Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: Afy2/Ymoc8BvHI02W3z/KvHuiw5OVZ1OdGlnyKBkxVM=
Subject key identifier: 42:55:70:15:C2:BF:0D:C0:1A:CA:EE:73:91:05:DD:FA:89:B0:4F:AB
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 01A0C21F54ECCAD1822FD0E03936214B74BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0E70
Signing time: Mon 21 Sep 2026 04:00:28 +0000
Manifest this update: Mon 21 Sep 2026 04:00:28 +0000
Manifest next update: Tue 22 Sep 2026 04:00:28 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: STqwBwzGwJv1bNvj4hGi7H0Fx72kggFqFsHETwMvhaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:54:ec:ca:d1:82:2f:d0:e0:39:36:21:4b:74:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Sep 21 04:00:28 2026 GMT
Not After : Sep 22 04:00:28 2026 GMT
Subject: CN=42557015c2bf0dc01acaee739105ddfa89b04fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:c4:83:f2:43:d2:42:9c:a6:65:f1:9c:ab:
4b:fb:29:78:6d:2b:77:e1:cb:61:90:74:d8:ec:24:
ef:ce:43:8d:24:c3:c1:dd:d3:9c:a5:f3:94:70:13:
30:21:7a:c4:c4:60:28:18:44:12:64:ee:2a:58:dc:
d5:d3:68:f5:16:95:25:f3:f2:9e:29:3f:d9:48:2d:
60:02:d0:50:15:08:2f:7e:4e:3b:6c:04:b0:82:13:
6b:ec:cb:f7:80:39:0d:e8:cd:54:ff:8b:b8:b7:2c:
3a:75:5c:2e:03:57:e0:5b:42:b9:de:11:d5:93:cb:
00:ec:57:2b:61:9a:01:62:51:6e:aa:c8:45:ad:ce:
43:89:17:73:62:49:c6:ab:7d:8b:21:cf:06:6e:51:
f8:8b:3a:8e:c7:da:95:22:59:3f:cd:78:72:04:ee:
18:b4:4f:e2:b1:ff:10:05:28:2f:33:5c:39:26:07:
e6:40:56:95:bf:37:53:53:6e:42:f2:b4:87:94:b0:
21:f5:44:ca:90:9b:66:02:bb:f5:db:d3:3b:bd:df:
53:db:aa:11:08:fb:58:10:22:8b:e1:66:e7:25:85:
7f:7d:ae:f2:76:b2:8f:5f:7b:c9:ad:97:b5:40:11:
46:01:58:d6:02:a5:2c:17:a8:b3:b4:27:07:5e:01:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:70:15:C2:BF:0D:C0:1A:CA:EE:73:91:05:DD:FA:89:B0:4F:AB
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:06:94:31:6d:03:7b:fa:c8:bd:a3:ad:27:07:ca:54:1d:b5:
76:f6:c0:8a:15:bb:a3:45:b9:be:6f:2c:80:ee:06:7c:82:ed:
61:f9:92:01:c4:a6:52:91:8f:0c:99:0d:93:7a:f1:d0:f2:60:
49:50:54:97:93:b7:f4:70:23:e5:4e:7a:1c:39:a4:ea:64:fe:
61:5c:d9:e3:38:31:7b:c3:8d:2c:be:46:f2:10:c0:10:ce:77:
8e:aa:9b:dd:09:9f:eb:ab:01:d9:38:9a:df:4b:11:2a:3c:6e:
74:3f:8f:a5:ff:a5:a7:8a:f2:b5:55:be:8f:32:24:57:b2:4e:
6f:6d:f2:00:07:6e:2d:35:ed:18:d8:96:51:7d:9d:ff:f0:89:
ba:c9:24:fc:fb:2f:a6:0f:1b:b4:84:4c:93:fa:2d:a6:6c:b0:
b0:1e:c9:16:f0:c6:e5:83:fb:4c:f1:ad:9f:03:7a:11:fd:69:
20:96:1c:f2:be:97:59:0a:1a:e2:96:24:2c:0c:50:92:01:aa:
65:1f:13:b4:26:fb:fc:ef:ec:e7:b5:a4:d1:d1:8e:4d:02:a0:
74:31:50:fa:ac:5b:a3:e6:f3:f2:c9:69:91:6a:45:33:e2:81:
5d:94:80:ad:28:80:94:11:ab:13:7e:52:9e:f3:ed:02:6a:32:
4a:10:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:41:49 2026 by rpki-client