Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: NQORgDin0BaEeeTjw5dQkvq4Ch4w0UzKULAAGZH5Afg=
Subject key identifier: 4A:D7:09:EA:FC:6A:46:64:71:68:E2:B1:67:94:93:EF:99:A7:6D:A2
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 019FACACADD394059DC1B1215E5E54912AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 0625
Signing time: Wed 29 Jul 2026 07:00:25 +0000
Manifest this update: Wed 29 Jul 2026 07:00:25 +0000
Manifest next update: Thu 30 Jul 2026 07:00:25 +0000
Files and hashes: 1: A2yTP0lhhFqNva3nkV1odyS6nwE.roa (hash: hsckG++ZXCzFReA5qOo98hpc0d00fMoMGiw+xttmqVs=)
2: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: BGTJkUQV4TP/RKQdBQJa/WFUXM+3i7Uqmn5kkqOZ3MU=)
3: uBcATutWZCzBK8D7bBIKL9bxPlQ.roa (hash: JIPy3fI3722I5dmkOB2XD2F/6xuJic82XKrmU7yYHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:ad:d3:94:05:9d:c1:b1:21:5e:5e:54:91:2a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Jul 29 07:00:25 2026 GMT
Not After : Jul 30 07:00:25 2026 GMT
Subject: CN=4ad709eafc6a46647168e2b1679493ef99a76da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2f:eb:28:2a:65:f6:64:2d:80:61:bb:9f:78:
9f:b4:74:f4:6a:ff:7f:53:64:fe:02:a2:35:23:6d:
e0:68:82:8a:96:06:00:fa:51:1b:25:11:38:ff:08:
56:f8:ff:7d:ce:57:81:4f:37:fd:31:9c:29:6b:8a:
63:1d:ae:7d:c5:19:a3:93:c5:1e:8f:cc:b8:65:f2:
c2:aa:f4:dd:03:7b:9b:70:41:b0:18:bc:ec:09:25:
e6:1b:e3:bd:6b:96:ed:52:80:b3:9b:b2:94:32:46:
0a:12:5c:51:5a:b3:7b:fb:13:f9:fc:a2:3b:82:ff:
bb:12:ad:14:06:a3:82:7b:31:b7:c1:c4:94:76:99:
07:8c:c7:88:8b:dc:bc:8d:c2:e7:e6:89:2b:b4:2b:
60:92:26:2d:75:5a:af:1e:90:fb:6e:a4:71:e4:3f:
65:54:37:f5:40:28:ed:17:9f:ad:c2:76:5b:d5:1d:
53:f1:05:4c:e0:22:01:09:2c:87:3b:f5:9d:53:3d:
cb:f5:f8:72:3c:3b:50:01:6f:33:54:c6:6b:07:e9:
5c:ed:0d:ff:db:e8:7f:26:a7:2a:3d:1b:33:e7:3c:
b2:0c:8c:f2:e7:42:4d:39:84:eb:72:22:11:9e:28:
c3:72:47:4b:52:34:28:55:34:30:42:de:5a:43:d9:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D7:09:EA:FC:6A:46:64:71:68:E2:B1:67:94:93:EF:99:A7:6D:A2
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:da:97:ed:af:17:d9:01:37:e3:aa:b0:99:02:ef:55:cf:2a:
04:4d:30:c6:c1:a5:2e:00:d5:a8:92:32:e4:d6:b9:48:43:9b:
5f:f1:bd:8d:53:7d:64:ae:03:39:c5:3b:0b:5d:3b:dd:45:9b:
60:6a:b1:4a:f7:91:86:af:f2:6e:0b:c9:3f:f4:1c:7d:2e:3a:
37:94:c6:cb:7b:85:d1:6c:ca:af:26:28:21:e8:21:36:48:a5:
b0:1a:56:c2:c2:e7:8a:8b:28:25:91:ae:36:60:1e:1e:c0:56:
7a:93:b1:6e:f2:bb:46:1e:a9:37:33:ef:77:88:d3:f9:35:0f:
0b:4b:da:92:b6:1c:12:5c:39:d4:97:9f:97:c9:c8:04:f5:fa:
54:d6:01:9e:bb:4f:4e:1a:1f:8a:8c:b0:92:52:c6:b7:5e:a9:
14:74:04:81:34:2c:34:1d:f6:49:8f:0d:80:0b:b0:bb:06:9a:
eb:ac:89:0b:f6:42:dd:6e:22:c0:79:7e:13:3c:2d:06:cc:72:
65:11:5d:d2:d9:28:4a:1c:95:a3:0a:a2:99:74:3a:82:05:12:
f8:a3:1e:bc:ad:72:31:01:46:65:66:17:ac:0c:73:b0:77:96:
f9:bc:ef:a0:4f:31:6a:c7:79:6c:bb:d1:1d:7c:6d:f8:e5:ec:
88:d8:5c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:14 2026 by rpki-client