Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: ECsRgTVxLuue0wX0sg+i2hWOrpjJsYWXs+60iVOPIME=
Subject key identifier: F5:16:60:FE:81:D3:F4:89:44:18:91:4B:43:28:CC:61:13:43:30:80
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 01A0C0D56CF0B87E8A0641478F1652613289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 08D4
Signing time: Sun 20 Sep 2026 22:00:07 +0000
Manifest this update: Sun 20 Sep 2026 22:00:07 +0000
Manifest next update: Mon 21 Sep 2026 22:00:07 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: ycZ3biqLvieeaqElYUNdKPs7mTErLWzVxeuxUn8+PUw=)
2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:6c:f0:b8:7e:8a:06:41:47:8f:16:52:61:32:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Sep 20 22:00:07 2026 GMT
Not After : Sep 21 22:00:07 2026 GMT
Subject: CN=f51660fe81d3f4894418914b4328cc6113433080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:2b:09:67:98:d6:e0:c1:8e:ec:20:56:a7:
f0:3f:34:a9:42:9c:ef:7c:cb:8a:f5:55:eb:7b:61:
97:bd:29:c3:d9:e6:9e:a9:e6:c6:03:9b:bd:a7:67:
1b:11:b9:a3:4b:4a:e0:ee:cc:5b:31:32:53:7b:c8:
84:fb:7c:03:b7:ed:36:69:5f:3f:92:17:23:77:62:
28:3b:1f:3d:bd:b4:ef:c3:39:9a:5c:7c:d9:5d:96:
fa:cf:e3:f0:6c:5b:3b:66:9c:31:13:e3:a8:0a:b4:
0d:cb:18:2d:a2:24:da:d9:b7:59:74:e1:0d:9b:d5:
3d:e0:1b:6b:95:a3:50:98:3e:d9:06:9f:2c:53:84:
22:53:62:0b:6c:89:5f:ca:09:a3:d1:71:e6:af:a8:
97:49:0b:2b:10:c6:67:a8:dd:aa:09:6a:29:99:64:
44:0f:7c:03:94:f7:11:32:c1:1d:0f:80:37:b0:e7:
11:b8:e1:28:8c:e4:80:ea:e7:9a:1b:a2:32:cc:51:
b5:51:1d:e0:28:57:e9:89:75:a9:4c:80:99:97:d5:
4d:bb:73:9b:44:c6:3c:ce:84:18:8e:44:dd:c2:df:
f1:f3:3f:e1:68:4d:3e:a0:ff:02:20:af:88:21:f7:
11:40:3d:2c:89:c2:c2:26:55:de:24:ef:2f:a6:b4:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:16:60:FE:81:D3:F4:89:44:18:91:4B:43:28:CC:61:13:43:30:80
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:da:f3:26:a2:58:9a:52:2b:c6:71:65:56:15:57:5c:94:4b:
f6:72:76:b6:a1:3f:38:0e:03:ac:d0:ff:20:2f:4a:77:1a:fd:
31:94:25:68:98:ad:29:4f:43:62:8e:80:d2:67:2a:34:e8:ee:
4b:a3:2f:a7:4e:06:bd:b1:81:56:c4:2e:e6:fb:9d:24:5d:25:
83:40:b5:91:b0:d3:07:3d:9b:a9:fc:df:36:03:21:de:90:f9:
1b:2f:48:00:59:2a:b4:71:a6:9b:00:be:18:84:bb:51:a0:83:
a1:fa:c7:0b:7e:14:86:1d:3b:23:5d:4a:68:fe:63:75:5f:d0:
85:eb:a4:3f:00:08:5e:11:3e:64:ea:6d:0b:0a:05:8f:85:65:
75:1e:f4:7b:e1:75:92:9e:a5:41:72:60:39:d7:96:f3:6a:78:
65:77:8a:8e:8c:f5:60:f5:54:53:8a:0a:d3:b0:bd:c5:dd:43:
c7:4d:04:22:77:76:72:0b:f3:84:14:c6:96:a3:68:40:06:a3:
e4:f6:48:cf:e5:d7:f9:d3:3c:4c:46:5a:90:21:14:5f:7b:f4:
db:9d:b8:fd:95:2e:80:b5:98:b4:2f:ad:4b:3e:6d:40:9a:7f:
73:68:11:07:a4:be:95:d0:51:c0:9f:9c:e0:19:06:60:f9:3d:
56:7f:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:12 2026 by rpki-client