Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: w9eMHmv24mCpLjvYlfzGG/XzqsoO5rNqs//iqZmYBTs=
Subject key identifier: 47:F8:92:91:4F:C4:9E:CA:D8:3E:42:3E:B3:08:73:D9:0C:00:D5:17
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 019CAC0FDFE05589E812CA39BB0D90F2BC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 06B7
Signing time: Mon 02 Mar 2026 01:00:47 +0000
Manifest this update: Mon 02 Mar 2026 01:00:47 +0000
Manifest next update: Tue 03 Mar 2026 01:00:47 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: G251+7YvPCBwTwC94fuf5wEitnm7pUXWfutSm2fgK2o=)
2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:df:e0:55:89:e8:12:ca:39:bb:0d:90:f2:bc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Mar 2 01:00:47 2026 GMT
Not After : Mar 3 01:00:47 2026 GMT
Subject: CN=47f892914fc49ecad83e423eb30873d90c00d517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:af:e7:2d:50:72:ef:9c:a2:07:4b:32:63:e0:
42:05:55:fb:46:94:7c:c1:93:9d:0a:ab:30:6b:89:
9f:63:26:68:5a:9b:b2:e8:18:3f:38:3d:3d:81:3f:
c7:e8:d1:c7:41:ee:0a:44:92:64:7f:ae:35:e4:45:
98:69:85:36:0e:0e:79:2a:ba:49:b9:d2:0d:4d:95:
f6:75:66:9a:14:e8:2b:14:29:c5:7b:bf:d0:23:5a:
d2:f8:fc:a8:89:8c:34:c5:cd:55:ef:ee:97:aa:cf:
b6:58:b7:0f:13:7e:be:b3:9d:38:4e:e9:34:45:57:
0f:2e:e0:7f:3c:73:91:7a:53:87:69:dc:d4:05:eb:
ff:db:0f:b6:38:88:7e:f5:cd:76:89:4b:ca:14:8c:
bf:95:61:dd:78:2c:85:a0:25:f6:98:01:d5:04:e5:
78:95:aa:2e:89:c9:b9:44:51:98:8f:d3:df:ef:26:
ed:52:a5:3c:d0:86:2e:e0:ec:64:13:7d:97:78:f2:
a5:40:e5:7d:36:f2:db:d8:72:e0:1e:54:21:57:50:
f2:9e:36:48:78:b2:a2:ca:6e:3b:83:1a:89:5d:43:
67:bd:01:e8:2a:69:21:8a:5c:d9:30:6b:da:45:84:
ff:e5:94:90:73:0c:b6:4b:30:08:25:6e:6c:a6:90:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F8:92:91:4F:C4:9E:CA:D8:3E:42:3E:B3:08:73:D9:0C:00:D5:17
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f4:98:98:6a:e6:68:c6:35:6b:66:9a:6c:ec:1a:d6:d0:62:
f0:16:b7:1d:d2:a1:14:35:f8:ea:7f:3c:03:d7:af:e9:83:b9:
ad:d6:6c:1c:ab:90:94:d6:f6:e5:54:24:0b:59:e6:c3:67:93:
f9:e2:f2:d1:df:2b:3d:45:5d:b5:9d:f6:fc:56:df:fa:eb:7b:
49:43:34:ae:c9:9c:f0:32:b7:f2:fe:69:62:65:45:15:bb:27:
ce:4c:66:5f:ad:7e:1a:99:56:9b:8f:12:a1:de:f0:3e:da:35:
04:35:62:a8:46:9d:c4:38:71:a3:b8:a3:e2:31:73:ed:83:9f:
45:92:df:1e:11:7b:16:23:ec:2d:8f:dd:da:04:dc:df:d6:b6:
12:e8:e1:6e:61:8a:98:ab:3e:29:0e:bf:12:9b:1e:cf:07:e5:
b7:d4:6e:13:83:7e:47:bf:d0:4b:82:fa:5f:6f:fe:5d:f2:94:
40:da:86:3f:0a:a3:ca:6f:73:e8:20:d4:c6:e1:66:bf:79:f0:
9a:9f:c2:00:e0:6b:20:17:d2:01:2b:cc:3d:67:95:68:23:96:
68:ca:94:6d:30:37:7a:39:cd:6b:40:1d:3c:8e:a7:15:46:84:
cc:85:aa:07:3b:a3:e2:1f:3e:88:85:c0:00:6f:5d:6e:0a:67:
9f:b4:5a:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD9/gVYnoEso5uw2Q8rxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTJkYThlODkxNjkwZTcxZTliODU5NTA5N2RhN2M2MDY0
ZGE2MDIwHhcNMjYwMzAyMDEwMDQ3WhcNMjYwMzAzMDEwMDQ3WjAzMTEwLwYDVQQD
Eyg0N2Y4OTI5MTRmYzQ5ZWNhZDgzZTQyM2ViMzA4NzNkOTBjMDBkNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86/nLVBy75yiB0syY+BCBVX7RpR8
wZOdCqswa4mfYyZoWpuy6Bg/OD09gT/H6NHHQe4KRJJkf6415EWYaYU2Dg55KrpJ
udINTZX2dWaaFOgrFCnFe7/QI1rS+PyoiYw0xc1V7+6Xqs+2WLcPE36+s504Tuk0
RVcPLuB/PHORelOHadzUBev/2w+2OIh+9c12iUvKFIy/lWHdeCyFoCX2mAHVBOV4
laouicm5RFGYj9Pf7ybtUqU80IYu4OxkE32XePKlQOV9NvLb2HLgHlQhV1DynjZI
eLKiym47gxqJXUNnvQHoKmkhilzZMGvaRYT/5ZSQcwy2SzAIJW5sppBnEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf4kpFPxJ7K2D5CPrMIc9kMANUXMB8GA1UdIwQY
MBaAFNDi2o6JFpDnHpuFlQl9p8YGTaYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjkt
ZWMyZmJhZmU0ZDkxLzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjktZWMyZmJhZmU0ZDkx
LzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPSYmGrm
aMY1a2aabOwa1tBi8Ba3HdKhFDX46n88A9ev6YO5rdZsHKuQlNb25VQkC1nmw2eT
+eLy0d8rPUVdtZ32/Fbf+ut7SUM0rsmc8DK38v5pYmVFFbsnzkxmX61+GplWm48S
od7wPto1BDViqEadxDhxo7ij4jFz7YOfRZLfHhF7FiPsLY/d2gTc39a2EujhbmGK
mKs+KQ6/Epsezwflt9RuE4N+R7/QS4L6X2/+XfKUQNqGPwqjym9z6CDUxuFmv3nw
mp/CAOBrIBfSASvMPWeVaCOWaMqUbTA3ejnNa0AdPI6nFUaEzIWqBzuj4h8+iIXA
AG9dbgpnn7Ra6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:23 2026 by rpki-client