Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File: Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier: 42Dml91PsdKpj7ICY5z/JX6M1XRyRm6gZCVWudNQU6M=
Subject key identifier: 67:15:74:94:E7:A2:60:8D:03:50:6F:B0:67:10:DB:AA:72:A3:24:E5
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial: 019CABD956B02347E522DB842622D5AD99CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number: 08C0
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: JoUKfEu67T1yJyCyuLRPbJCk_UQ.roa (hash: /JFcfYSQ61PUPBzY8BJBcJYoayzrujrEpWXJsY4TO/o=)
2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: YZpM1TgN3n0LdMaiA5mRY+8jQSuKn5fB/heuxY2x9yY=)
3: fAdGKU3RCPGTAL7Z9M94nbsFYr0.roa (hash: Cz41cqiHLsC/77+bonU9HHMAIveN7Vt8tWuObbUVYSw=)
4: uyIjwniMfa9updg5K14M9RIPv9I.roa (hash: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:56:b0:23:47:e5:22:db:84:26:22:d5:ad:99:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=67157494e7a2608d03506fb06710dbaa72a324e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:2e:b1:d2:e5:ba:90:fe:5a:a9:0c:be:68:
20:c5:3d:cb:27:94:6d:a3:19:70:c0:24:ab:35:aa:
e6:d1:46:8e:84:c0:9e:43:1c:42:6b:a3:f7:cb:e4:
e3:d8:1a:04:9f:4c:7f:c4:1b:8e:be:f9:d0:99:32:
d9:17:3c:5f:ec:42:8b:bd:15:90:4c:4d:ac:4b:a6:
c0:a4:a8:b4:6f:37:79:b0:01:0a:9b:f0:35:87:69:
bf:87:df:5a:a9:e7:cc:56:7e:fc:45:b3:b2:15:9c:
cd:b1:53:3c:0a:77:f5:5b:8b:90:86:06:33:67:5c:
bc:19:a8:64:9e:9f:da:11:f3:47:ed:41:3a:2a:28:
1e:5a:2e:07:63:95:36:76:3b:e3:b3:88:63:a8:9e:
50:72:10:e3:b8:53:d5:da:fd:b8:34:e3:46:a2:03:
77:5c:da:99:d5:db:7a:1e:ac:ba:4b:42:cd:d2:6f:
4e:cc:63:7c:fc:61:0f:fa:bb:3f:4e:45:93:be:8e:
b9:2e:d8:11:cd:b2:cd:08:21:56:d4:61:8e:03:71:
a7:41:f4:6b:63:0e:89:a6:c5:25:cb:b9:47:02:6c:
29:7b:1b:31:7f:7a:a1:4d:21:69:e4:33:80:a2:8c:
ff:1a:5b:d5:bb:c6:c4:53:0c:24:44:5d:29:b4:7d:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:74:94:E7:A2:60:8D:03:50:6F:B0:67:10:DB:AA:72:A3:24:E5
X509v3 Authority Key Identifier:
keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:97:21:0f:80:db:29:1b:e5:11:80:c2:1b:48:36:ff:9a:45:
a0:58:6c:99:07:a2:6e:c1:b7:5e:47:d8:fa:8b:56:49:7d:7c:
47:e4:9c:0d:4a:60:38:e6:ff:0a:6a:79:44:d7:5d:0c:59:e4:
1b:b2:68:0c:82:d9:33:8c:de:ef:56:16:ff:11:11:c4:50:3c:
6f:56:b8:4d:25:b5:14:59:2d:30:0a:f4:d1:4d:13:10:34:90:
d7:b3:9e:b0:28:2c:90:a0:ad:df:72:06:a2:02:41:97:ee:6d:
04:50:98:35:ba:7c:74:8b:29:24:e0:1d:e5:7f:2c:42:84:6a:
89:3f:f6:68:3d:85:6d:60:2d:8e:51:6b:ec:a1:92:3e:18:e6:
91:a5:a5:79:e4:02:ba:9c:af:b6:58:63:86:67:90:dc:76:42:
59:5c:ea:bc:a2:c8:de:3d:ed:58:74:3d:06:94:1f:dc:48:b9:
d9:d2:57:e6:79:f3:50:23:dd:22:e6:2d:eb:e1:f0:1e:a9:ae:
0e:6c:75:75:dd:25:f1:47:09:6e:e5:c3:bf:36:59:e5:d1:3f:
41:6d:23:f6:90:6d:9c:ea:86:33:c2:d5:75:21:0f:78:bb:e5:
58:49:05:60:1c:89:5a:eb:f0:72:07:c4:0e:28:31:d6:90:7b:
7d:93:08:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:01 2026 by rpki-client