:39:
56:02:23:d1:bf:bb:af:0f:8a:d8:1b:c9:99:b8:92:
c3:da:0f:08:90:31:47:11:e3:1e:db:cf:49:b9:25:
75:6d:a7:05:11:ce:5a:c1:1e:73:15:dd:14:2f:53:
70:47:95:4c:a8:1f:1b:4e:5d:7d:44:a8:20:67:52:
8b:98:bd:2a:59:a7:0b:d5:8f:51:60:e8:9a:81:a1:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:FD:D2:5C:E2:CD:05:A7:30:0D:6D:C7:68:85:88:42:A1:68:D7
X509v3 Authority Key Identifier:
keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:36:71:0c:72:83:57:93:cb:72:8d:f7:2a:36:a0:1f:bc:2b:
f4:d1:15:d0:63:97:4e:47:7f:43:4a:d3:10:d5:42:f2:0b:10:
d4:4a:e1:bc:0f:30:af:fc:6a:f8:a1:42:6f:c8:d2:b3:5a:d4:
32:1e:73:9b:c0:89:9d:29:a3:22:07:bf:3b:59:d7:14:bb:78:
8b:f2:78:9f:0d:d2:cc:4a:07:58:5e:54:0d:57:de:4c:78:ae:
88:2a:e8:e0:ac:09:69:05:76:08:7b:d4:ac:a7:bb:bd:04:2f:
f2:0f:cb:b7:22:33:b1:7b:f1:8f:85:11:26:42:79:b7:42:b5:
45:41:b9:dc:28:aa:8d:64:73:8e:29:83:26:75:08:98:22:c8:
04:87:d6:99:bf:c6:10:1b:3c:7e:0a:f3:b1:c7:dd:15:e9:5f:
bd:f7:cd:f8:b7:97:4d:03:ed:b1:b5:d1:d4:6e:a8:03:47:54:
66:27:20:a4:36:a9:82:96:43:c2:8d:07:d5:75:1d:67:0c:2e:
9d:ed:5c:40:07:02:b0:fd:15:8e:d2:8e:b2:9b:6b:cb:90:85:
3b:f4:b3:9e:82:a1:cc:82:a7:78:6a:9d:08:f7:c7:d8:a1:f0:
b4:8a:25:67:5a:45:a0:fb:a6:95:0f:da:49:bd:c0:e9:3b:95:
46:b6:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:03 2026 by rpki-client