Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
File: OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft (raw, json)
Hash identifier: Nq1M7uE6bjjmRoOYfPig16/FQodigycFqMa96y8R3UY=
Subject key identifier: 50:86:45:C5:BC:93:76:3F:47:82:F0:C8:2A:DE:83:9A:D9:03:CD:65
Authority key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Certificate issuer: /CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Certificate serial: 019F8F7E51E2FAD04CF9B074833F67B0E5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
Manifest number: 1148
Signing time: Thu 23 Jul 2026 15:00:48 +0000
Manifest this update: Thu 23 Jul 2026 15:00:48 +0000
Manifest next update: Fri 24 Jul 2026 15:00:48 +0000
Files and hashes: 1: OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl (hash: 7D0ovoRhSyvzoFWduxb6pZLFgRZpJ/FV5Fc1dE8Qif4=)
2: qvZ-nKf7EFh0r3KXcsWmv_aLkqs.roa (hash: XaQIlBTlE+Jhvgae5CyaS1DgkFx27OpIcetptyKOkgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:51:e2:fa:d0:4c:f9:b0:74:83:3f:67:b0:e5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Validity
Not Before: Jul 23 15:00:48 2026 GMT
Not After : Jul 24 15:00:48 2026 GMT
Subject: CN=508645c5bc93763f4782f0c82ade839ad903cd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:d5:40:6f:65:a4:bc:66:94:75:cf:55:7e:
d3:c0:b2:3a:93:8f:a0:6a:71:73:7b:17:90:35:d9:
f0:d9:69:c1:d1:00:81:70:91:9b:df:29:38:dc:93:
51:c1:9a:04:2f:e3:d5:8c:c4:6c:c3:a4:8b:e1:98:
23:60:72:ec:ff:a3:3e:bd:6d:62:1d:99:22:20:6c:
2e:7f:e6:f8:9f:83:5c:90:75:d8:0e:bc:6e:8c:91:
ae:f5:62:71:06:aa:25:21:51:b0:13:05:e9:c0:9d:
26:00:74:c3:5f:1f:58:2e:43:a7:f7:ca:93:00:0d:
a7:28:01:b4:7f:62:08:39:75:23:e6:65:b9:c2:ae:
97:8b:92:d0:39:d4:f1:80:93:2f:35:34:5f:aa:b1:
05:b6:cc:5f:8b:15:de:46:3f:1d:d2:15:b5:90:32:
d0:ba:71:1e:fd:fe:ab:b1:93:54:d7:2a:12:bd:80:
0e:d1:9c:b9:56:06:f6:71:a7:39:5f:6b:66:d1:b8:
84:a2:bb:29:d4:6a:d6:83:bd:e7:c9:ba:ea:11:7f:
a3:59:9b:65:75:07:cf:68:79:fc:d3:34:d8:20:4d:
fa:31:ed:40:ad:79:63:d4:36:33:dc:e9:46:e6:fb:
02:1f:69:da:91:2f:62:78:74:15:15:74:48:fb:d4:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:86:45:C5:BC:93:76:3F:47:82:F0:C8:2A:DE:83:9A:D9:03:CD:65
X509v3 Authority Key Identifier:
keyid:39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4d:5f:50:14:b1:5a:22:f8:72:d3:56:87:bb:82:34:7a:3d:
62:ca:52:db:21:12:81:2e:56:e0:b5:80:f7:95:0f:1a:65:aa:
19:6d:b1:57:83:26:98:83:1f:83:d9:28:36:8e:ad:dd:74:71:
2e:b4:ba:4d:9f:fe:82:48:a1:07:7a:1a:08:61:b1:a2:ba:71:
5d:04:66:2d:68:38:16:4b:e9:bc:84:be:35:95:3b:1e:0e:62:
46:7c:c0:98:ea:25:ff:97:dc:8c:0e:23:c4:b2:73:03:c3:01:
a4:0d:e4:ed:1d:63:4d:83:01:62:01:a5:76:0c:10:e4:48:60:
fa:6e:24:da:a8:01:77:a0:ad:59:29:39:ab:23:f2:06:9b:2e:
b5:30:a9:fb:71:79:3f:e7:71:d9:b4:ba:17:ba:dc:f5:34:a5:
a4:1e:6f:75:51:ae:37:e8:67:a8:be:ba:60:6a:88:fc:9e:7c:
b5:92:15:79:f4:80:4e:ad:b6:82:b9:97:13:50:8a:10:b4:e8:
72:43:27:32:88:fe:c9:36:e8:1c:e9:ba:b5:70:75:76:d8:48:
78:c3:f4:01:68:80:ca:72:0f:65:88:2a:f7:42:69:2e:bf:42:
08:6a:7a:f6:2f:8a:d6:41:40:46:75:af:19:13:18:73:8e:1d:
99:79:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:43 2026 by rpki-client