Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
File: OLW9ObdPI9doPRI46prKPGamMaM.mft (raw, json)
Hash identifier: qAG91EYh5daIxIiGCvAVsIAv0jAdyY/vLLEfhI0lvTo=
Subject key identifier: 6C:9C:CF:3D:89:A9:9D:7F:5E:6B:D0:0D:97:8C:E8:AC:7A:74:54:EC
Authority key identifier: 38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
Certificate issuer: /CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Certificate serial: 019D9886C3248885A7959E6A0A184221590C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 23:01:01 +0000
Manifest this update: Thu 16 Apr 2026 23:01:01 +0000
Manifest next update: Fri 17 Apr 2026 23:01:01 +0000
Files and hashes: 1: OLW9ObdPI9doPRI46prKPGamMaM.crl (hash: 6oClaAw0gw5hDXcZXCaKFex0GUvd3OA9lf/prt2mGEM=)
2: ojj60KvEfIbBq__ojwSvccF3vWk.roa (hash: d0sPYG2tha8/FS0gE9+VMYJY8H3oZde90RvtZHcEaNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:c3:24:88:85:a7:95:9e:6a:0a:18:42:21:59:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b5bd39b74f23d7683d1238ea9aca3c66a631a3
Validity
Not Before: Apr 16 23:01:01 2026 GMT
Not After : Apr 17 23:01:01 2026 GMT
Subject: CN=6c9ccf3d89a99d7f5e6bd00d978ce8ac7a7454ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:be:15:37:eb:1a:45:e1:6c:7b:45:20:17:
d0:7b:44:0c:9c:44:99:96:e6:4a:3f:e7:64:22:07:
7f:d5:d5:90:f7:cb:26:da:b9:23:c1:1a:4c:94:72:
c2:92:8d:54:e0:55:ea:45:8e:91:d4:c9:c2:dc:e6:
66:1c:55:23:8c:98:83:1a:7f:12:ee:41:00:14:61:
1a:2e:3e:b4:33:6c:c9:b9:2f:d3:00:4d:b6:43:eb:
ad:56:84:78:04:19:a6:b4:19:ce:d3:26:8d:08:ab:
48:f7:62:c4:e1:b2:6b:c9:1a:89:2c:70:69:4e:23:
f8:05:24:fb:2c:68:58:b1:47:be:5b:3f:69:bf:79:
c9:63:2b:29:be:57:28:2a:f7:a0:f6:fb:82:74:58:
56:53:8b:dc:26:62:28:62:69:07:c3:7f:c1:eb:54:
c2:3f:00:c4:c8:20:9f:59:62:ec:6f:32:de:36:22:
e8:8d:e1:0f:05:38:91:f9:30:28:5b:4d:b3:9b:db:
ed:c4:b5:35:a8:7b:61:12:50:09:af:ae:0b:c9:c4:
61:8f:26:45:42:b0:23:f0:4c:65:af:93:10:92:e3:
5c:54:5f:ed:b4:ea:e5:05:65:1f:4e:bd:9a:df:0a:
d3:d3:4c:2c:84:13:33:04:19:de:8c:13:1d:1b:02:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9C:CF:3D:89:A9:9D:7F:5E:6B:D0:0D:97:8C:E8:AC:7A:74:54:EC
X509v3 Authority Key Identifier:
keyid:38:B5:BD:39:B7:4F:23:D7:68:3D:12:38:EA:9A:CA:3C:66:A6:31:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLW9ObdPI9doPRI46prKPGamMaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5f150-3d83-42cb-9a47-e3cfe6cec0ac/1/OLW9ObdPI9doPRI46prKPGamMaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dc:2f:72:f2:21:d8:40:d2:33:7c:ad:96:57:e1:91:41:86:
53:de:81:1e:c8:98:6d:4e:3f:8d:05:1d:5f:66:e6:9f:72:0b:
ee:68:2c:18:80:48:e9:e0:da:64:ef:05:52:34:25:80:e8:17:
aa:5c:05:60:8b:28:33:3c:6c:31:46:be:a4:2d:7b:15:d2:82:
68:a6:0d:29:7c:32:2d:3e:99:f3:0e:88:18:ac:6b:58:86:2f:
6b:34:8a:88:7c:d8:4e:bc:67:81:27:15:ea:69:fc:14:8e:ac:
81:f0:61:bf:21:da:54:b8:ed:3f:52:02:8b:06:b6:4a:f9:ac:
e9:43:54:e1:82:5a:81:c0:5d:d4:76:cb:51:d0:12:cb:d5:af:
52:3f:1b:ed:1c:4b:51:b3:52:d5:a5:59:bf:1a:13:3f:f6:47:
31:6d:53:d9:c0:36:78:b1:d2:e7:4f:17:48:c0:59:3a:e1:4d:
91:26:23:73:9c:1c:b6:ae:65:56:2d:8b:14:ee:3c:55:d3:0d:
a6:e6:57:34:e0:61:4e:44:5f:e2:45:a1:f2:7a:fb:68:4f:11:
44:5e:70:37:b2:82:d3:eb:3d:71:fb:00:ab:b5:4a:16:bf:ec:
bd:9f:1a:7e:62:51:49:08:89:36:1b:e7:b3:1f:5d:42:04:37:
2b:c7:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:01 2026 by rpki-client