Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: 8BPIKYF6SQ54Q/4Ui1hAbOYem+DzGTyOvihL5tNEYwQ=
Subject key identifier: 14:BE:09:67:9F:27:C1:9E:FF:AF:9D:D6:AF:40:83:75:C5:4C:89:18
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 019D98F521C2F47F7A33F9FEC223AF8FA8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0CCD
Signing time: Fri 17 Apr 2026 01:01:34 +0000
Manifest this update: Fri 17 Apr 2026 01:01:34 +0000
Manifest next update: Sat 18 Apr 2026 01:01:34 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: gQen19Iw7NciovizTaio4hn3rMI/OHIRUUc1Rmob7ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:21:c2:f4:7f:7a:33:f9:fe:c2:23:af:8f:a8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Apr 17 01:01:34 2026 GMT
Not After : Apr 18 01:01:34 2026 GMT
Subject: CN=14be09679f27c19effaf9dd6af408375c54c8918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:25:de:ab:a7:f7:96:72:92:1c:a3:dc:e2:
08:0a:a9:db:00:f4:2b:66:97:0e:b7:c3:72:02:d4:
78:2f:90:4f:2a:ce:58:cd:a7:f6:d1:5e:9c:7f:0b:
4f:b1:c5:6e:8e:e7:40:e0:b6:62:34:93:35:09:8a:
f9:21:ec:f7:b9:4b:0c:be:6f:45:cd:4b:a6:b7:fb:
dd:3c:3e:13:41:90:c2:72:c5:5f:59:bb:b7:9b:70:
5e:7a:22:73:d0:81:51:17:04:c2:3a:46:59:01:4c:
67:f7:63:94:66:e3:53:a5:95:0c:8d:53:32:c4:b8:
23:9a:6b:3f:c0:b4:51:61:14:71:a3:95:bf:df:d2:
24:9c:89:91:5e:28:44:86:ce:1d:19:6c:9e:d0:cc:
07:c3:8a:2a:83:54:2a:fe:54:30:8d:40:04:ab:b1:
c4:71:26:0e:f2:a1:e5:11:79:18:c8:bb:22:42:b6:
52:7a:bc:8e:fc:6f:60:86:90:48:e0:c7:59:28:dd:
b8:74:63:8f:0e:8d:fa:81:d9:e5:4e:1f:5f:c0:4e:
35:ad:00:41:d7:40:32:97:b7:93:f5:6a:ce:ca:b8:
4a:da:5e:ea:b9:95:f7:b3:f0:c1:7a:5e:63:be:8d:
00:de:75:d2:72:2a:48:d9:42:64:d1:1c:bf:3e:d5:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BE:09:67:9F:27:C1:9E:FF:AF:9D:D6:AF:40:83:75:C5:4C:89:18
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:c4:17:0f:d2:91:42:5f:3b:8d:25:bd:46:03:12:6c:ba:
cb:9d:29:13:dc:50:a7:33:5a:7f:c6:06:03:89:5a:68:74:28:
31:e6:21:08:88:42:08:fe:bf:e3:ba:08:28:88:3d:b3:de:7f:
61:c6:68:07:52:7a:f6:68:30:d6:a5:d4:40:9d:44:20:3a:6a:
37:dd:03:1b:8f:06:e7:1d:26:38:a2:66:11:5c:4e:cc:33:6b:
7a:dd:1d:ed:9d:aa:a9:64:4e:b1:f2:b3:ba:df:f4:e4:70:36:
8a:ee:6f:47:e4:c2:cd:27:3b:4e:7b:7d:06:82:d8:71:11:77:
5c:02:a8:c7:27:43:e3:e8:3c:89:39:d6:d1:0d:63:4a:b3:ca:
54:70:0b:ba:7c:0f:6e:49:89:80:17:f0:b0:b7:66:81:c4:30:
76:68:25:9a:c6:e1:9a:6a:04:82:d2:68:c9:d6:cb:e6:a2:f2:
26:ad:de:6d:bc:95:34:cc:0e:db:62:8b:ab:35:a2:58:2d:67:
16:e1:60:07:61:3e:a5:bd:9b:ab:b8:9d:82:99:bc:6c:01:44:
a6:12:24:d2:a9:33:44:76:37:a9:7a:22:04:55:3e:4e:5b:6a:
55:06:eb:6c:e2:e9:96:46:28:28:1b:97:44:bc:b7:7f:45:e1:
40:33:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:14 2026 by rpki-client