Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: uUp8cwijxGCzs59JhpJBKWTtNlL64O/2Wq/DNolciL4=
Subject key identifier: 84:04:5C:27:60:93:AE:8D:81:D8:35:F4:C0:A5:A0:87:83:21:AD:5B
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 01A0D15BBE7B35E247CE6FAB616E255074C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 0A4D
Signing time: Thu 24 Sep 2026 03:00:45 +0000
Manifest this update: Thu 24 Sep 2026 03:00:45 +0000
Manifest next update: Fri 25 Sep 2026 03:00:45 +0000
Files and hashes: 1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: Ti3xM8V8AwswY88LR32p8xJpUC3lOuXbJgp5jPAtZv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:be:7b:35:e2:47:ce:6f:ab:61:6e:25:50:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Sep 24 03:00:45 2026 GMT
Not After : Sep 25 03:00:45 2026 GMT
Subject: CN=84045c276093ae8d81d835f4c0a5a0878321ad5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1e:6b:72:69:07:53:c1:ad:d2:71:cf:47:88:
52:4b:0d:de:16:86:fc:a2:7f:91:e7:21:c4:66:d4:
e1:3c:31:3d:41:79:67:15:5c:d8:12:6b:1f:b1:1e:
e7:33:e6:25:01:1a:30:1c:fe:b7:22:d9:c5:0e:21:
84:40:3c:62:fc:e9:c0:ec:64:eb:4c:c8:38:f7:be:
07:c4:a8:3a:7c:34:b7:e5:1e:b4:da:93:91:1e:8f:
71:c0:bb:db:19:86:52:a6:ba:bc:e3:4b:5a:26:4a:
c2:5d:c7:43:96:59:b7:45:58:8b:ff:ab:05:fc:44:
8d:5a:c4:bc:2a:5d:ec:2a:6f:80:f1:48:68:54:1b:
2c:51:fc:6b:b9:5f:6f:10:1b:50:e1:ee:2c:82:41:
50:92:bc:50:82:1c:22:94:2d:d5:38:31:5f:6c:5e:
b2:5f:2a:99:7b:b3:f3:17:0f:5f:c5:e4:db:8f:2a:
7f:bc:72:3d:c9:ff:64:80:4a:8d:51:8a:4e:14:af:
d7:20:7f:81:ad:88:bf:24:10:a9:01:23:94:78:3d:
d3:2e:bd:84:0b:8c:b6:a8:f9:92:6e:6d:2b:02:99:
18:ea:ff:47:1d:ae:15:27:1e:1b:88:2a:0c:14:f4:
b1:28:07:3f:cb:64:76:b8:04:99:df:5f:1a:8f:f8:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:04:5C:27:60:93:AE:8D:81:D8:35:F4:C0:A5:A0:87:83:21:AD:5B
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b9:bc:f9:d3:4d:29:93:e6:1b:78:12:0d:99:59:85:16:42:
66:41:ff:0b:f9:d3:18:5d:19:60:8e:67:5f:1a:31:4a:be:38:
96:d2:fc:3f:be:ad:0f:a2:7d:50:7d:e5:69:1b:a8:c8:c4:e0:
f4:8f:a5:d6:85:f4:fe:6b:bc:e8:f3:0b:f3:61:65:ae:2e:8c:
99:ed:3c:92:e2:53:c5:ad:43:aa:05:b1:1b:f3:cb:44:f6:97:
57:65:ee:17:85:f7:3c:76:69:ee:e2:4c:4d:ff:7f:e4:99:23:
0a:e4:ec:6a:58:00:b6:2c:9f:b3:b6:e1:7b:ec:4b:86:e0:f7:
fa:86:2b:2d:2b:18:e4:3f:ca:be:19:45:7d:e0:5a:21:e9:9f:
88:26:5e:19:7c:6f:f2:54:0b:bf:0e:c0:e4:56:bc:c7:19:00:
07:d2:3a:24:92:e9:9a:09:0e:aa:f6:94:fa:6d:c0:84:d5:8b:
71:e3:d8:ae:3f:f1:a9:ad:2f:26:3c:5b:58:b3:67:03:a8:a5:
65:51:ef:e7:1e:d0:61:5f:1b:96:99:75:b8:05:d9:d3:57:40:
aa:77:29:fb:7c:01:38:0c:ca:ad:bf:bc:79:3f:f6:0a:ac:da:
d6:40:06:55:5b:0d:5a:f9:40:d5:d7:f3:18:94:ff:62:1d:a8:
68:46:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:40:33 2026 by rpki-client