Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: lZjT2q6z5XiyiT/fe4t4YhAFaif5uYQKUFkCQ5EwiTA=
Subject key identifier: 06:07:82:C8:60:7A:C2:16:33:B2:B5:42:F6:20:F5:97:76:29:1B:78
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 01A1DDCBD4713D3A0437ADE7C318161B7870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 0AD8
Signing time: Sun 15 Nov 2026 06:01:25 +0000
Manifest this update: Sun 15 Nov 2026 06:01:25 +0000
Manifest next update: Mon 16 Nov 2026 06:01:25 +0000
Files and hashes: 1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: TaGHSxUajEcNh/SumxRd1rWkmf7YAxrhr/waBN3OAxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:d4:71:3d:3a:04:37:ad:e7:c3:18:16:1b:78:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Nov 15 06:01:25 2026 GMT
Not After : Nov 16 06:01:25 2026 GMT
Subject: CN=060782c8607ac21633b2b542f620f59776291b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:3e:d6:bb:30:22:83:89:bd:8e:14:35:b7:
fa:a0:b9:b4:5e:2b:2e:4b:08:fe:d0:30:00:82:aa:
82:cb:53:a6:31:38:96:25:9f:a5:7f:70:0c:51:c4:
f2:e2:f4:ad:cf:6a:d1:83:e1:05:71:42:17:20:e8:
a6:5b:87:42:22:e0:81:e1:9b:43:9d:c4:28:65:24:
62:29:38:c0:73:ca:17:34:7f:43:47:2d:6a:5c:6d:
53:0e:d6:a7:00:10:10:42:65:c3:cc:25:2c:26:c4:
8a:ed:51:3f:b6:7f:24:7f:b8:57:bc:72:93:ab:8f:
f6:bc:f3:a2:eb:5d:46:8e:39:3f:de:21:50:59:f8:
06:bf:69:45:1e:3e:d4:40:9a:cc:f3:36:c0:de:5b:
ce:ac:c9:57:9c:b1:6e:27:16:e1:37:38:72:45:a5:
6f:0e:36:f5:5b:90:d0:ab:d4:8b:b9:a6:c6:0b:cb:
e3:be:94:f1:cb:8a:72:8f:0c:0f:1d:3b:56:60:8f:
07:e0:1a:c0:ee:37:52:aa:72:c6:55:65:ca:4d:8f:
d1:80:40:6f:b4:5c:12:35:ad:63:54:53:35:41:57:
0b:de:63:c7:ff:71:39:95:6f:bf:ee:04:cc:db:53:
9e:89:83:71:01:8b:23:62:3e:ab:b1:e5:3a:b5:0d:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:07:82:C8:60:7A:C2:16:33:B2:B5:42:F6:20:F5:97:76:29:1B:78
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:27:09:70:66:21:9b:9e:19:94:8a:f1:a9:88:31:c1:c1:a0:
3a:64:7d:41:cc:04:5c:e8:47:76:83:aa:25:5f:75:79:d5:94:
50:6e:d2:9a:ce:9d:31:04:7d:7c:3a:7b:58:d4:c4:00:7c:51:
00:32:38:41:7b:95:85:40:2c:90:2f:75:e7:ac:be:77:c2:fd:
4c:58:29:45:12:57:f6:0c:e2:0a:41:7c:77:1d:a1:b7:eb:45:
ef:4c:68:85:21:f5:4a:62:af:af:28:0f:09:45:13:93:53:81:
a4:15:ea:b6:cb:35:af:88:aa:59:96:66:f1:f7:fe:6d:91:f2:
ee:16:3f:6f:21:34:2a:a5:3a:db:6d:40:7c:d6:10:eb:ee:ed:
e4:52:6f:2b:50:0f:91:86:a1:8e:25:8a:3e:4a:be:60:69:81:
e1:4b:c4:fd:59:b6:25:8a:01:5e:85:5c:f3:b5:47:5c:51:a6:
13:d9:20:9c:0e:e5:69:2b:f6:21:a4:3b:6f:91:7d:b2:e7:61:
d1:ba:b5:c1:25:dd:81:12:21:c9:9c:44:30:a8:f2:65:9c:fb:
a8:26:be:d2:47:7d:ab:7e:2e:a8:6d:04:52:27:55:86:0b:3b:
77:b5:3e:05:09:7a:f6:14:15:d4:d2:25:98:5f:ab:6b:6e:b8:
74:6d:e9:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdy9RxPToEN63nwxgWG3hwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiM2EwNWRiYjljNzdmYTE2ZWQxMDQ2OTc0N2E1YzZlNmVh
Yjg4ZGUwHhcNMjYxMTE1MDYwMTI1WhcNMjYxMTE2MDYwMTI1WjAzMTEwLwYDVQQD
EygwNjA3ODJjODYwN2FjMjE2MzNiMmI1NDJmNjIwZjU5Nzc2MjkxYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMQ+1rswIoOJvY4UNbf6oLm0Xisu
Swj+0DAAgqqCy1OmMTiWJZ+lf3AMUcTy4vStz2rRg+EFcUIXIOimW4dCIuCB4ZtD
ncQoZSRiKTjAc8oXNH9DRy1qXG1TDtanABAQQmXDzCUsJsSK7VE/tn8kf7hXvHKT
q4/2vPOi611Gjjk/3iFQWfgGv2lFHj7UQJrM8zbA3lvOrMlXnLFuJxbhNzhyRaVv
Djb1W5DQq9SLuabGC8vjvpTxy4pyjwwPHTtWYI8H4BrA7jdSqnLGVWXKTY/RgEBv
tFwSNa1jVFM1QVcL3mPH/3E5lW+/7gTM21OeiYNxAYsjYj6rseU6tQ2yCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYHgshgesIWM7K1QvYg9Zd2KRt4MB8GA1UdIwQY
MBaAFDs6Bdu5x3+hbtEEaXR6XG5uq4jeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgt
YTAxYzM3Yjg4NzI4LzEvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgtYTAxYzM3Yjg4NzI4
LzEvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIycJcGYh
m54ZlIrxqYgxwcGgOmR9QcwEXOhHdoOqJV91edWUUG7Sms6dMQR9fDp7WNTEAHxR
ADI4QXuVhUAskC9156y+d8L9TFgpRRJX9gziCkF8dx2ht+tF70xohSH1SmKvrygP
CUUTk1OBpBXqtss1r4iqWZZm8ff+bZHy7hY/byE0KqU6221AfNYQ6+7t5FJvK1AP
kYahjiWKPkq+YGmB4UvE/Vm2JYoBXoVc87VHXFGmE9kgnA7laSv2IaQ7b5F9sudh
0bq1wSXdgRIhyZxEMKjyZZz7qCa+0kd9q34uqG0EUidVhgs7d7U+BQl69hQV1NIl
mF+ra264dG3pIg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:09:54 2026 by rpki-client