Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: mT713MJ5cqYXQmkHbnn8DI50cAzkWS2/6Vl2Rf2Rnvk=
Subject key identifier: C8:BC:8F:28:B8:86:BD:B5:2A:0D:28:DC:2B:C5:84:84:F6:47:2D:AF
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 019CAD59BD54840FF403954E15E9AD4BFE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0C53
Signing time: Mon 02 Mar 2026 07:01:05 +0000
Manifest this update: Mon 02 Mar 2026 07:01:05 +0000
Manifest next update: Tue 03 Mar 2026 07:01:05 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: HKjQuV5NJlpArNTbDjj7Dsv38jEDTCTZ+oAvXLk0w6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:bd:54:84:0f:f4:03:95:4e:15:e9:ad:4b:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Mar 2 07:01:05 2026 GMT
Not After : Mar 3 07:01:05 2026 GMT
Subject: CN=c8bc8f28b886bdb52a0d28dc2bc58484f6472daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:4c:82:71:8f:6c:85:54:b1:18:42:57:dd:
68:37:91:fb:c9:8a:7b:38:6d:5a:a1:3a:90:0f:42:
0c:c9:ac:4c:58:c0:e7:cb:a2:cf:b3:df:be:38:3a:
32:af:4e:8b:ac:23:6f:5a:a1:f4:5a:70:36:dc:5e:
ab:19:86:f9:2e:66:d0:bc:f8:03:55:64:19:cf:de:
c7:5f:88:47:c5:b5:f4:52:70:a2:c3:00:ad:8c:7a:
08:a9:74:e3:2e:3a:00:1d:cb:21:e4:02:f5:43:a0:
ba:58:d1:3e:25:55:12:04:1a:19:61:a2:1e:14:cf:
13:d2:f8:91:7b:75:92:d3:71:94:48:cb:a9:5f:21:
b7:2f:99:9d:fa:3f:1c:7d:d2:e2:4d:c1:85:00:df:
78:ee:34:46:7a:f1:fc:1b:ef:e6:3a:79:f3:c4:8f:
01:74:24:6e:eb:a6:15:b6:dd:0f:9a:87:2f:a2:51:
71:ee:62:9d:a2:b1:f8:c9:dc:aa:ef:dc:bb:03:7f:
71:d4:2b:94:cf:6f:46:55:5a:d7:0f:2e:e2:c5:6c:
d7:47:6e:95:45:d0:fa:10:cf:1c:09:e5:cc:6c:78:
f0:a0:8a:44:f6:3b:7f:96:8c:de:bd:28:2a:f1:64:
e4:26:eb:87:4c:98:a1:73:ee:6d:5e:5a:06:32:13:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BC:8F:28:B8:86:BD:B5:2A:0D:28:DC:2B:C5:84:84:F6:47:2D:AF
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:59:47:e1:e4:85:5a:62:d1:21:21:54:f5:8f:cc:69:aa:50:
b2:5f:3d:ca:56:0d:1d:f6:ae:7c:2a:d4:7c:88:74:a3:5f:c1:
08:6f:de:a5:0a:5b:c9:1b:d2:32:eb:54:8b:06:08:43:f6:cf:
30:b8:df:ad:38:e6:43:66:91:b6:6e:0f:2a:c7:e1:60:52:9c:
b4:70:5e:3d:8f:ae:86:75:97:bf:8b:14:42:89:bf:5f:26:5d:
52:09:3c:29:61:d3:3d:1b:d9:d5:1f:6d:c6:bb:09:97:a3:5d:
2a:1b:b6:fd:52:63:41:d5:27:fb:8e:12:fb:4c:60:73:f0:cd:
3a:be:91:a1:54:dd:7b:bd:ef:f9:81:9b:f8:2f:0d:db:ff:66:
be:81:b7:2f:79:2b:46:63:43:d0:14:bd:92:f1:8a:49:84:cb:
e3:5f:ec:76:41:71:a0:93:7a:78:3a:c0:ba:98:75:69:8d:f6:
3f:61:07:a3:c5:9c:fc:99:f1:ff:8b:f0:40:70:52:f7:b1:5d:
61:1b:a4:6a:27:6a:e6:92:7d:90:cf:e3:92:80:4b:d4:a3:cd:
60:a4:ab:bb:9d:f6:99:cd:c6:5b:5d:97:e1:5e:3b:e6:96:0b:
7d:b9:4f:a9:e6:69:db:e0:79:c3:e2:60:1b:b5:08:94:4d:14:
a7:5b:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:50 2026 by rpki-client