Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: +Q/4ocg09dG7QhdzlK8/Xjs7dxF1G/d4Xz8Mfa1reSE=
Subject key identifier: 96:A4:42:0A:81:A0:13:6A:E9:DE:A7:C5:CB:38:6C:2D:FE:01:34:28
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 019EBE7FA1AEC5B6C385FEE2E501A0C3DE23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0D65
Signing time: Sat 13 Jun 2026 01:01:35 +0000
Manifest this update: Sat 13 Jun 2026 01:01:35 +0000
Manifest next update: Sun 14 Jun 2026 01:01:35 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: 6QwJCMPzpo7Fs34XhJrkFxzvkllF8Eg828goWISkdqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:a1:ae:c5:b6:c3:85:fe:e2:e5:01:a0:c3:de:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Jun 13 01:01:35 2026 GMT
Not After : Jun 14 01:01:35 2026 GMT
Subject: CN=96a4420a81a0136ae9dea7c5cb386c2dfe013428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:19:2b:89:7c:95:d1:19:d5:15:69:b3:83:
75:34:bf:fa:f3:61:ef:5f:76:6b:a5:ff:5a:4c:3f:
c3:13:12:cf:e7:63:26:49:62:b7:34:39:d8:ef:b7:
c8:5e:38:bd:2d:fd:db:9e:22:7b:13:85:76:a7:69:
a9:0b:f7:f3:a3:c3:01:47:04:f2:30:e8:a9:12:6e:
90:8e:ba:33:e6:42:dc:7d:6d:fa:d2:8a:9a:4e:56:
93:e0:db:f3:f1:b7:b1:2c:a5:ee:5a:2b:cf:7d:0c:
10:9a:eb:a6:72:5d:51:31:f0:19:b8:44:08:0d:7d:
79:6e:1b:79:d2:73:e5:48:f0:dc:48:1e:69:bc:9f:
3e:92:e0:1d:56:ea:ae:10:44:e4:a1:8c:b3:23:0a:
32:19:39:d0:78:f1:11:a9:12:2c:eb:d2:a3:6e:76:
11:18:35:e3:60:d4:a8:e7:9c:6c:a5:32:f7:e1:b6:
e4:cf:d0:bd:ed:ac:3e:eb:b7:3c:89:f2:f5:70:4a:
84:aa:fb:a6:b1:55:3b:4e:1c:b1:93:86:3c:fd:e9:
d6:e5:8b:d6:00:0f:7a:ab:b4:64:6d:b3:2f:d9:dd:
7a:da:a5:fb:04:01:3e:9b:3c:86:8f:ae:01:76:49:
ec:0b:a4:63:3c:87:b4:a5:b5:1d:39:20:15:8f:8e:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A4:42:0A:81:A0:13:6A:E9:DE:A7:C5:CB:38:6C:2D:FE:01:34:28
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:41:d3:2d:46:12:6e:34:eb:57:60:99:72:19:c2:21:e1:34:
ff:d4:4e:85:c0:7d:49:75:7c:b9:65:76:b8:75:79:43:f0:b3:
19:b0:fa:9a:ca:a0:8c:83:ce:0e:75:65:07:26:30:6f:7b:58:
7a:2d:98:ec:8a:04:e5:e8:ea:46:31:59:37:0b:30:a1:d7:ad:
2e:31:60:ff:ea:e7:d4:74:c7:3e:89:31:e5:e3:b6:59:6e:6b:
63:ed:4c:1c:a4:43:f3:7e:db:c7:ed:72:88:65:57:a6:50:37:
05:c5:99:e8:42:22:95:7e:d1:08:cb:93:f7:5c:58:b8:93:37:
58:6c:c9:a0:f8:d5:43:ea:47:83:ab:79:ab:fd:80:c7:b9:3c:
b1:ad:68:2e:e4:b5:c6:a6:52:5b:57:bc:81:00:35:b9:da:c7:
c8:ae:b1:5b:81:e9:83:e8:d5:41:0c:3c:b1:2c:0d:68:01:05:
d1:a2:9a:bd:c0:69:ba:1c:0e:76:05:30:f4:f4:39:44:da:08:
31:5f:a2:e7:50:c1:c1:f9:76:0c:34:15:09:59:70:61:d4:d6:
21:96:74:10:27:18:1b:41:3f:ab:c2:10:e3:bc:b0:ef:90:80:
48:fc:2d:e2:eb:4c:bc:71:9a:05:d3:e7:6b:f4:08:97:e4:8e:
16:4a:4b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:47 2026 by rpki-client