Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: ErnFNj0uIdOGVULeSpxNUqKSEWnlBiIgD4k4iYZh+2s=
Subject key identifier: 37:D1:00:F4:6D:88:84:5D:9E:8E:62:B7:9A:78:B8:FD:4D:C8:98:0F
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 019FA8CFE664FB4329441D8AC69AB4417720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 0843
Signing time: Tue 28 Jul 2026 13:00:24 +0000
Manifest this update: Tue 28 Jul 2026 13:00:24 +0000
Manifest next update: Wed 29 Jul 2026 13:00:24 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: g9jV9FrUSlL3Q/VxvI0Y8Fj0zv3RwItccOTG6k/B0XE=)
2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:e6:64:fb:43:29:44:1d:8a:c6:9a:b4:41:77:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Jul 28 13:00:24 2026 GMT
Not After : Jul 29 13:00:24 2026 GMT
Subject: CN=37d100f46d88845d9e8e62b79a78b8fd4dc8980f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:17:2f:a8:18:75:d7:27:4f:32:ae:1e:dd:
7e:0e:50:0f:dd:5a:c9:a5:fe:eb:8c:8b:92:47:ff:
7b:1e:15:09:d1:45:57:1f:e7:26:03:01:19:7a:a5:
95:fd:b5:e1:fb:54:cd:fc:d7:e1:2e:9f:9e:ff:3d:
62:41:22:9a:41:b7:23:36:96:90:b0:6c:54:28:3b:
18:dc:94:d5:40:a3:ab:28:93:8d:9d:a3:6c:a9:c3:
6b:62:2f:65:5d:d0:db:80:c8:c2:72:ed:34:26:4c:
b0:a9:51:76:5c:2c:f2:73:34:7c:30:60:ca:06:83:
cb:ab:d7:b7:0f:2c:68:d4:27:40:c1:ce:de:69:94:
f9:11:de:69:d9:a1:ed:57:c6:3b:1f:33:12:ea:38:
c3:5d:51:91:47:4b:57:ea:f2:f6:7a:97:a6:c6:35:
48:cb:c2:69:0d:72:99:57:d5:21:34:24:7d:76:6e:
ce:cd:c1:90:f0:0d:d4:6b:fa:08:fa:6d:82:22:9a:
62:1c:eb:96:ed:5a:07:f6:73:c3:e1:77:e4:12:06:
22:2f:13:7f:77:60:c6:55:13:7f:35:a0:21:2f:bf:
8f:bc:35:19:ed:4c:71:b1:d8:06:56:45:81:70:fd:
62:e5:74:a8:87:63:fb:2d:91:74:6b:8c:c1:28:d6:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D1:00:F4:6D:88:84:5D:9E:8E:62:B7:9A:78:B8:FD:4D:C8:98:0F
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:e6:d7:71:6c:ed:08:ae:c7:14:8b:f2:e4:d9:6e:7d:32:
af:bf:20:52:9c:fb:e5:21:2d:97:3b:8e:e4:3f:60:05:35:c7:
1e:a8:98:37:5c:a8:cd:ef:ce:c2:ea:88:3c:da:6b:34:35:0f:
3a:3f:aa:4a:c4:8f:c6:8b:4e:11:ba:ff:c9:5a:52:96:f7:02:
5b:b1:d4:ed:cc:3a:75:84:22:e0:ec:ab:fd:45:d7:53:b8:04:
a6:f5:7f:b8:87:70:6b:f1:fc:88:c1:e2:87:65:2e:08:22:63:
f5:01:78:d6:21:d0:f3:f9:45:1b:cd:cb:6d:91:bc:0e:46:db:
ae:b7:26:4f:ed:87:8e:fb:a0:58:c9:46:85:07:31:37:90:34:
a6:32:4a:7b:6c:e4:22:08:01:96:bb:b9:9e:65:e4:b8:fb:1a:
7f:23:63:24:cb:3f:df:72:01:75:f9:5b:c5:fa:d0:ec:8e:ba:
91:ff:b8:5f:ee:6a:f4:50:1d:81:a6:6a:3f:71:86:2a:d5:74:
19:df:e8:4a:b7:fa:e0:e5:7d:1b:a1:f6:b9:9e:89:c9:d9:27:
44:47:dc:56:f7:42:1f:cf:60:4f:9e:cc:60:31:bc:3b:2b:b3:
58:b5:01:99:45:bf:1c:ef:93:7b:35:b6:cb:86:1a:72:10:7e:
95:c5:31:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oz+Zk+0MpRB2Kxpq0QXcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTJkYThlODkxNjkwZTcxZTliODU5NTA5N2RhN2M2MDY0
ZGE2MDIwHhcNMjYwNzI4MTMwMDI0WhcNMjYwNzI5MTMwMDI0WjAzMTEwLwYDVQQD
EygzN2QxMDBmNDZkODg4NDVkOWU4ZTYyYjc5YTc4YjhmZDRkYzg5ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+8XL6gYddcnTzKuHt1+DlAP3VrJ
pf7rjIuSR/97HhUJ0UVXH+cmAwEZeqWV/bXh+1TN/NfhLp+e/z1iQSKaQbcjNpaQ
sGxUKDsY3JTVQKOrKJONnaNsqcNrYi9lXdDbgMjCcu00JkywqVF2XCzyczR8MGDK
BoPLq9e3Dyxo1CdAwc7eaZT5Ed5p2aHtV8Y7HzMS6jjDXVGRR0tX6vL2epemxjVI
y8JpDXKZV9UhNCR9dm7OzcGQ8A3Ua/oI+m2CIppiHOuW7VoH9nPD4XfkEgYiLxN/
d2DGVRN/NaAhL7+PvDUZ7UxxsdgGVkWBcP1i5XSoh2P7LZF0a4zBKNYvYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfRAPRtiIRdno5it5p4uP1NyJgPMB8GA1UdIwQY
MBaAFNDi2o6JFpDnHpuFlQl9p8YGTaYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjkt
ZWMyZmJhZmU0ZDkxLzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjktZWMyZmJhZmU0ZDkx
LzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjfm13Fs
7QiuxxSL8uTZbn0yr78gUpz75SEtlzuO5D9gBTXHHqiYN1yoze/OwuqIPNprNDUP
Oj+qSsSPxotOEbr/yVpSlvcCW7HU7cw6dYQi4Oyr/UXXU7gEpvV/uIdwa/H8iMHi
h2UuCCJj9QF41iHQ8/lFG83LbZG8DkbbrrcmT+2HjvugWMlGhQcxN5A0pjJKe2zk
IggBlru5nmXkuPsafyNjJMs/33IBdflbxfrQ7I66kf+4X+5q9FAdgaZqP3GGKtV0
Gd/oSrf64OV9G6H2uZ6JydknREfcVvdCH89gT57MYDG8OyuzWLUBmUW/HO+TezW2
y4YachB+lcUxoQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:10 2026 by rpki-client