Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: fmn0H70tiEE6hq2jiErl3Y4zjGIRQCNaoMSj0XhXY14=
Subject key identifier: E6:A0:45:C4:D2:78:0E:68:A1:2A:7B:1A:33:FC:AD:5A:99:50:D9:0D
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 019D2816BDEF07FCE20F6DFE8072A9963CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: 06B5
Signing time: Thu 26 Mar 2026 03:01:12 +0000
Manifest this update: Thu 26 Mar 2026 03:01:12 +0000
Manifest next update: Fri 27 Mar 2026 03:01:12 +0000
Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: YqWCx2v1nhlrdkwr4JFyh4DtWxnI7VrCOWho+OX6vEA=)
2: Pja4mNctEO1syGRjo8GcPhgekVI.roa (hash: Ihp8XzTztX/T4ldZhzh4fgPvsQaA7Zl4szEC5xqNuDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:bd:ef:07:fc:e2:0f:6d:fe:80:72:a9:96:3c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Mar 26 03:01:12 2026 GMT
Not After : Mar 27 03:01:12 2026 GMT
Subject: CN=e6a045c4d2780e68a12a7b1a33fcad5a9950d90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:1a:d7:e6:2b:36:63:d1:fb:08:a7:11:8b:
9b:c5:99:41:e7:36:1c:4c:4a:4e:dd:7c:e0:d1:30:
d1:e9:68:f2:29:0d:95:5a:08:5b:ca:de:85:b2:e1:
f7:5b:e6:b7:3c:c5:82:97:dd:f2:7a:fb:41:f6:b3:
ce:92:1a:45:0b:98:f5:e8:1c:5c:19:02:ae:44:f5:
c3:e2:ed:b1:7a:5f:16:bf:a7:7e:b2:a5:4e:95:6a:
bf:21:b5:ba:b0:c0:40:60:26:f3:3a:6c:8c:1d:c8:
00:2d:aa:5c:a9:65:d6:1e:2f:eb:03:8a:c2:5a:76:
03:a4:ce:c6:39:47:ec:43:4c:99:15:f4:50:03:b8:
98:3e:56:03:b0:a9:60:2c:8c:69:9a:5b:bb:94:99:
a9:46:0f:31:00:f5:f5:5f:b2:8f:de:27:3b:52:d4:
e7:af:08:b7:e8:16:70:9c:e1:80:6b:60:09:f4:4e:
06:87:6f:79:9c:4b:60:89:46:e2:09:ca:b7:fc:98:
12:50:68:80:86:7c:10:04:cc:c1:24:c7:d5:28:2c:
62:f2:4f:82:60:e7:f0:c1:5c:75:a7:25:79:f7:f8:
29:37:eb:2e:44:91:e1:e3:9c:96:04:88:55:61:2e:
4a:11:14:44:67:34:a6:3a:6f:b2:91:e1:e2:12:7d:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A0:45:C4:D2:78:0E:68:A1:2A:7B:1A:33:FC:AD:5A:99:50:D9:0D
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a2:20:7c:ae:7c:97:5b:26:d6:30:3c:5d:7f:6b:40:de:1b:
89:df:a2:dd:83:41:18:f8:13:3f:b5:43:ba:e3:87:3c:8e:8f:
8f:4d:17:6d:1b:15:17:be:1e:2f:67:31:86:e5:4c:9e:e1:55:
a1:bf:7c:2e:60:c9:f3:a2:bd:a0:da:52:56:68:4d:ae:eb:5a:
98:61:66:ee:03:d8:7f:c1:cf:a7:8b:62:e8:e8:5d:97:62:07:
71:03:f4:b6:0f:6b:0f:d6:c3:f6:a8:d1:00:6d:9e:df:18:2f:
a5:fa:fc:80:90:fc:3d:4b:a2:ce:38:79:3b:d6:a9:b5:52:40:
eb:41:04:0c:57:4c:73:a8:96:a5:28:f3:ed:0c:87:4b:18:76:
25:16:14:28:3f:0f:ef:26:c1:af:05:b4:1c:a7:5b:c4:58:07:
27:7a:c6:0c:8b:3c:c4:4d:ea:73:f9:46:86:e0:5f:7b:bb:7a:
03:48:b4:56:6b:e4:c2:f3:29:a6:76:1c:94:fc:af:54:1d:b8:
3d:e1:73:fa:6e:7a:7e:17:b9:df:89:1e:80:2f:24:bf:84:c4:
db:75:25:b6:81:5a:6e:49:45:0a:c9:ba:02:81:55:99:44:9d:
7c:83:68:11:db:c1:6d:9c:92:ab:9a:e8:8c:6f:6c:1e:60:bf:
58:78:44:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFr3vB/ziD23+gHKpljzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzg5ZjliNTY3ZTc0NWM5NTIxYmIxYzE1NDFhMzQ1OWFl
MGU4YTUwHhcNMjYwMzI2MDMwMTEyWhcNMjYwMzI3MDMwMTEyWjAzMTEwLwYDVQQD
EyhlNmEwNDVjNGQyNzgwZTY4YTEyYTdiMWEzM2ZjYWQ1YTk5NTBkOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC0a1+YrNmPR+winEYubxZlB5zYc
TEpO3Xzg0TDR6WjyKQ2VWghbyt6FsuH3W+a3PMWCl93yevtB9rPOkhpFC5j16Bxc
GQKuRPXD4u2xel8Wv6d+sqVOlWq/IbW6sMBAYCbzOmyMHcgALapcqWXWHi/rA4rC
WnYDpM7GOUfsQ0yZFfRQA7iYPlYDsKlgLIxpmlu7lJmpRg8xAPX1X7KP3ic7UtTn
rwi36BZwnOGAa2AJ9E4Gh295nEtgiUbiCcq3/JgSUGiAhnwQBMzBJMfVKCxi8k+C
YOfwwVx1pyV59/gpN+suRJHh45yWBIhVYS5KERREZzSmOm+ykeHiEn3GkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOagRcTSeA5ooSp7GjP8rVqZUNkNMB8GA1UdIwQY
MBaAFDs4n5tWfnRclSG7HBVBo0Wa4OilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2Mt
YmYzNTFjMGYwZWJjLzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2MtYmYzNTFjMGYwZWJj
LzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6IgfK58
l1sm1jA8XX9rQN4bid+i3YNBGPgTP7VDuuOHPI6Pj00XbRsVF74eL2cxhuVMnuFV
ob98LmDJ86K9oNpSVmhNrutamGFm7gPYf8HPp4ti6Ohdl2IHcQP0tg9rD9bD9qjR
AG2e3xgvpfr8gJD8PUuizjh5O9aptVJA60EEDFdMc6iWpSjz7QyHSxh2JRYUKD8P
7ybBrwW0HKdbxFgHJ3rGDIs8xE3qc/lGhuBfe7t6A0i0VmvkwvMppnYclPyvVB24
PeFz+m56fhe534kegC8kv4TE23UltoFabklFCsm6AoFVmUSdfINoEdvBbZySq5ro
jG9sHmC/WHhE6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:51 2026 by rpki-client