Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: jHYQWyPyy+YDcUwdSOMm4uS2/AQiv1Ne87ivKHXDb5w=
Subject key identifier: A2:13:1D:26:33:B9:5E:EF:60:9C:60:45:6C:5A:1C:8B:42:A6:AF:A8
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 019D281685E229C36405979877A74E381201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:00:57 +0000
Manifest this update: Thu 26 Mar 2026 03:00:57 +0000
Manifest next update: Fri 27 Mar 2026 03:00:57 +0000
Files and hashes: 1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: pxdCmYjujRfaxz/AniyK4mgguvcQbghbifRP5bQAOYQ=)
2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:85:e2:29:c3:64:05:97:98:77:a7:4e:38:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Mar 26 03:00:57 2026 GMT
Not After : Mar 27 03:00:57 2026 GMT
Subject: CN=a2131d2633b95eef609c60456c5a1c8b42a6afa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:5f:df:1f:5e:f0:66:04:50:61:00:99:25:
54:eb:71:f9:e7:e3:75:8a:f3:86:68:f6:64:4e:09:
9e:c7:4f:d5:2d:2c:04:9d:7f:16:5e:22:e0:06:70:
58:94:4a:85:5a:b3:2a:a1:55:78:9b:6c:ec:b4:57:
24:38:56:d9:07:8f:5f:f9:67:1e:31:72:f0:3f:05:
43:5b:f7:d7:3b:35:c8:81:6c:a3:d0:3d:89:7c:dc:
39:4b:e3:47:64:7b:6f:25:d9:b9:b0:80:61:2f:60:
30:c7:b2:9f:a5:b7:d8:0a:ff:65:81:79:7b:b8:2f:
b1:aa:a6:3f:fc:ca:b0:95:fa:f0:a6:86:2c:ed:a6:
8f:53:8a:4f:8a:35:f3:54:25:48:f3:37:31:fc:6d:
40:37:cf:25:22:2a:5d:48:0e:89:75:e4:61:42:0f:
15:84:b5:9c:d5:bf:94:df:c4:ca:62:04:06:2e:31:
e4:82:07:fd:bd:37:33:2c:95:16:ec:f0:78:24:20:
3b:95:74:7d:ce:c7:54:6f:c4:0e:02:8a:af:21:39:
17:d4:2d:85:e3:3d:52:b3:9b:a6:c1:a3:45:78:bb:
e9:ae:42:d4:4f:40:55:36:c8:75:57:5a:58:b5:29:
cd:90:8b:5d:fa:7d:91:e7:51:6d:85:45:9a:fd:98:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:13:1D:26:33:B9:5E:EF:60:9C:60:45:6C:5A:1C:8B:42:A6:AF:A8
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:81:e3:d1:85:d1:cc:72:7e:ab:51:a2:a1:fd:7c:97:4f:d8:
ae:ba:72:e3:4e:8d:93:0a:4a:48:03:c9:18:6c:5b:d8:c3:c7:
6f:72:23:2c:12:c5:92:12:d0:83:53:c5:7d:4f:db:3b:da:f0:
a6:9a:02:ff:6a:18:47:f4:d9:6a:89:17:4c:f1:37:08:22:e4:
8e:f6:58:b5:9e:0b:43:81:3c:91:c1:73:ee:59:db:16:51:cd:
55:fb:3e:b8:90:37:e4:f0:a2:a3:15:67:c1:c1:70:de:ae:a9:
a5:52:5b:76:b0:e0:4e:93:12:fd:09:c5:69:a0:3c:23:fa:d6:
89:e1:03:ae:f1:06:06:37:47:07:b3:d1:af:ad:78:10:f2:3e:
80:0c:b5:59:6e:82:d7:93:c3:18:06:4d:e6:69:a3:87:6d:61:
19:ef:c2:80:0c:9c:33:a1:0c:67:1b:60:75:84:66:f2:8b:04:
24:a3:70:ec:22:d0:ac:22:c6:77:b5:22:b4:26:d7:b4:29:2e:
30:54:65:25:5f:21:99:59:6b:ae:34:04:68:55:76:4f:21:48:
01:42:e4:22:00:ad:4d:69:7d:fe:f2:d8:9a:de:7f:08:f4:22:
0c:fb:97:a9:07:47:1b:c4:f1:91:95:88:cb:c5:2d:d7:2b:c9:
a3:7a:af:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFoXiKcNkBZeYd6dOOBIBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzliMjM4MmYzODUxMmU1OWVkMThlYmZhYTU5NmM5NTUy
MTI5MTAwHhcNMjYwMzI2MDMwMDU3WhcNMjYwMzI3MDMwMDU3WjAzMTEwLwYDVQQD
EyhhMjEzMWQyNjMzYjk1ZWVmNjA5YzYwNDU2YzVhMWM4YjQyYTZhZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0Rf3x9e8GYEUGEAmSVU63H55+N1
ivOGaPZkTgmex0/VLSwEnX8WXiLgBnBYlEqFWrMqoVV4m2zstFckOFbZB49f+Wce
MXLwPwVDW/fXOzXIgWyj0D2JfNw5S+NHZHtvJdm5sIBhL2Awx7KfpbfYCv9lgXl7
uC+xqqY//MqwlfrwpoYs7aaPU4pPijXzVCVI8zcx/G1AN88lIipdSA6JdeRhQg8V
hLWc1b+U38TKYgQGLjHkggf9vTczLJUW7PB4JCA7lXR9zsdUb8QOAoqvITkX1C2F
4z1Ss5umwaNFeLvprkLUT0BVNsh1V1pYtSnNkItd+n2R51FthUWa/Zhp3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKITHSYzuV7vYJxgRWxaHItCpq+oMB8GA1UdIwQY
MBaAFDs5sjgvOFEuWe0Y6/qllslVISkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMt
OGI4ZDc2YjJkMjRlLzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMtOGI4ZDc2YjJkMjRl
LzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoHj0YXR
zHJ+q1Giof18l0/Yrrpy406NkwpKSAPJGGxb2MPHb3IjLBLFkhLQg1PFfU/bO9rw
ppoC/2oYR/TZaokXTPE3CCLkjvZYtZ4LQ4E8kcFz7lnbFlHNVfs+uJA35PCioxVn
wcFw3q6ppVJbdrDgTpMS/QnFaaA8I/rWieEDrvEGBjdHB7PRr614EPI+gAy1WW6C
15PDGAZN5mmjh21hGe/CgAycM6EMZxtgdYRm8osEJKNw7CLQrCLGd7UitCbXtCku
MFRlJV8hmVlrrjQEaFV2TyFIAULkIgCtTWl9/vLYmt5/CPQiDPuXqQdHG8TxkZWI
y8Ut1yvJo3qvmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:20 2026 by rpki-client