Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: a5oV8Pxj+8NAhbWQpT9ihzwHoRy05h+Cf9ds4bpW7Gg=
Subject key identifier: B1:7D:FB:1E:08:90:32:09:70:03:45:A5:E4:BA:20:A7:B4:7B:B7:C6
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 019EBF23B31397C9F5CED2E65454623B043A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 07CA
Signing time: Sat 13 Jun 2026 04:00:48 +0000
Manifest this update: Sat 13 Jun 2026 04:00:48 +0000
Manifest next update: Sun 14 Jun 2026 04:00:48 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: dBiJ06YEqPaKW5Xawx/bcrs48deNNbOekuCi0hEfC4I=)
2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:b3:13:97:c9:f5:ce:d2:e6:54:54:62:3b:04:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Jun 13 04:00:48 2026 GMT
Not After : Jun 14 04:00:48 2026 GMT
Subject: CN=b17dfb1e08903209700345a5e4ba20a7b47bb7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:56:42:39:3a:c5:2c:e1:41:44:93:50:c7:
2d:54:bc:08:71:ef:44:8a:2f:26:10:a6:44:41:77:
1f:7e:df:c7:9c:91:24:86:79:90:29:37:90:d7:76:
ff:44:ba:6f:3a:d5:4a:10:1f:7b:5a:56:aa:db:ba:
5b:8a:e6:95:1c:c9:16:2c:ac:c6:27:05:37:03:1c:
59:60:56:cb:9a:a9:fc:6c:97:24:bc:b1:8f:38:0b:
96:c4:7f:55:f5:0b:a5:a1:7e:72:d4:cd:07:90:39:
13:c9:5c:02:3e:c4:34:bf:56:97:1d:82:76:d7:3b:
0c:3e:17:09:11:b2:da:dd:9f:30:c3:ee:55:81:69:
5a:82:f8:bc:58:d2:d6:e3:2d:e1:10:b0:bc:b6:a9:
3a:98:fa:9c:85:aa:9d:9a:93:9b:8b:1d:3c:e9:e6:
68:8b:27:8f:9a:d2:08:41:9a:ef:0a:45:b1:66:81:
95:89:ad:67:40:a3:d9:e4:f1:04:ab:58:fd:ad:d8:
27:ca:23:b7:3f:9c:1d:fc:39:27:3b:62:77:cb:b8:
3b:92:b9:4b:a9:c8:af:14:f5:43:62:5f:c6:cc:d6:
f0:b7:c6:c0:8a:69:6a:19:eb:ff:70:28:57:69:98:
e7:df:37:66:86:90:f2:6e:de:30:69:34:f2:4d:f6:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7D:FB:1E:08:90:32:09:70:03:45:A5:E4:BA:20:A7:B4:7B:B7:C6
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:01:34:3c:14:d5:bc:36:06:b9:e7:33:f5:f6:88:15:2c:e0:
c8:78:44:74:45:16:a7:e3:23:74:e5:8b:cf:3b:c3:87:73:b9:
d6:14:b0:55:41:40:53:63:03:70:46:59:3a:3b:1f:ed:c5:c4:
cc:57:e5:7c:1b:9e:5f:f5:25:3c:5c:18:96:4b:35:ba:95:ab:
0c:86:a2:09:c3:4b:5b:db:d9:d4:c5:a5:82:b6:44:ff:96:be:
93:0a:24:83:44:b1:6e:90:3a:01:f2:93:3e:48:d8:e3:62:0a:
1d:ab:71:d0:ce:8c:fc:41:93:28:55:04:9b:8b:1e:ba:cf:af:
2c:c6:3b:48:f6:65:f2:24:58:a4:72:6a:16:9b:77:d3:12:af:
4f:96:06:2c:06:60:ac:5e:ed:2e:05:d4:cf:a2:d6:94:3d:34:
df:9b:f2:28:10:fa:fa:55:b9:c2:2e:91:fc:dd:e7:0f:c3:28:
93:48:da:e3:db:00:6a:df:26:d8:54:89:f0:24:28:1e:c8:4d:
dd:65:26:f0:72:6f:d0:81:35:82:01:97:7a:7a:30:d3:43:32:
f6:3c:08:2a:62:ff:f3:a4:0f:b9:82:a9:f4:55:a1:94:75:0f:
49:cb:f7:40:5a:14:44:6f:c4:3c:6a:b2:39:b6:fa:eb:78:d5:
eb:38:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:31:27 2026 by rpki-client