Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File: OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier: +ac2v72AxrEJI67RV8IvztjRx1ftOqadLkiQ5oi0Upo=
Subject key identifier: DB:90:E2:27:7C:EC:C9:7E:50:C8:22:9A:C0:E3:C3:6C:D1:F7:8E:34
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial: 019D2695CC6DFFFE5A13359E1D115C605603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number: 1548
Signing time: Wed 25 Mar 2026 20:00:44 +0000
Manifest this update: Wed 25 Mar 2026 20:00:44 +0000
Manifest next update: Thu 26 Mar 2026 20:00:44 +0000
Files and hashes: 1: 4wCH1xXH2AmEqNEibg1P7FM72SE.roa (hash: 1jaXMinq6qu7nzoECfPCDfNYeYpFgouOjB2jk7Nl0Sw=)
2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: IQ2bMRRsUM5B+EuZ0TlmNJKW4yPWjnd+Qi+439fr9rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:cc:6d:ff:fe:5a:13:35:9e:1d:11:5c:60:56:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Validity
Not Before: Mar 25 20:00:44 2026 GMT
Not After : Mar 26 20:00:44 2026 GMT
Subject: CN=db90e2277cecc97e50c8229ac0e3c36cd1f78e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:7d:6a:89:cd:9d:17:d2:a9:ae:75:48:13:
a9:04:f3:b6:59:95:70:c0:87:37:fd:60:91:c6:a7:
7a:c3:ee:68:86:7a:fc:4a:5c:d9:3b:ad:2b:57:a4:
f9:27:52:9d:14:ec:a9:4a:77:60:e2:5e:c8:c5:ea:
7c:d1:67:81:e7:67:39:b0:91:06:43:dc:12:8b:bf:
a3:10:49:b4:66:28:39:58:5b:a2:e7:b0:29:61:87:
00:79:fb:73:9a:e8:24:61:79:93:08:98:2a:b7:a5:
64:c4:e7:4e:bf:e3:49:cb:6e:66:0b:67:4b:26:cc:
a2:ac:21:49:07:6d:f8:79:8c:2f:70:49:03:73:0b:
13:36:c3:8d:dd:a9:e9:73:8a:3d:d7:b7:19:51:45:
3d:75:9b:99:40:62:0f:71:b7:17:b1:56:65:69:52:
0b:53:38:e0:eb:21:52:77:2c:09:7e:26:eb:98:5b:
b7:58:0b:8e:12:c5:79:ff:ee:76:f4:3c:30:db:b5:
95:23:43:89:d6:48:7c:ea:b2:35:67:6b:91:60:d4:
58:19:4c:fa:1e:7c:1a:a0:ce:dd:96:7e:f5:f0:a7:
7a:ea:22:8a:16:36:70:d9:b8:25:05:29:0e:57:e1:
6f:ff:5c:b2:c1:79:80:62:58:a6:d5:5a:38:40:66:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:90:E2:27:7C:EC:C9:7E:50:C8:22:9A:C0:E3:C3:6C:D1:F7:8E:34
X509v3 Authority Key Identifier:
keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3b:da:a4:65:81:91:d0:7e:f2:5b:95:97:f2:c7:f7:9f:45:
e0:83:27:ab:16:35:95:b0:3e:69:e9:a8:3f:ac:86:77:e1:ab:
f5:75:23:5f:0d:84:d0:ca:99:08:ee:29:62:87:19:56:90:ec:
b8:ae:38:39:5c:c2:5c:ec:78:2a:e8:17:10:7c:85:3c:0b:50:
0e:b0:49:c4:c1:52:63:f7:5d:ac:ec:d7:d2:79:20:67:aa:f3:
1b:48:f9:2f:8f:91:0e:30:be:b4:35:16:28:cb:6e:82:d6:af:
a7:6c:86:00:6d:f2:2e:f6:3f:c6:be:13:56:6f:93:39:ce:23:
4c:f3:6a:01:81:73:93:4b:d8:ed:bd:73:46:1c:ad:3d:f7:60:
d1:89:80:39:07:e2:84:3a:72:5d:04:69:6b:02:43:25:e0:b0:
1b:40:40:5d:91:43:6d:cb:a6:ef:1d:5a:aa:75:39:f5:ef:18:
b3:e7:95:81:4e:77:fb:4c:b4:62:04:0a:0d:fd:11:42:3d:b4:
c0:f9:13:60:5e:5d:29:d1:a6:b8:7f:d7:c6:78:9c:26:2f:21:
3a:22:bf:07:84:e4:5c:5c:7c:10:08:38:34:f6:97:a3:7d:1a:
d2:a1:24:97:cb:cf:c8:63:15:b5:0c:b7:f6:22:09:78:6d:d7:
a7:9a:bc:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlcxt//5aEzWeHRFcYFYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OTNkNTRlNjM5MDgwYTQ2YzNmZTNkNThhYTg3ZTMwNWRi
NjlhZDEwHhcNMjYwMzI1MjAwMDQ0WhcNMjYwMzI2MjAwMDQ0WjAzMTEwLwYDVQQD
EyhkYjkwZTIyNzdjZWNjOTdlNTBjODIyOWFjMGUzYzM2Y2QxZjc4ZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2h9aonNnRfSqa51SBOpBPO2WZVw
wIc3/WCRxqd6w+5ohnr8SlzZO60rV6T5J1KdFOypSndg4l7Ixep80WeB52c5sJEG
Q9wSi7+jEEm0Zig5WFui57ApYYcAeftzmugkYXmTCJgqt6VkxOdOv+NJy25mC2dL
JsyirCFJB234eYwvcEkDcwsTNsON3anpc4o917cZUUU9dZuZQGIPcbcXsVZlaVIL
Uzjg6yFSdywJfibrmFu3WAuOEsV5/+529Dww27WVI0OJ1kh86rI1Z2uRYNRYGUz6
HnwaoM7dln718Kd66iKKFjZw2bglBSkOV+Fv/1yywXmAYlim1Vo4QGbjWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuQ4id87Ml+UMgimsDjw2zR9440MB8GA1UdIwQY
MBaAFDmT1U5jkICkbD/j1YqofjBdtprRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84MDk1OWQtZjVjNC00YWM5LWFkMTMt
ZDQ4ZmJjMWEyNDNiLzEvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84MDk1OWQtZjVjNC00YWM5LWFkMTMtZDQ4ZmJjMWEyNDNi
LzEvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDvapGWB
kdB+8luVl/LH959F4IMnqxY1lbA+aemoP6yGd+Gr9XUjXw2E0MqZCO4pYocZVpDs
uK44OVzCXOx4KugXEHyFPAtQDrBJxMFSY/ddrOzX0nkgZ6rzG0j5L4+RDjC+tDUW
KMtugtavp2yGAG3yLvY/xr4TVm+TOc4jTPNqAYFzk0vY7b1zRhytPfdg0YmAOQfi
hDpyXQRpawJDJeCwG0BAXZFDbcum7x1aqnU59e8Ys+eVgU53+0y0YgQKDf0RQj20
wPkTYF5dKdGmuH/XxnicJi8hOiK/B4TkXFx8EAg4NPaXo30a0qEkl8vPyGMVtQy3
9iIJeG3Xp5q8bA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:09 2026 by rpki-client