
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: RrHfrxRVddWqOfig01++mIxSyfZCZzFACVaI2Ty5S90=
Subject key identifier: 22:1F:4F:64:B0:86:96:A9:76:7E:EB:35:2E:1D:4E:5F:E5:DC:B1:A9
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 01A0CEC88F828C551265AA40351680BA5D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 15:00:45 +0000
Manifest this update: Wed 23 Sep 2026 15:00:45 +0000
Manifest next update: Thu 24 Sep 2026 15:00:45 +0000
Files and hashes: 1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: x3vsOAQgRclLFsE+ygjviZW9yOHdGbegIF50DTJbkpc=)
2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:8f:82:8c:55:12:65:aa:40:35:16:80:ba:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Sep 23 15:00:45 2026 GMT
Not After : Sep 24 15:00:45 2026 GMT
Subject: CN=221f4f64b08696a9767eeb352e1d4e5fe5dcb1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:87:06:ff:e3:34:99:2c:a6:2b:d1:4b:8f:
7d:06:e1:37:a4:92:db:81:f5:6d:02:21:c1:58:57:
97:7c:e2:ad:c5:02:bc:14:4e:65:d9:e3:02:85:92:
11:96:f2:23:06:e3:df:1f:3d:ac:a2:6b:49:fc:64:
db:8b:26:f7:19:68:a6:d4:22:51:90:2b:36:fd:51:
8e:57:91:6f:34:33:5a:7b:d0:3a:0d:45:29:8a:40:
e7:84:ff:27:2d:61:46:b4:6b:44:f0:09:31:85:cc:
2a:4c:bf:40:54:86:0d:07:fc:42:cd:69:09:71:43:
eb:e5:dc:87:e9:fb:73:bb:9e:59:f0:5b:2f:f9:76:
ca:5d:e6:86:fc:a6:31:bc:5c:fb:c9:03:32:56:df:
79:1f:42:59:fb:0f:06:de:65:ac:b2:dd:8f:c9:9f:
d1:33:a4:aa:30:fb:56:1b:e6:bf:7c:26:bd:36:1f:
e3:3d:d0:7e:84:40:ac:6b:0e:76:e3:eb:7d:ad:6f:
58:34:54:81:18:35:a0:12:01:67:14:fb:86:71:58:
6c:5b:bb:82:34:73:5a:35:99:5e:fc:53:54:e6:84:
57:f0:98:28:81:4c:27:47:ba:cb:10:50:be:65:81:
45:d0:d2:64:7b:11:7c:4b:c9:07:b9:d4:f8:3b:ee:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1F:4F:64:B0:86:96:A9:76:7E:EB:35:2E:1D:4E:5F:E5:DC:B1:A9
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b6:cf:3d:ed:6a:95:12:58:2e:c0:84:b3:49:7f:ef:70:e8:
15:92:78:76:2e:f8:c1:fa:63:c4:4f:97:89:1c:e1:c1:ad:03:
d4:d0:99:a0:29:15:6c:1a:58:9c:98:ee:06:9e:10:87:a9:8f:
13:5a:89:a9:74:f5:59:7f:43:14:9a:50:f1:64:13:65:c6:58:
e6:c1:59:be:41:e0:6a:f3:b6:66:e3:4d:ab:5f:0b:48:0a:71:
02:3f:73:e4:b1:1f:22:3d:b2:ee:d1:a4:c6:29:e5:dd:65:30:
1a:f5:ef:0b:7f:9a:1b:25:a5:f7:13:ff:6b:f0:13:cf:12:17:
97:05:67:0e:ef:5c:53:73:bf:4b:74:da:a6:f4:29:e3:97:39:
4a:61:85:96:75:0a:2c:14:c4:c1:28:5b:36:91:77:0c:78:d7:
c4:7e:41:9f:6d:7b:8c:81:e1:58:6d:ea:e3:d5:69:21:50:6b:
12:75:48:a5:34:b5:b1:42:f8:d0:5a:fe:b5:aa:e9:8a:6d:cd:
c9:67:d0:3f:71:c8:d5:9d:02:e7:ff:0b:6e:a7:b1:b8:63:2d:
bd:e6:88:a7:37:90:93:92:f9:a9:28:81:e0:61:e2:df:1b:11:
38:83:86:2f:03:f1:9a:af:ca:da:59:54:fb:44:ca:5d:73:d9:
16:ee:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:05:50 2026 by rpki-client