Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: nOIySgnRcXePVrpMr5JOICDSWnGMJPVZ5omUzDOzyYI=
Subject key identifier: 3E:9D:34:B5:85:15:99:35:B9:87:9C:7A:94:62:5D:8B:FF:F0:20:5C
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 019FA82B93FDD564D92E6F3982FBC2F2111B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0DDE
Signing time: Tue 28 Jul 2026 10:00:55 +0000
Manifest this update: Tue 28 Jul 2026 10:00:55 +0000
Manifest next update: Wed 29 Jul 2026 10:00:55 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: 2iHfrhkeNHK4T+WPagMF/nRvPjOuVAb4jc4yNZmEMCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:93:fd:d5:64:d9:2e:6f:39:82:fb:c2:f2:11:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Jul 28 10:00:55 2026 GMT
Not After : Jul 29 10:00:55 2026 GMT
Subject: CN=3e9d34b585159935b9879c7a94625d8bfff0205c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:5a:8e:f9:89:93:31:e9:20:fa:77:f2:37:
03:5e:56:a8:ec:d4:ff:86:91:2a:0d:55:12:73:eb:
d2:5b:ff:52:bf:8f:32:1f:35:c5:88:bd:8c:7c:d7:
33:7d:3b:e3:cc:ce:01:51:8d:d6:39:ee:88:79:f2:
b2:a3:45:20:57:58:c5:05:35:87:19:9f:44:02:00:
87:19:50:9e:30:d8:3a:81:e3:11:aa:ee:8d:9b:59:
8d:17:a5:72:37:f1:93:58:dc:8d:37:dd:f3:6a:63:
d1:f8:76:91:dc:e9:bf:1c:61:ec:10:1f:d6:d1:13:
7f:92:3c:3d:14:76:1a:2c:f9:19:7d:16:9c:85:8a:
da:a2:83:b1:8e:e4:6f:b5:97:62:00:c3:45:ea:24:
fd:0f:ff:70:19:f9:58:31:a1:96:62:e1:01:fd:11:
d2:c6:84:8b:19:46:25:a4:bb:9e:b2:79:b6:a3:86:
30:c8:c3:4b:36:97:83:3a:48:c2:51:3f:0b:fe:8c:
61:d6:53:5b:95:79:c5:51:f6:50:9f:35:97:b0:21:
3e:aa:3e:8f:2d:1d:e6:4f:f3:6f:96:77:1d:e2:0e:
d1:77:75:ed:c6:65:ba:be:c5:c2:4d:94:05:b2:cf:
6e:66:3e:08:6f:8b:8c:80:da:a9:f9:8e:4f:54:95:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9D:34:B5:85:15:99:35:B9:87:9C:7A:94:62:5D:8B:FF:F0:20:5C
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9b:fe:2b:1f:79:af:e5:db:6a:fc:61:ee:9c:39:37:3f:5c:
e9:d0:f0:64:68:22:bf:40:88:31:94:d3:79:c0:8e:50:3c:76:
cc:27:fa:18:a7:49:a1:77:e9:15:1e:f4:90:4e:7f:58:ba:4c:
1c:e9:06:46:f6:57:48:bb:6d:89:1c:7b:b2:5c:42:1a:be:0f:
40:f5:9a:6b:69:fb:d2:30:d1:57:d0:b6:87:c6:2f:6c:f3:92:
8b:e1:86:1f:ee:e3:d3:ec:bf:7f:1a:a0:f8:0c:ec:5f:47:ad:
55:3e:6b:3e:29:74:7a:b0:3f:63:29:d7:eb:f9:1d:05:95:2e:
33:de:66:f3:48:c6:18:f6:4a:c9:12:5c:f5:cc:dc:be:1b:c1:
86:a3:6e:63:06:c5:3e:5e:09:ed:50:0b:2b:5b:c8:b8:e7:00:
ed:70:f1:ea:3f:88:a3:db:aa:2e:c9:73:fa:92:1f:dc:66:ec:
44:cc:e6:ba:d0:ef:36:db:2b:96:4b:28:47:a6:5e:2b:aa:03:
ff:01:f6:51:c0:56:9f:70:1c:72:d7:84:b2:d7:f2:6a:fe:4a:
29:dc:37:e2:bf:59:f0:40:67:0f:a3:2d:34:4c:b6:f7:22:7a:
fe:d7:c2:f1:8b:52:fc:b2:99:6e:a2:01:af:2b:db:f7:fa:98:
f5:9f:c9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:36 2026 by rpki-client