Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: aJbdYaz2wLQarqb4fKalb2PGvX6aK6oCDYyAqaTKQTo=
Subject key identifier: 37:31:65:93:74:8F:43:5D:ED:A2:14:CF:E9:8C:61:28:A4:FD:B4:8D
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 01A0ED4132C6EE6E681B0D6366A83A78BB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 06CB
Signing time: Tue 29 Sep 2026 13:01:07 +0000
Manifest this update: Tue 29 Sep 2026 13:01:07 +0000
Manifest next update: Wed 30 Sep 2026 13:01:07 +0000
Files and hashes: 1: A2yTP0lhhFqNva3nkV1odyS6nwE.roa (hash: hsckG++ZXCzFReA5qOo98hpc0d00fMoMGiw+xttmqVs=)
2: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: mpzIMDY96FIg3bIthR+FdZwbJWVebPVAzHjiNBTogAc=)
3: uBcATutWZCzBK8D7bBIKL9bxPlQ.roa (hash: JIPy3fI3722I5dmkOB2XD2F/6xuJic82XKrmU7yYHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:32:c6:ee:6e:68:1b:0d:63:66:a8:3a:78:bb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Sep 29 13:01:07 2026 GMT
Not After : Sep 30 13:01:07 2026 GMT
Subject: CN=37316593748f435deda214cfe98c6128a4fdb48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:47:73:ac:a6:ef:ee:47:34:27:74:72:5e:
21:cd:c4:42:de:c3:13:9b:9c:10:81:61:2a:b6:09:
c7:7c:7d:0c:dc:ed:21:39:47:af:2b:ca:94:ca:db:
52:ce:e7:5d:8b:ad:46:bd:7f:1e:4a:dd:86:62:7d:
28:74:47:1d:44:2a:05:bf:dc:da:79:74:59:ab:6f:
40:02:d8:12:2d:0e:9d:69:f4:62:8d:d6:94:2a:fd:
36:2d:9b:8e:4d:87:62:77:69:fd:93:0b:5d:c5:9a:
18:b3:5e:1f:3f:c6:68:7a:22:f5:f6:11:a2:07:d7:
ad:c9:3f:43:09:2e:f2:d1:1c:e7:c1:98:9f:1f:ad:
a9:1c:41:e1:ae:98:54:9b:ec:e9:a0:3b:6d:59:6f:
26:27:2d:09:f6:7b:a1:79:88:a0:0e:e8:a6:a5:ce:
08:a1:de:9e:b7:df:cf:11:b4:da:d1:5f:b3:c7:44:
de:55:4e:04:f3:6c:a2:21:d8:0d:31:dc:3c:3d:3c:
77:e7:55:2a:35:90:2f:82:0e:ac:fb:49:e3:e4:11:
db:a7:69:0d:0d:ac:6e:6e:c2:eb:dc:cc:b7:2f:c6:
21:02:62:45:54:9b:ed:e8:1d:59:f7:7a:b0:d6:b9:
6a:d3:ec:55:5f:63:f8:19:45:5d:74:1f:e1:1f:54:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:65:93:74:8F:43:5D:ED:A2:14:CF:E9:8C:61:28:A4:FD:B4:8D
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:72:dc:d6:76:ae:f7:87:56:d2:31:31:e7:d4:78:cb:81:5f:
9e:2e:7b:37:3a:99:17:63:c6:04:b4:10:7a:ef:bd:ea:fe:95:
d0:9c:c7:b5:82:64:df:e1:43:e0:30:b7:b5:9b:f9:8e:9c:81:
d5:4a:be:00:cd:e0:09:7e:02:89:d9:8f:60:0c:37:98:97:15:
2b:56:84:25:37:f2:30:a0:97:fa:e6:4b:61:57:47:5b:fb:2f:
71:75:ff:12:90:ff:dd:0f:e2:72:e6:6d:b2:35:ca:94:78:5f:
52:2d:fa:8a:81:4c:ce:eb:03:6f:a8:31:2a:45:4c:c5:ec:3d:
f7:b1:da:db:2a:bc:8f:9e:7c:b5:8a:77:26:ed:6d:47:2d:fd:
ad:54:3e:3c:49:53:75:88:75:c0:3a:6b:6b:97:66:71:13:45:
41:af:d9:30:6f:a1:30:df:f5:14:33:64:62:b8:98:c8:ad:ea:
32:6b:58:5d:bf:2c:9c:db:a9:6c:f5:28:49:20:d2:78:86:5d:
b8:ec:3f:b6:35:75:73:60:f3:97:86:03:21:55:2d:a9:81:f1:
21:d4:c8:5e:3a:f6:43:11:45:77:d8:61:a6:7e:d0:6e:7b:70:
f6:4d:40:c3:67:7b:16:fe:c9:25:8f:dc:b7:1d:f0:5e:e4:13:
28:1a:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:00:54 2026 by rpki-client