Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: z1SGRKHg778XqXq/2sbQqAUb4A8lp8u4LgOkeX+MxwU=
Subject key identifier: E1:31:09:A6:AB:36:B5:30:6E:1F:55:30:AE:82:3C:23:F7:3D:DA:C7
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 01A0DDCECAED659291F658FA652161D7FA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 15C8
Signing time: Sat 26 Sep 2026 13:01:52 +0000
Manifest this update: Sat 26 Sep 2026 13:01:52 +0000
Manifest next update: Sun 27 Sep 2026 13:01:52 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: zqEMSevQLpX5YWrTVXtnTwzwzrARUNIXM2dCHuYaPLc=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:ca:ed:65:92:91:f6:58:fa:65:21:61:d7:fa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Sep 26 13:01:52 2026 GMT
Not After : Sep 27 13:01:52 2026 GMT
Subject: CN=e13109a6ab36b5306e1f5530ae823c23f73ddac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4a:17:9b:32:5c:63:eb:58:4f:8a:f6:83:a9:
75:78:ec:cc:95:56:37:b7:f9:9d:1a:84:5b:97:45:
a5:aa:90:a1:c7:ca:e8:de:af:99:fd:76:8a:63:f2:
34:1c:30:42:99:91:ec:81:e6:53:41:7b:bd:f6:2d:
33:11:8f:cc:a0:ad:3c:42:a4:ef:a4:ca:0b:6a:68:
45:4b:6d:4f:6d:ca:04:8a:6c:d1:3e:de:eb:60:2b:
f0:92:79:cd:fc:e8:b0:8b:92:53:2f:f8:6f:09:38:
4f:08:fb:14:c4:8a:52:cc:ef:5f:22:c8:3d:a6:ac:
15:5d:f4:82:71:45:8a:4a:12:f5:a7:54:20:fb:a4:
84:0d:6b:4f:3c:eb:5b:30:6a:3a:11:aa:84:60:a5:
d5:a2:d9:06:f9:2a:34:b3:14:fc:63:de:48:c3:18:
89:d9:96:6d:fc:2e:45:46:37:f9:40:07:ba:af:1b:
67:d5:74:c1:a1:79:9b:72:d8:67:d0:60:d6:89:95:
19:2f:c7:6c:17:15:d0:b7:b5:f9:14:d0:82:67:ba:
13:6c:e3:3d:84:fa:75:37:6e:e8:f6:78:15:06:49:
e8:a1:d4:61:f4:c8:1e:e3:6c:00:84:dd:c7:fd:6d:
ac:38:fd:2a:b8:c3:7c:66:08:a7:e3:20:d9:ea:f4:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:31:09:A6:AB:36:B5:30:6E:1F:55:30:AE:82:3C:23:F7:3D:DA:C7
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a8:44:e8:02:56:c9:e3:6b:73:f1:cf:7e:61:64:98:c4:f9:
28:97:c7:c8:c8:17:35:9c:c7:9f:20:d8:06:83:05:ee:89:a6:
61:55:b4:d6:3e:06:7b:cb:3c:59:8b:3a:49:eb:6e:48:0f:b1:
83:23:e9:00:d8:d9:a9:d0:ad:83:27:ab:78:12:b6:d6:80:2b:
98:35:4e:64:cb:1e:b9:4e:99:52:92:ca:4d:21:1f:9e:00:9a:
03:98:8a:03:e3:4c:1a:7e:fd:ea:e9:cc:20:9f:2e:ef:90:3d:
74:52:7b:79:be:92:a7:e9:f5:ce:70:53:41:4a:16:e6:b2:44:
ee:8f:ab:db:78:4f:52:3f:6c:80:12:dc:42:99:a2:49:2a:51:
ff:1a:bd:e0:8b:71:a6:77:a8:dc:80:47:0c:84:06:20:1c:02:
b7:12:b7:d8:4f:93:c9:18:13:b2:69:73:09:ff:8c:4b:cf:4e:
cd:a5:f4:8c:16:bd:20:0f:e3:b5:c1:5d:74:85:d3:3d:8c:b1:
60:52:35:67:76:e6:f7:29:fd:b5:14:45:59:02:98:9e:25:57:
2a:31:a6:78:8a:79:5d:5a:51:45:ca:ae:7f:a1:21:b5:e3:85:
c3:d4:35:1a:e1:40:be:d0:3d:fe:4a:46:a3:f5:81:8f:85:3d:
19:c2:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:38:46 2026 by rpki-client