Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: Zn1lz74dR5YaIWlsyVAgGp1BSThHxmIITEcvMxUFJxk=
Subject key identifier: 65:A0:30:37:10:5A:12:81:B4:85:89:B6:22:D5:C5:D4:42:84:ED:F5
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019D27A8E44B2474E065550A6776D7EECFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 13DC
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: 0qLBUsDvOoWUd+UT9H53vcRHaHl/cy59qs2vjfzmNHc=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e4:4b:24:74:e0:65:55:0a:67:76:d7:ee:cf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=65a03037105a1281b48589b622d5c5d44284edf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:20:cb:28:3c:d3:9c:52:46:4f:ea:e8:05:
96:b7:6e:d6:9e:8c:c7:8a:d0:52:35:42:7b:b4:f1:
62:39:80:4b:24:42:de:88:f0:e1:04:b7:5d:3a:e4:
bc:c1:d8:97:c8:3b:5b:2f:ba:01:1c:9b:69:0e:51:
7d:35:8b:71:ff:59:2a:5f:ee:31:29:46:9f:0d:05:
aa:a9:07:11:c2:60:fe:a9:aa:33:22:8f:39:a3:76:
fc:c6:79:57:b7:7f:69:a9:02:48:9c:e9:c8:ac:3b:
45:be:cb:66:de:76:77:b3:5a:6b:96:06:b3:f5:0d:
be:30:3c:00:90:42:3b:7c:0d:c9:16:4b:15:c3:11:
ac:07:31:bb:b2:ec:6b:77:f6:a3:0a:3c:c6:0f:33:
ca:b5:9f:a9:31:92:0f:d4:b9:e5:91:73:84:63:10:
ba:93:43:c7:23:e0:74:f3:c7:55:b4:1d:a5:0c:76:
81:00:63:be:62:11:8a:4f:5c:e1:ac:0c:4f:06:73:
aa:04:93:d6:70:5c:30:8b:17:84:8e:be:af:51:17:
d8:f0:56:9f:13:33:91:c0:41:06:ae:22:80:4f:91:
cd:2c:a4:8c:95:6b:25:50:63:c8:07:72:e5:08:3e:
e5:fb:46:ca:87:15:30:4c:3e:a8:14:ed:ef:39:d6:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A0:30:37:10:5A:12:81:B4:85:89:B6:22:D5:C5:D4:42:84:ED:F5
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b2:80:19:d3:e4:86:b1:52:95:16:29:aa:72:fb:64:3c:90:
03:80:9e:94:5e:2d:71:82:9b:e6:44:a2:6b:8e:76:a7:69:e6:
c4:02:46:f6:29:fb:00:45:18:cf:1a:9d:91:1d:bc:0f:f6:ce:
04:a7:5a:6f:9f:9f:ed:c0:ba:77:a7:8c:00:24:ab:01:c3:44:
7c:7c:9f:d5:06:8f:68:c8:31:55:44:72:29:91:3a:b2:2e:91:
48:17:f8:d9:c5:71:ab:e4:4c:c4:4d:22:17:4f:bc:2b:17:7a:
e8:8a:38:64:3b:ee:83:47:db:79:27:95:ff:1d:e1:26:a0:04:
e9:74:31:cf:4f:23:0f:a8:fe:f0:8c:b7:ad:24:60:a6:7f:55:
2d:50:a1:dd:c4:2d:cd:1f:59:35:5c:c9:57:fb:c9:41:0f:6f:
c6:78:85:51:ce:0b:30:63:91:21:e0:a1:96:0d:85:36:fb:0c:
09:2f:14:96:7d:f6:a1:cb:73:d4:65:47:d3:48:b8:6e:be:e6:
0c:47:14:bd:75:64:90:86:6e:72:78:6d:8a:b9:cb:3c:af:fb:
d4:2f:bb:4a:73:b2:f8:07:03:fa:d0:8e:da:42:7a:35:1c:f1:
ff:ec:c6:17:6d:e7:62:fd:d8:cb:b8:2d:29:2f:be:70:d6:9f:
78:7d:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:26 2026 by rpki-client