Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: eL6z/ewxlCl3AM+/gJzNrWJb0a7q+DgUgVX4gewlcqM=
Subject key identifier: 66:29:78:2A:E9:D1:BA:28:3B:F1:EA:30:A4:27:A8:F8:B3:B9:02:43
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 019F92B6033974BD788EADB49B714D89D0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:00:29 +0000
Manifest this update: Fri 24 Jul 2026 06:00:29 +0000
Manifest next update: Sat 25 Jul 2026 06:00:29 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: YPb4hbH4cSuy7ViGK0b65YtpGG29VeEyWG66+gzVbig=)
2: j6GSjngp4zBMa0A6Up3-vP_HpYA.roa (hash: eFIS08YcHeuG7OXuLasqB4hIQnIZETYTn/VjLjZa0pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:03:39:74:bd:78:8e:ad:b4:9b:71:4d:89:d0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Jul 24 06:00:29 2026 GMT
Not After : Jul 25 06:00:29 2026 GMT
Subject: CN=6629782ae9d1ba283bf1ea30a427a8f8b3b90243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:a2:18:0f:9d:d1:9b:a0:2e:69:23:f5:4b:
b3:bb:3f:d1:a8:2b:bc:c2:7a:dd:93:aa:da:d1:1d:
65:8b:a9:ea:69:63:c5:9d:bb:ac:5a:2a:26:0e:99:
c7:9c:d1:3a:37:27:d9:21:d0:40:f5:ac:73:00:4d:
d2:93:ac:d5:63:30:38:2d:32:57:cd:e0:16:ff:a1:
84:88:07:91:1d:37:e6:da:f3:37:9f:23:64:af:41:
06:8e:c9:fd:1b:8b:d8:a4:e5:76:4f:0a:2e:f7:30:
84:53:13:53:24:1c:10:b1:aa:f7:7a:27:ac:fb:a7:
b1:d6:36:7b:df:d9:a9:20:ae:33:b1:36:ab:1d:6e:
b2:7d:be:44:9c:81:b4:d5:6c:bb:55:ef:6b:e6:a9:
54:d6:7b:3e:ae:b3:19:fa:bc:1e:a9:7c:de:63:36:
72:99:78:4f:c4:da:3f:e0:1a:c3:f5:64:e4:dd:4a:
67:cb:2b:a1:ba:7f:0d:94:3f:a8:44:1e:55:99:f7:
35:91:9c:af:43:0e:5f:b2:95:b9:87:85:30:bd:55:
69:fb:8a:25:4a:65:3e:2d:ba:5f:62:57:e9:4b:23:
d1:33:49:58:cf:08:d4:c6:46:e7:17:e4:11:55:a3:
e2:46:de:bb:c8:8f:06:64:72:d1:e8:34:ec:17:85:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:29:78:2A:E9:D1:BA:28:3B:F1:EA:30:A4:27:A8:F8:B3:B9:02:43
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:56:af:11:34:d4:ea:51:8d:ca:93:24:de:da:7f:53:db:fc:
d4:a0:aa:ff:14:13:e7:a8:5d:50:c9:30:18:72:0f:4f:88:77:
30:55:f0:e5:f5:04:74:40:36:29:45:5c:70:a3:89:8f:c2:94:
9a:04:24:cb:e2:a5:57:33:ea:d8:79:fd:74:3c:87:ce:74:46:
a6:16:a5:23:37:02:89:5d:2d:a6:04:77:f4:d4:86:0b:d2:68:
18:b6:29:f2:51:8b:ba:ba:f6:7e:1f:43:b9:f4:88:fe:9a:44:
f7:a3:1a:3a:08:1c:21:95:b7:47:19:b1:ec:8b:12:90:ee:7c:
d1:7a:92:d8:80:8b:11:0a:83:af:bf:db:78:38:91:44:9c:de:
9b:f2:e2:39:e8:15:3f:70:9e:03:3d:6a:d7:9f:91:41:f1:af:
02:a8:c8:58:5e:a5:b3:10:85:11:73:0d:a3:0d:26:34:2e:26:
9f:b0:d9:32:dd:ac:fb:25:13:6c:5c:71:ac:86:81:a7:df:9f:
5a:45:02:e5:49:1f:a5:ec:ec:89:23:58:7b:c0:ac:4a:4d:d3:
bb:54:cf:0e:e9:00:b1:d4:f5:d3:ca:31:b5:2c:f8:4e:52:84:
e1:79:08:7b:a0:1b:98:dc:c2:c0:6f:14:98:b1:21:e7:03:a7:
b2:c1:4f:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StgM5dL14jq20m3FNidDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzM2M2U0N2U2OWViYzVkMWMyMjUxZGRkNWRhYzdjOTg5
ODk5MjIwHhcNMjYwNzI0MDYwMDI5WhcNMjYwNzI1MDYwMDI5WjAzMTEwLwYDVQQD
Eyg2NjI5NzgyYWU5ZDFiYTI4M2JmMWVhMzBhNDI3YThmOGIzYjkwMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bOiGA+d0ZugLmkj9Uuzuz/RqCu8
wnrdk6ra0R1li6nqaWPFnbusWiomDpnHnNE6NyfZIdBA9axzAE3Sk6zVYzA4LTJX
zeAW/6GEiAeRHTfm2vM3nyNkr0EGjsn9G4vYpOV2Twou9zCEUxNTJBwQsar3eies
+6ex1jZ739mpIK4zsTarHW6yfb5EnIG01Wy7Ve9r5qlU1ns+rrMZ+rweqXzeYzZy
mXhPxNo/4BrD9WTk3Upnyyuhun8NlD+oRB5Vmfc1kZyvQw5fspW5h4UwvVVp+4ol
SmU+LbpfYlfpSyPRM0lYzwjUxkbnF+QRVaPiRt67yI8GZHLR6DTsF4VShwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYpeCrp0booO/HqMKQnqPizuQJDMB8GA1UdIwQY
MBaAFDszY+R+aevF0cIlHd1drHyYmJkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMt
Y2NkYWRmN2Y2NWYyLzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMtY2NkYWRmN2Y2NWYy
LzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1avETTU
6lGNypMk3tp/U9v81KCq/xQT56hdUMkwGHIPT4h3MFXw5fUEdEA2KUVccKOJj8KU
mgQky+KlVzPq2Hn9dDyHznRGphalIzcCiV0tpgR39NSGC9JoGLYp8lGLurr2fh9D
ufSI/ppE96MaOggcIZW3Rxmx7IsSkO580XqS2ICLEQqDr7/beDiRRJzem/LiOegV
P3CeAz1q15+RQfGvAqjIWF6lsxCFEXMNow0mNC4mn7DZMt2s+yUTbFxxrIaBp9+f
WkUC5UkfpezsiSNYe8CsSk3Tu1TPDukAsdT108oxtSz4TlKE4XkIe6AbmNzCwG8U
mLEh5wOnssFPIw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:03 2026 by rpki-client