Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: 342s0zgFtxR3Szwt4uk22InlpDY/ED7R385vqQthpdA=
Subject key identifier: 43:7F:AA:C4:8F:7F:DC:6F:0D:FF:D4:AE:F6:53:5D:5B:9E:D1:E9:92
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 019CABD9FE7E1277348DEC8745B5FF88AD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 0496
Signing time: Mon 02 Mar 2026 00:01:56 +0000
Manifest this update: Mon 02 Mar 2026 00:01:56 +0000
Manifest next update: Tue 03 Mar 2026 00:01:56 +0000
Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: RKHQQ8Lxu/iqiQ9vhc6bcgQtFX3y7p+MzgSKePeoczE=)
2: QTaYixkWug0WkImFD5gnGK_ASr4.roa (hash: w7qx/N8YQKmCAl0otduhK8XuUZj0HapOBC1Dku0mdTQ=)
3: xo3gR3-KM6S_Zel79WurR5Cgqhw.roa (hash: Dhbvi9g1SOEv1jJ9w629oy4OgTHWzucQiL6zYBKcTBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fe:7e:12:77:34:8d:ec:87:45:b5:ff:88:ad:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Mar 2 00:01:56 2026 GMT
Not After : Mar 3 00:01:56 2026 GMT
Subject: CN=437faac48f7fdc6f0dffd4aef6535d5b9ed1e992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:c9:56:7d:b6:3e:24:03:b3:07:bc:d8:54:
eb:1b:ff:c3:9e:12:8f:8c:60:ec:f8:50:fd:16:9d:
14:d5:da:fd:98:6c:14:89:63:ad:ff:5a:88:18:62:
ad:3f:07:c9:be:60:d7:10:69:97:ea:19:70:79:2a:
b1:58:87:7e:aa:8e:fe:fa:dd:99:d7:e2:ac:30:ba:
a1:15:27:d3:a8:7c:a7:92:02:c7:9e:25:12:a2:cf:
bd:1e:3b:56:b3:36:df:8b:84:a1:e3:db:97:49:c9:
0b:bb:e4:44:56:91:0e:33:07:3a:23:f1:b7:9e:ce:
fa:66:59:49:ee:0c:a7:53:21:5f:65:0a:c3:e3:47:
bc:a9:7d:2b:9f:63:03:7d:ae:0f:21:42:89:48:48:
23:fa:37:38:90:37:7b:60:6c:97:ee:50:3b:b1:d2:
de:bc:a2:b3:25:54:90:e4:c1:8a:02:3c:b7:ec:62:
16:15:41:39:94:27:d7:9c:4e:cb:93:a2:48:0f:83:
d3:de:6d:44:81:b6:29:f2:bd:16:ac:10:ce:a8:15:
49:9a:99:0a:02:57:46:25:ee:44:3d:92:98:98:0f:
b9:00:8d:16:a0:07:46:0b:fb:3a:23:ba:77:be:f9:
ed:e7:5f:24:ec:d4:21:e1:92:ea:c6:b0:91:9b:97:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:AA:C4:8F:7F:DC:6F:0D:FF:D4:AE:F6:53:5D:5B:9E:D1:E9:92
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:79:fc:0b:26:c1:29:22:1c:8d:c8:f8:68:dc:68:b8:a8:f6:
a3:eb:2d:8d:8f:b4:4a:ea:07:e5:f5:4f:06:45:25:9a:cb:66:
b0:64:cf:cc:8d:ab:9e:ea:a7:f4:8a:b3:81:58:ca:84:6a:2c:
7c:7b:31:5e:56:93:07:74:5b:e8:98:69:8d:e9:09:92:35:f7:
75:b9:70:f5:11:78:74:91:7c:1c:f8:fa:56:d9:01:91:07:48:
05:42:38:35:f7:db:19:ed:a5:a5:ca:3a:2c:ae:e9:22:a9:18:
1f:08:c3:6a:83:0e:93:85:8b:e4:e4:9a:09:a0:1c:da:17:20:
4d:8a:c3:dd:34:4d:e7:6d:dc:1b:c4:8b:ec:32:14:26:97:6f:
39:70:64:f7:8a:d5:66:88:6a:c6:f3:f1:13:34:af:10:49:3d:
66:31:3e:16:4e:88:65:0a:28:cb:12:21:5c:71:d6:99:49:0f:
84:63:76:47:4c:d7:d5:64:de:81:1d:9a:f9:38:5e:c5:30:1f:
00:97:aa:d4:81:37:b5:f6:78:a1:1a:24:b8:a1:dc:52:3a:03:
c9:dc:b9:a7:18:b6:eb:1c:ee:81:af:66:eb:93:a1:57:f5:b8:
fe:71:4f:e6:f1:3b:bd:ae:8b:a9:4c:c2:64:f0:b9:09:dc:12:
a4:73:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:12 2026 by rpki-client