Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
File: OzdnJSANjYwAzw91FK8l_zYjEPA.mft (raw, json)
Hash identifier: vVvFlcMC9WkfpoT1OQo7/P93sTD9q+D8NipOAHY+cLw=
Subject key identifier: 98:DA:F1:13:91:D9:BA:DC:D5:EB:99:9B:F3:36:00:A2:BA:DB:CE:1C
Authority key identifier: 3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
Certificate issuer: /CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Certificate serial: 019D2A3BC431E75639B80475FA9E6B08E875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 13:00:52 +0000
Manifest this update: Thu 26 Mar 2026 13:00:52 +0000
Manifest next update: Fri 27 Mar 2026 13:00:52 +0000
Files and hashes: 1: OzdnJSANjYwAzw91FK8l_zYjEPA.crl (hash: Oh/o3eWkI7Of49OUHgifwjWdHse1UwhD13P5NihYhLE=)
2: cpS1wHSQ6aTdnwNWUDjBZlgAC7Y.roa (hash: XiHOtWW1/pqGi1+Lnl6yq25m5xXc7tXDYaQje+WHC+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:c4:31:e7:56:39:b8:04:75:fa:9e:6b:08:e8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Validity
Not Before: Mar 26 13:00:52 2026 GMT
Not After : Mar 27 13:00:52 2026 GMT
Subject: CN=98daf11391d9badcd5eb999bf33600a2badbce1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:fb:89:a8:d8:01:bf:7b:13:5d:7f:2c:0e:
99:31:d5:56:f2:91:49:08:ea:ca:6e:91:1a:89:63:
b1:e7:0e:1a:6a:81:f7:00:25:55:f9:75:d0:a8:76:
cb:41:49:8d:95:8a:cc:b7:e2:e6:c6:e2:05:f7:60:
c7:79:52:ca:29:f9:01:d3:7d:92:1e:9d:83:a4:b9:
94:e9:eb:e8:53:e9:09:14:14:f3:4a:8a:d6:cc:3a:
68:43:e6:3e:7e:1d:04:ed:4d:2f:c2:4c:9f:6b:1e:
64:7c:a8:df:0b:e6:12:81:5d:86:7e:17:9e:21:98:
9b:ac:06:4b:ba:22:d1:50:0d:5f:56:05:8a:06:3b:
f5:a4:8b:0f:6d:c2:c1:88:a0:55:a9:5a:99:c5:a2:
53:2c:0b:20:f0:00:57:da:35:1b:ff:b7:ea:ff:30:
55:e2:07:69:bc:c1:f0:75:ba:3b:a5:3e:74:82:40:
e1:2c:2f:9a:31:ef:74:10:dd:60:c9:00:0e:2a:cb:
6a:70:4c:7a:9f:5a:27:09:21:f1:69:7a:d8:c8:9f:
45:64:aa:37:68:6f:da:cf:03:a0:9d:d9:81:86:55:
41:0b:d0:3f:e2:a5:d6:58:24:ab:09:df:46:26:60:
f3:2f:62:d0:82:66:f3:9b:96:21:27:ab:da:0e:81:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:F1:13:91:D9:BA:DC:D5:EB:99:9B:F3:36:00:A2:BA:DB:CE:1C
X509v3 Authority Key Identifier:
keyid:3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:48:0c:51:39:8f:2c:70:e0:f7:80:a7:ab:5c:16:f7:fb:71:
1e:48:51:32:d7:6d:cf:9f:11:02:22:dd:dd:26:82:b7:cb:07:
c4:61:1c:42:55:a7:3a:2e:ad:79:f8:dc:3e:b8:36:36:c2:09:
29:4b:ee:ff:15:4c:d2:34:19:db:4a:2d:7e:b6:bc:4f:89:1a:
c9:eb:0b:fc:07:7c:07:60:78:b1:d8:f2:c0:be:4b:21:70:6f:
68:b4:79:0a:f3:92:09:37:12:1b:95:70:c5:9b:6c:f6:3f:89:
96:b4:3d:e1:1f:91:1f:07:48:16:c1:ad:00:bc:bf:b3:3d:46:
2e:fa:f5:92:11:35:22:4b:5a:df:55:fe:04:01:b2:0b:44:07:
45:f3:e5:92:33:2e:4a:60:0f:57:26:90:23:cd:a5:3a:d1:61:
79:26:86:3a:9a:5c:4b:02:2a:a5:cc:61:a7:32:f3:23:44:73:
be:c6:5a:c6:4a:db:ad:44:b2:cd:eb:20:6a:61:98:d5:59:67:
6b:94:03:93:52:86:29:99:d0:d7:f4:c8:c9:c8:72:ce:ef:16:
86:80:8a:59:5f:70:5f:0a:d7:64:f3:38:c9:4a:c4:2c:94:05:
5c:af:9e:56:67:32:68:46:cb:75:00:5a:b5:53:b5:87:32:3b:
ef:48:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:07 2026 by rpki-client