Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: EEnTyMM6WjPf6OZjddxuzAgNqZT1vNkumcVYprv+rWs=
Subject key identifier: 64:6F:7E:BD:DE:B4:93:E6:4C:04:22:22:F5:3A:29:6A:D7:C7:38:2E
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 019EC11186A9D2CE4754BF4ADBB179379E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 05AB
Signing time: Sat 13 Jun 2026 13:00:11 +0000
Manifest this update: Sat 13 Jun 2026 13:00:11 +0000
Manifest next update: Sun 14 Jun 2026 13:00:11 +0000
Files and hashes: 1: A2yTP0lhhFqNva3nkV1odyS6nwE.roa (hash: hsckG++ZXCzFReA5qOo98hpc0d00fMoMGiw+xttmqVs=)
2: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: 9/+IjyKgRGkli4TSYfsqMa3JIgq7JJqXY13fDqWas/Y=)
3: uBcATutWZCzBK8D7bBIKL9bxPlQ.roa (hash: JIPy3fI3722I5dmkOB2XD2F/6xuJic82XKrmU7yYHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:86:a9:d2:ce:47:54:bf:4a:db:b1:79:37:9e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Jun 13 13:00:11 2026 GMT
Not After : Jun 14 13:00:11 2026 GMT
Subject: CN=646f7ebddeb493e64c042222f53a296ad7c7382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:b3:04:f6:b1:6e:c0:b7:ca:b2:f2:ed:d5:
3d:93:d3:75:85:88:be:f5:ff:73:95:4c:c7:4d:ed:
43:78:52:a0:10:2f:ec:21:91:1e:18:8a:a9:de:c5:
12:f6:35:39:f1:f0:16:21:29:01:e6:a5:a1:15:69:
fe:9c:1f:89:a6:df:14:ae:c5:0e:ba:02:de:b7:36:
99:6c:1b:5f:04:99:68:a2:23:5e:77:57:a3:20:00:
3c:5b:e4:7a:15:7c:e8:1d:a6:7a:b5:3d:b1:79:0e:
05:80:3c:98:12:27:1b:d3:ec:f1:ef:eb:0e:cd:a5:
00:ab:0f:be:4f:50:c2:ba:c8:fa:a7:40:5d:01:a4:
b1:a6:25:e7:43:3d:35:5e:18:df:db:c1:99:bc:00:
98:d9:f8:4f:44:f2:eb:38:fc:2d:40:af:32:d6:4d:
a7:e8:45:ae:8d:78:09:26:60:d5:e8:e0:f0:8f:23:
0b:fe:3c:bb:d5:91:78:56:3c:d2:5c:89:80:cb:0b:
11:3b:0e:d5:f7:f1:15:16:ea:63:f5:93:3b:ab:af:
e9:93:3d:de:72:94:09:97:ac:96:b5:a2:48:43:27:
52:40:88:5b:4a:4d:0c:41:dd:4f:86:0b:c1:9b:98:
7a:88:be:ee:16:f0:8f:dc:48:80:da:ae:a1:d3:de:
45:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6F:7E:BD:DE:B4:93:E6:4C:04:22:22:F5:3A:29:6A:D7:C7:38:2E
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6f:eb:9f:ec:74:fc:92:d5:66:a0:aa:f0:b1:0c:0f:a7:33:
4c:da:b6:bf:9a:c7:fb:6a:ce:52:37:2f:67:ec:02:e3:66:11:
39:ac:e7:08:20:1f:67:48:eb:d8:af:13:51:41:83:21:8e:cc:
fc:7b:bc:5e:9c:8a:29:12:40:ce:36:56:b2:0a:b7:ba:4e:be:
d7:80:5d:70:ad:99:ab:0a:a2:f8:fa:48:98:03:df:96:72:0b:
db:d2:19:62:00:b2:0e:ae:7d:62:46:0c:88:76:96:6f:58:53:
27:23:74:a9:7c:82:af:ba:60:ee:f6:f4:1a:01:94:88:b5:81:
43:69:05:58:42:4e:c2:f0:74:43:5a:8e:47:71:a3:cc:43:fa:
25:cf:14:06:2c:8b:42:ee:08:28:3d:e7:3d:f9:ce:4d:14:71:
58:9b:f3:66:dc:ff:bb:4e:d9:e8:76:ec:e6:55:32:72:20:eb:
54:88:51:82:5d:e8:d4:47:ee:fa:06:b0:04:e1:70:94:f7:31:
a3:b5:b7:66:1b:a4:e5:38:0e:4c:2b:93:a2:9a:f8:0b:48:5b:
0c:a7:ac:0e:70:d2:85:ea:e4:14:96:b3:07:4b:ff:ae:2c:11:
0c:e3:a4:04:a1:b2:88:f7:80:2f:85:47:ac:33:d5:dc:7f:2f:
b4:b1:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:41 2026 by rpki-client