Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: F6/Xcswq7XnWP8ilef+UV93u1u18saJnxR5/Qs0GRcM=
Subject key identifier: 1C:8C:81:8E:42:99:C1:4E:13:DF:05:F0:88:EB:39:92:19:61:5B:67
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019F93921BA4714FB1D4C8E144FCD7E805A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 151D
Signing time: Fri 24 Jul 2026 10:00:53 +0000
Manifest this update: Fri 24 Jul 2026 10:00:53 +0000
Manifest next update: Sat 25 Jul 2026 10:00:53 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: Dc3gvHaKVdDizRxMdXjytl9oxtauDkB9cOMH1KN1cFg=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:1b:a4:71:4f:b1:d4:c8:e1:44:fc:d7:e8:05:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jul 24 10:00:53 2026 GMT
Not After : Jul 25 10:00:53 2026 GMT
Subject: CN=1c8c818e4299c14e13df05f088eb399219615b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:3c:b2:16:e4:aa:85:ff:45:ab:38:8f:24:
89:b7:4c:0b:ce:e9:4f:17:66:70:ff:53:6b:06:a1:
98:7b:e1:ec:25:f8:52:3b:8c:8b:bf:4a:91:a1:56:
85:e7:86:90:2a:c5:28:cb:d0:28:3e:2a:64:ab:ad:
23:79:e1:20:5c:96:1b:c9:1c:ad:bd:06:7d:f5:87:
b1:3d:15:af:27:bf:69:95:4e:30:54:10:7b:98:85:
f3:8a:62:a5:df:e6:e1:5e:33:82:6f:d1:2a:8d:c1:
8a:dd:02:a6:c4:04:a1:fb:fb:cf:f3:a4:da:26:ca:
2c:83:9c:fb:10:28:62:e5:67:d5:5d:87:84:97:10:
59:08:be:5b:05:83:08:35:60:3c:da:6e:84:a7:41:
fc:b1:61:bf:b3:c5:26:64:d0:56:ee:7c:8b:83:bf:
8e:28:48:51:7d:2e:42:f6:62:51:7a:e5:4c:b5:41:
5c:44:ff:88:69:d1:d3:b3:33:33:c6:25:b2:a9:b9:
d4:b6:80:55:72:23:df:f8:99:42:7a:20:ff:77:d1:
be:4d:af:07:af:b5:0e:46:75:f9:62:5e:d3:e7:4a:
2d:3b:75:03:29:88:e4:cd:a4:2e:70:1b:20:83:1d:
9e:fb:86:a6:58:e7:62:e0:76:31:e5:78:26:81:ff:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:81:8E:42:99:C1:4E:13:DF:05:F0:88:EB:39:92:19:61:5B:67
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:73:26:5d:e6:5c:3a:d6:4a:a8:08:cc:2c:56:26:b7:0d:85:
3e:c3:0a:58:34:96:ec:8a:46:1f:90:3d:8a:ec:f4:95:ba:6b:
72:cd:0c:b5:48:bb:4f:8e:db:86:8d:d5:20:b3:47:aa:db:77:
4d:7c:34:97:f9:c0:56:f1:66:d7:f6:56:bc:01:9d:fc:83:a9:
63:be:df:25:9f:c6:12:db:a5:7f:e3:1b:88:fd:11:cb:8b:52:
61:96:18:3a:b3:dc:e5:3a:ce:59:e6:a2:58:00:03:9c:e6:18:
79:ba:46:85:bd:9e:ad:11:88:35:fe:05:a3:4c:6b:48:a0:db:
4b:7a:1d:27:36:f8:b4:0f:9b:bf:56:5d:80:2b:26:bd:d5:d8:
e9:2f:47:2e:20:08:92:31:1a:40:f6:ba:e9:c7:9f:2d:01:27:
0a:c6:a1:36:bf:8c:fd:2d:13:3d:62:c8:f5:e7:2c:03:6d:da:
8f:b2:23:ad:a7:d8:26:29:fe:9b:94:54:93:bf:69:98:33:f3:
78:48:c1:b8:80:b7:96:83:85:2a:b7:61:20:a4:ba:41:74:86:
29:12:fa:85:62:a3:79:a8:8b:b7:41:cf:02:8f:6a:74:67:00:
96:ae:4a:e1:b4:49:4f:7f:92:23:88:48:c2:6e:70:3b:61:cc:
ad:02:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:15:59 2026 by rpki-client