Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: dxXWueC3IdD8izEdlHLbCRG6xoifktVBc6yuyxS3Ns8=
Subject key identifier: 92:DB:EA:1E:40:6B:4B:56:DD:F7:F3:BA:46:79:02:6F:5B:A7:80:CF
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 01A0DCBC0D172D622166E75BC3B29FEA0DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 1A7F
Signing time: Sat 26 Sep 2026 08:01:46 +0000
Manifest this update: Sat 26 Sep 2026 08:01:46 +0000
Manifest next update: Sun 27 Sep 2026 08:01:46 +0000
Files and hashes: 1: 9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa (hash: qftJAO5xZn04TQEdzEIUocCNdk0IiIOqR+bZ8YJWZ7o=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: dbjOwKxJJ1OVZlGFaJapxjgkd4/ooII/0S9ViVghhHM=)
3: n6OO-WnnkHzceF7bSScsPeztc-c.roa (hash: E3zuJZBnxJWbp6sji/yaodu4Rd/MUTtyvemA5p5Biac=)
4: tNm4Kj6pURpIDAOhjCaj5b4oBeI.asa (hash: AL9vjuRr/GpcvmtoQMe6I7TNeV/MZ4vDKYV842zbN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bc:0d:17:2d:62:21:66:e7:5b:c3:b2:9f:ea:0d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Sep 26 08:01:46 2026 GMT
Not After : Sep 27 08:01:46 2026 GMT
Subject: CN=92dbea1e406b4b56ddf7f3ba4679026f5ba780cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:35:10:6a:13:ee:fe:f1:ef:78:87:b7:d4:
fb:e7:34:7c:e6:45:91:8a:b7:55:cf:c1:a8:ae:96:
1a:ae:3a:a8:63:1f:ca:cb:35:02:8e:94:0d:fa:ec:
97:45:77:8b:4b:5b:08:41:19:15:64:1e:a3:fd:8e:
62:35:92:1c:9e:ac:60:15:7a:1e:17:8b:9e:d5:4d:
41:1e:28:69:a3:33:b7:93:88:51:e1:64:29:6c:19:
89:40:82:30:5f:1b:7e:2f:24:5c:0b:83:bc:54:2e:
28:da:d9:c8:85:1f:c9:5b:9a:68:8b:c8:d7:80:90:
9b:6f:05:89:ab:c7:91:2a:11:cc:85:00:61:b8:eb:
bd:f7:04:3c:5e:39:29:67:d5:81:5e:96:35:cd:52:
b9:e4:18:d0:6d:d2:e1:f0:a6:5f:42:21:c4:8b:14:
1f:8b:6b:61:42:35:87:0d:13:02:c2:68:91:f2:f9:
85:4d:31:19:f7:27:22:a0:8f:a8:7d:31:0b:10:f0:
7f:85:da:a9:0c:ac:da:1c:16:21:cd:f1:4e:66:36:
88:31:86:62:09:27:c6:df:a1:c5:7d:6f:60:4f:52:
da:9c:1b:b3:4f:4c:f3:fb:74:cf:33:c1:c6:7f:bf:
f7:d4:02:23:d8:73:0d:4b:cf:f6:c7:0d:f7:8d:c0:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DB:EA:1E:40:6B:4B:56:DD:F7:F3:BA:46:79:02:6F:5B:A7:80:CF
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4e:65:8d:58:85:33:45:99:2e:cb:d7:e6:d5:5f:6c:cd:12:
fc:de:64:78:ec:e7:06:3a:fe:a0:c6:c2:6b:d4:4f:a3:36:2c:
fb:34:7f:e2:7f:d9:b1:0e:d4:2a:f0:de:04:e9:3f:12:15:d6:
30:15:ae:d7:82:97:3b:4d:28:5c:a2:af:ba:5c:b1:53:05:59:
5e:0e:b1:14:13:3b:9d:ea:a9:5c:a0:82:83:97:d1:18:9f:2c:
ac:c5:2f:dd:b4:cc:e5:cd:42:ce:d3:d3:37:3e:e8:f6:7e:33:
38:ff:88:81:fb:f0:4b:57:ec:29:cb:56:52:d2:31:d2:13:e4:
d8:71:10:05:42:a1:c8:47:33:a2:72:46:52:7b:65:5a:cf:ae:
5f:7d:49:68:25:b9:6e:8c:5d:8a:65:87:03:03:da:31:be:18:
48:b5:69:a4:b8:73:a6:66:d7:9a:84:6e:ce:9c:da:ed:e6:63:
0d:c1:63:b4:65:50:cb:df:d4:bc:1b:81:aa:eb:61:6e:c8:95:
b4:19:56:f9:0b:c2:80:7d:18:a4:3a:86:fc:46:fe:f5:b9:e0:
70:69:bd:81:91:a3:48:8d:af:1d:f7:d3:10:8c:ba:39:3f:30:
21:23:4e:fd:d3:98:d0:94:e0:27:36:90:85:fd:c7:07:50:6c:
b8:c7:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:15:10 2026 by rpki-client