Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: sX6+v2sxlUuyrdvD9ClO8YYd6Y9rvOLU9O1lEjT0nN8=
Subject key identifier: A3:54:59:F9:71:C9:CA:EC:CB:4B:59:35:D9:42:A2:DF:1B:A6:AF:8A
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 019D26CD3187DD72317050B1FF8A9D42350B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 1893
Signing time: Wed 25 Mar 2026 21:01:14 +0000
Manifest this update: Wed 25 Mar 2026 21:01:14 +0000
Manifest next update: Thu 26 Mar 2026 21:01:14 +0000
Files and hashes: 1: 9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa (hash: qftJAO5xZn04TQEdzEIUocCNdk0IiIOqR+bZ8YJWZ7o=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: SPtlQcX0JYqlY1RcXthHW91tDqkrGt2qAAbrZmLYwuo=)
3: n6OO-WnnkHzceF7bSScsPeztc-c.roa (hash: E3zuJZBnxJWbp6sji/yaodu4Rd/MUTtyvemA5p5Biac=)
4: tNm4Kj6pURpIDAOhjCaj5b4oBeI.asa (hash: AL9vjuRr/GpcvmtoQMe6I7TNeV/MZ4vDKYV842zbN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:31:87:dd:72:31:70:50:b1:ff:8a:9d:42:35:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Mar 25 21:01:14 2026 GMT
Not After : Mar 26 21:01:14 2026 GMT
Subject: CN=a35459f971c9caeccb4b5935d942a2df1ba6af8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:55:97:75:2a:d7:98:53:95:10:63:2b:43:
7d:99:d2:3a:3e:ed:d9:c8:53:1d:32:6b:4e:b2:68:
eb:15:5e:af:25:0f:04:fe:ea:b3:39:50:c1:c7:78:
e8:7a:80:73:ad:db:38:1f:1b:ae:c3:4a:8a:6a:bc:
60:5e:b1:f4:ed:b8:b7:21:69:78:04:5c:66:4e:0c:
55:cf:e1:49:4f:9a:92:0f:a7:c6:dd:ac:49:5b:18:
83:e4:4c:5f:fc:fe:7d:a0:8c:4a:64:d6:60:e4:9b:
d9:b2:e4:b3:7e:00:f9:32:55:55:4c:ae:98:7f:09:
00:3e:55:85:fd:b7:7f:87:70:40:fa:c3:7a:68:37:
9a:49:a4:13:95:fc:61:a9:f0:68:3a:52:34:2b:4c:
a7:a6:cc:63:ea:04:72:26:eb:82:20:56:ec:55:2b:
0f:6c:1b:be:88:0a:06:e1:a9:02:d6:17:47:c1:8a:
fe:fc:61:4c:6a:58:08:e3:ce:b8:ab:7f:13:e5:ad:
7d:d5:23:77:6c:26:d1:11:c6:70:7d:78:0f:cb:42:
a3:d5:16:90:31:47:32:24:8d:1b:fe:db:76:d2:03:
25:61:e4:f8:18:8e:db:ce:ad:b1:cb:13:ce:2f:c8:
7b:ef:ae:fe:6c:f7:ef:f5:d1:9e:69:3a:a2:e9:ed:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:54:59:F9:71:C9:CA:EC:CB:4B:59:35:D9:42:A2:DF:1B:A6:AF:8A
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:dc:25:7e:aa:88:f2:a4:7c:c6:a7:60:13:1f:ec:8b:9f:d3:
ae:b6:05:fa:59:5f:3a:76:c5:b1:97:4a:5f:39:14:b1:f4:29:
f1:c5:e1:c7:a0:03:ca:0c:f0:47:88:ef:02:db:b3:d8:69:94:
21:06:bf:58:d9:da:64:9c:00:58:ed:78:28:02:13:00:14:83:
83:95:7c:60:42:b5:a6:83:f5:12:0f:57:f3:81:31:7a:ba:a3:
34:4e:66:c5:d4:04:15:a3:33:e0:01:10:9c:ae:0e:f1:0f:93:
93:1b:6d:9a:c4:7d:ef:fe:39:26:8b:21:e4:05:bf:01:5a:1a:
f8:5b:11:f8:0c:77:38:59:d2:2d:4c:60:6b:e2:3d:68:86:c2:
43:7f:1d:51:60:48:e5:97:c9:a5:ca:2c:be:73:94:49:76:b1:
b1:c0:18:e3:df:78:22:b5:f9:db:ce:12:c1:b1:af:9d:d7:21:
99:1b:01:32:5b:32:68:26:b4:9c:1f:f4:0e:dd:16:3f:59:ab:
f0:5b:14:c1:7c:84:f4:5b:f8:87:77:b5:49:c3:73:e4:0e:ed:
fb:8b:a3:9d:11:bd:b7:fd:fe:5f:30:43:6c:2d:b3:8c:13:91:
4e:33:bf:53:65:88:de:68:47:02:04:af:b8:2a:73:af:e9:02:
f3:2f:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:48 2026 by rpki-client