Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: rIVZdYhtNF9Mt2oxKkXOMoCcQ7509wOvsHgia86bvUw=
Subject key identifier: 01:03:3B:74:17:75:E5:A0:D1:D3:66:91:5A:C7:CC:F6:A1:37:0A:8F
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 01A0C6A13FA21CC59EECEBC7D55F4701170E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 0AE9
Signing time: Tue 22 Sep 2026 01:00:51 +0000
Manifest this update: Tue 22 Sep 2026 01:00:51 +0000
Manifest next update: Wed 23 Sep 2026 01:00:51 +0000
Files and hashes: 1: 1-OTLSt9bxerjVQrXim1tii-2o9E.roa (hash: pXJ9LGfvy4+1EbvSdA31KaVxZBu7t1Z+nzZrQNY4cjI=)
2: 3jhOZIWBBUYNhlF2h5lBua-ajBs.roa (hash: Ea8xHXLjFbr2D9v27/3IzBBK8ffF3N5VQDLBS2f2VpM=)
3: Axb5MTof7fk-anNZXzHyNvLvYvg.roa (hash: HOYWdRZLCpSn9qcwi8QakMqzLqB9ckVUi9jVW/8+P2w=)
4: LzJeistanBiOKXErxoTp59Nqyxs.roa (hash: lbEuCzjhR7tPHwoY5wShJ32jhg+zSn2e+kMFcRklJPk=)
5: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: rbCNhslWeDJqV1SQGF/OletBFcFg9ico4GKnn2j/reo=)
6: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:3f:a2:1c:c5:9e:ec:eb:c7:d5:5f:47:01:17:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Sep 22 01:00:51 2026 GMT
Not After : Sep 23 01:00:51 2026 GMT
Subject: CN=01033b741775e5a0d1d366915ac7ccf6a1370a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:26:41:27:d7:3a:41:d8:41:a8:95:8f:31:
ef:81:6f:ea:ba:29:c8:2b:a4:fa:2c:a2:8e:f6:f5:
77:7c:ce:6a:12:92:1b:b2:ff:d6:15:de:7d:ff:8d:
4b:e3:15:6a:53:28:37:5b:3c:f0:26:27:9b:6a:0d:
6b:66:08:8c:d4:cf:5d:29:e7:7b:5e:28:85:49:3e:
e1:50:40:e9:b2:97:80:9d:c0:d0:2d:72:ba:5c:e3:
51:f2:16:69:24:d7:4e:00:28:06:0e:92:db:85:b6:
a9:be:5b:69:c3:0a:d8:bb:28:f6:c4:c3:6c:dd:95:
3b:6d:69:27:11:74:87:4e:28:02:68:8c:b9:19:3e:
0a:76:b0:35:96:25:b9:59:2b:5d:da:7a:06:74:21:
4a:21:54:c0:bd:ba:12:13:84:d2:2b:18:e6:51:03:
77:71:d1:7f:a9:62:95:91:d2:c9:ce:7c:6c:fd:cc:
2e:fa:4b:77:24:82:f8:68:e9:a9:6a:38:5e:0a:79:
b3:7c:47:47:1b:4a:ea:c7:ed:f8:7b:6e:aa:6d:74:
1a:21:e8:79:16:de:c5:cd:19:75:14:19:0b:98:74:
22:fb:b0:48:71:ee:cd:b3:5f:cb:27:eb:72:06:5b:
e3:37:a9:6b:81:7e:83:53:86:a2:ad:21:33:64:7d:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:03:3B:74:17:75:E5:A0:D1:D3:66:91:5A:C7:CC:F6:A1:37:0A:8F
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cd:8d:5d:ee:74:b7:74:11:55:3a:6f:be:6f:89:64:83:24:
42:79:10:c0:a9:ef:82:03:0d:de:8d:50:fa:97:07:76:fc:b4:
5d:04:62:bd:be:f5:35:72:6e:82:01:96:77:61:1a:95:c1:70:
cc:78:6b:5a:02:29:6e:1b:b0:ec:6f:77:c6:2a:dc:cc:68:b8:
ca:bd:e1:1d:63:43:ac:c3:d7:a9:7c:13:4c:79:90:94:55:e3:
ca:e3:fa:41:2d:40:29:5a:d7:d2:f0:f2:3c:be:39:af:b9:0c:
05:0d:4b:d3:d4:68:8a:28:cf:bc:63:d8:23:42:57:75:ff:41:
ef:c6:e2:ad:23:32:6d:7d:5a:60:c3:bc:22:cd:18:00:ef:66:
97:4a:b7:8c:e5:16:67:65:64:4f:24:85:65:54:79:e0:0a:f9:
36:94:ee:db:14:22:f9:94:ed:78:f6:d0:df:40:fc:7f:4f:39:
09:d6:9a:b7:17:9f:9e:7c:fa:35:58:35:0a:83:db:e1:23:b0:
d6:a7:72:73:5b:c0:56:90:c9:ca:4c:ab:4a:37:bc:91:e3:e8:
50:9c:f2:6a:5a:94:2c:88:5c:6a:d4:49:c1:8b:be:86:31:c4:
1d:d1:64:59:f3:dd:c0:1a:46:c4:cc:0d:74:19:97:3e:1c:de:
11:99:85:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:46:54 2026 by rpki-client