Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: d40rUGZ4vmoxbqGQqOPwy5XdzOGRwLfPkq+DuFiDE68=
Subject key identifier: 43:38:52:85:9D:06:BE:20:2F:33:93:A8:09:60:CD:50:AF:3F:48:A4
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 01A0EA770FC3ED7FC8202F276EEFFA61D722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 00:01:06 +0000
Manifest this update: Tue 29 Sep 2026 00:01:06 +0000
Manifest next update: Wed 30 Sep 2026 00:01:06 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: IBXB+83oU+mMYB5pSjWxBu3teo8fYuP/3CGkumPtixU=)
2: j6GSjngp4zBMa0A6Up3-vP_HpYA.roa (hash: eFIS08YcHeuG7OXuLasqB4hIQnIZETYTn/VjLjZa0pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:0f:c3:ed:7f:c8:20:2f:27:6e:ef:fa:61:d7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Sep 29 00:01:06 2026 GMT
Not After : Sep 30 00:01:06 2026 GMT
Subject: CN=433852859d06be202f3393a80960cd50af3f48a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:66:49:50:d6:4e:bf:66:8f:d0:f6:f3:bd:
9e:77:cb:d3:a9:98:e6:99:95:f1:0e:ee:97:b9:e4:
0f:c8:c6:43:6d:de:7b:78:80:d3:25:bc:be:4b:92:
81:06:09:1a:f4:62:1c:44:55:5c:45:1e:6e:50:d8:
ea:19:ed:d0:1a:54:9a:83:7b:f3:8e:55:51:32:9b:
db:fa:81:cb:ec:25:79:57:35:38:7b:6d:d4:34:8e:
65:27:22:0c:35:0e:bd:9a:78:88:f8:6e:4d:d8:2d:
2f:8b:91:2d:d8:5b:51:e8:20:8d:7e:07:06:4b:55:
9a:93:6e:13:18:5a:57:18:5f:ed:3f:e1:2a:2b:97:
ba:dc:da:c3:bb:80:0a:9f:8e:23:43:57:f1:d4:50:
15:6f:d9:e9:a1:52:7c:cc:22:40:64:b8:fc:6f:03:
7c:6d:62:8a:9a:31:dc:bb:30:1d:07:5e:6a:7e:e2:
78:b2:41:e0:b2:4c:2b:41:78:50:34:28:fc:fe:6c:
0f:e0:04:88:8e:8d:56:d0:51:63:da:ea:15:5a:7f:
9a:58:8b:d3:60:29:92:10:a6:ef:36:df:51:72:02:
6b:80:59:4e:0c:67:2f:13:b2:ca:35:c9:57:ae:a2:
0e:85:46:c4:57:61:f4:06:ce:af:d0:92:ff:4e:b2:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:52:85:9D:06:BE:20:2F:33:93:A8:09:60:CD:50:AF:3F:48:A4
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:aa:ad:72:bb:94:dc:72:f9:bc:95:95:c8:27:93:07:bf:04:
45:77:a3:17:06:e8:35:2d:fb:9d:f6:3d:c2:02:f4:e7:1a:8d:
97:82:52:9b:7d:6e:0f:de:d4:54:cb:18:90:8f:bb:6e:13:76:
7f:96:6c:4e:b9:74:4b:1d:00:54:62:07:2c:b5:f2:73:30:c5:
9e:07:32:c8:dd:97:1d:1c:15:6c:17:04:fc:e8:2e:4e:00:62:
66:6b:d0:17:15:11:64:12:b9:78:6d:16:3a:7e:e3:63:9f:21:
55:4a:8b:bf:6d:12:d9:1b:40:c6:7f:1a:fe:c4:61:ac:75:6e:
34:34:e4:1e:d3:8c:34:5b:c1:21:c8:1f:02:7a:e9:12:73:d3:
cd:8d:b1:ac:5c:b0:1e:ff:87:a8:67:fe:06:88:83:e8:bd:74:
84:35:2a:54:ab:f3:03:8a:de:a0:c5:03:7e:a8:67:41:41:98:
55:00:7f:6d:50:29:e1:53:be:b9:b6:bd:6a:4f:2d:9e:2b:4f:
f6:6c:1a:79:10:59:ad:b7:c4:9e:ee:e7:c9:76:b6:39:b0:9e:
ea:ab:c9:d3:d7:df:e5:ee:a8:20:be:92:3f:1d:cb:9f:cc:bb:
44:a9:25:9b:74:b6:0b:1f:89:25:60:ac:63:b5:c0:fc:fc:d8:
27:b4:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:58:50 2026 by rpki-client