Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: AMz7XpIbsHlnXnDIO+aqQ96FzdQ/0FKIc/4KvfEuKjY=
Subject key identifier: 61:7D:FB:50:8C:14:01:61:62:33:8F:3D:BE:2A:DE:94:5A:DF:84:51
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 019D99621AE3E93BB7AFBF1872DFA4CED976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 0511
Signing time: Fri 17 Apr 2026 03:00:36 +0000
Manifest this update: Fri 17 Apr 2026 03:00:36 +0000
Manifest next update: Sat 18 Apr 2026 03:00:36 +0000
Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: 8KpJOPTbw/CHjNTRRa5Y25g83++1V6ClrT2HPaqVFXk=)
2: QTaYixkWug0WkImFD5gnGK_ASr4.roa (hash: w7qx/N8YQKmCAl0otduhK8XuUZj0HapOBC1Dku0mdTQ=)
3: xo3gR3-KM6S_Zel79WurR5Cgqhw.roa (hash: Dhbvi9g1SOEv1jJ9w629oy4OgTHWzucQiL6zYBKcTBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1a:e3:e9:3b:b7:af:bf:18:72:df:a4:ce:d9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Apr 17 03:00:36 2026 GMT
Not After : Apr 18 03:00:36 2026 GMT
Subject: CN=617dfb508c14016162338f3dbe2ade945adf8451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:15:a3:63:f9:8f:50:42:03:97:a2:d0:5e:
c6:56:18:00:84:4e:36:32:94:53:11:e2:6e:7d:03:
58:19:23:3a:c3:e9:c3:2a:0c:fb:f8:dc:49:d6:14:
ef:6f:c9:aa:fe:b2:c3:bb:56:03:05:5b:83:8d:17:
d7:4a:62:e5:d3:8d:24:14:ce:91:59:48:29:e1:51:
92:3d:b4:b4:a7:4e:2a:6f:4b:1a:66:df:ad:61:ad:
d2:67:fe:a3:4b:42:1e:87:1d:94:39:22:45:5a:f2:
3c:df:10:32:06:ab:bd:33:d3:dd:c0:08:61:b4:3a:
24:3f:c2:0d:29:4a:bd:60:fd:b4:ed:9a:64:7d:fd:
3e:3f:25:f7:da:c0:4a:8a:16:09:bb:02:41:77:17:
c8:56:00:c1:d6:14:4b:e3:2e:69:2f:69:fa:57:4a:
23:ef:fc:55:99:09:53:31:bd:d7:9f:e5:e2:d2:36:
c5:bd:78:90:10:8a:2f:cb:ae:53:56:08:94:77:32:
8c:bf:fd:cc:b0:d5:b2:39:4d:bf:3d:7e:1e:6c:e8:
af:a6:dc:a5:c7:0d:a4:a9:f4:8a:d5:a9:b2:62:09:
b9:ce:b0:e0:04:96:f9:dd:10:f0:e7:37:7a:c9:f1:
93:29:78:5e:7b:56:49:52:86:02:35:af:c6:47:c2:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7D:FB:50:8C:14:01:61:62:33:8F:3D:BE:2A:DE:94:5A:DF:84:51
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:18:d1:cb:4c:f5:91:09:d1:8b:f3:21:fe:fe:48:e9:c5:c7:
5c:83:c3:c2:35:92:e7:e8:62:ee:c8:06:eb:37:10:a3:e1:25:
b2:ff:78:86:74:68:fb:da:22:0d:47:ce:31:0b:08:f0:91:4f:
d4:3e:b7:98:5d:ce:be:7e:4c:e9:d6:26:b4:79:d8:dd:10:0e:
7c:97:0c:75:65:61:a0:92:32:14:53:c6:98:1c:5d:3f:87:dd:
1c:78:89:51:96:36:e2:71:e9:76:8e:7a:e6:44:cd:53:fe:a8:
d1:ff:03:be:65:ab:ce:77:9d:24:13:2b:87:46:e4:7d:63:9f:
f4:f0:18:b7:aa:f3:9f:fe:ca:be:21:57:29:f0:bf:e0:8d:91:
a3:28:73:02:6a:f8:d1:f9:fd:46:de:7f:7d:15:cd:0f:f1:ef:
68:04:44:80:3f:70:3d:ea:b7:91:3f:30:75:20:24:34:22:38:
63:d9:92:a6:57:8e:8f:be:44:c9:e9:81:8e:c2:b4:09:09:cf:
fb:04:d1:c5:eb:42:f0:18:75:dc:4f:68:55:1b:96:59:32:d6:
49:95:05:b7:f6:96:69:33:85:07:17:82:3b:66:04:a3:08:db:
2b:07:90:a5:79:8b:cd:71:7b:1e:2c:f1:b9:90:dc:8f:7a:36:
25:91:a5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:45 2026 by rpki-client