Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier: s/VAJ19IS4MrYCZpJgj2csdLB9n4k1+gb0sFZuJDm10=
Subject key identifier: 8C:79:09:20:BA:9B:1D:A4:3E:EC:A7:0C:1F:80:42:57:4D:21:8E:92
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 019D9B50C05CD051173C818481FED9A2E47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 12:00:53 +0000
Manifest this update: Fri 17 Apr 2026 12:00:53 +0000
Manifest next update: Sat 18 Apr 2026 12:00:53 +0000
Files and hashes: 1: CnM-0w0gilOkRdDZyrSW-bGkUN8.roa (hash: CtJFwzlRxzFJ7o0tp3Fs5nZt739BQjSPnxG0LvzcP4g=)
2: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: OYa/4y2tuzYRExQrq8jmxYPRzFhDvUkyktPAr0wsjfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c0:5c:d0:51:17:3c:81:84:81:fe:d9:a2:e4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Apr 17 12:00:53 2026 GMT
Not After : Apr 18 12:00:53 2026 GMT
Subject: CN=8c790920ba9b1da43eeca70c1f8042574d218e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:73:ae:7b:2d:17:32:c4:f6:25:b3:3c:e5:
16:9d:9d:31:61:7c:4d:be:fa:e5:72:53:8b:34:7e:
23:09:36:de:10:d9:f0:aa:0c:c9:2b:9f:9a:78:4b:
67:86:19:43:f5:9e:cb:fc:77:03:42:7b:22:b6:0a:
f5:eb:9b:ac:1c:d3:ba:0c:09:df:b2:ff:33:76:27:
80:9d:fb:2e:98:4e:3b:b9:e3:ee:43:f0:1b:ea:47:
15:93:8c:a5:0f:52:cd:c5:d1:36:57:4c:8c:48:9f:
da:c9:27:55:b2:d9:1e:fb:e3:1a:8c:8c:cc:48:81:
87:42:e2:da:a8:2e:94:a4:42:9f:79:69:97:87:f0:
a6:8e:ff:55:a2:ed:3d:e2:39:55:d1:7b:fb:56:8a:
93:80:9c:b0:4c:84:52:56:d7:02:cf:6c:bc:4c:0b:
df:79:33:75:62:df:b5:0f:3e:db:20:85:2c:2a:3a:
4a:fd:af:ee:b4:3e:70:c1:24:f9:d7:02:bf:85:8d:
f0:43:c9:4b:ab:c6:cd:e1:63:6d:4c:2b:08:c0:91:
df:3a:22:a5:f9:03:6c:87:05:bf:c8:6f:b3:e0:5d:
35:ed:5d:fd:83:b7:50:36:eb:0d:c2:92:f9:a5:00:
5a:3c:ce:ce:a3:56:7d:37:b2:af:a1:cb:a7:64:b1:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:09:20:BA:9B:1D:A4:3E:EC:A7:0C:1F:80:42:57:4D:21:8E:92
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4c:33:9c:67:6b:52:ac:54:cf:a0:d6:96:89:0b:4a:c5:3c:
cf:cd:23:a4:0c:b0:b8:30:0d:01:29:b5:ec:a0:bf:7d:d1:f3:
c5:94:74:42:2c:e3:0b:b4:19:cd:92:4e:49:a4:25:38:43:7b:
40:a1:23:a5:c2:9a:01:e4:61:08:15:33:53:a6:d0:3b:c2:4a:
22:b3:c8:bb:54:07:ee:5a:ad:ae:6f:87:13:b9:ad:12:35:e5:
af:54:b6:1b:2f:d5:ae:3e:87:99:b5:5e:29:16:7f:f0:76:d1:
af:14:c0:5d:c4:c7:24:34:3c:e7:d0:05:22:b5:2b:30:98:ed:
69:97:f5:da:24:64:52:20:37:05:a9:0c:b1:26:82:56:ce:4a:
fe:1d:9b:07:5e:ab:f4:74:9c:ae:52:fb:77:96:62:36:ee:de:
56:d4:0f:8e:a0:d8:90:4e:e1:ad:65:31:b9:bf:eb:50:35:2c:
a7:f3:84:24:fb:17:e8:43:36:02:8c:a1:2b:e2:cf:cf:42:80:
66:46:dc:3a:90:18:d2:f8:04:d3:df:d3:a1:c0:3b:99:94:85:
b8:63:1a:f6:72:b3:6a:73:db:3a:4f:44:41:b2:01:d5:23:35:
5f:79:9c:fa:a6:91:3f:33:17:df:f3:8d:1c:33:8c:0d:78:82:
2c:e6:c8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:52 2026 by rpki-client