Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: cWzYJwcJo+pW7JorGa5Us1EEwEWWNi90g9JeECAwBs8=
Subject key identifier: 32:6D:4F:F6:29:C7:D6:F6:29:62:65:08:EC:61:6E:EE:0F:B7:FD:3F
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 019D26CD8927396FF040414CAA790F4A2A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 018F
Signing time: Wed 25 Mar 2026 21:01:37 +0000
Manifest this update: Wed 25 Mar 2026 21:01:37 +0000
Manifest next update: Thu 26 Mar 2026 21:01:37 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: lXMPw2jwmiCmQ6WCzidw2k0NdUddu44FvR6fEB3H9DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:89:27:39:6f:f0:40:41:4c:aa:79:0f:4a:2a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Mar 25 21:01:37 2026 GMT
Not After : Mar 26 21:01:37 2026 GMT
Subject: CN=326d4ff629c7d6f629626508ec616eee0fb7fd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:67:75:6a:d5:f9:86:86:30:d4:80:27:37:
3a:62:82:ff:64:c6:b4:ec:b5:52:93:b4:5a:91:a1:
66:67:b0:20:ba:46:1f:c3:c2:1e:15:89:c7:05:32:
40:50:d7:8c:6e:63:b7:38:1f:49:04:7d:a2:4e:98:
85:d4:e4:cb:7c:ed:9f:9e:63:a7:35:ab:91:52:f3:
93:52:dc:1e:a9:45:ee:a9:0c:d9:45:bd:9e:01:dd:
17:46:04:45:54:9f:ff:8e:17:28:1e:2f:63:52:a2:
fe:c6:3b:75:05:61:8f:4b:c4:ef:69:e1:9a:e8:72:
f3:37:91:f5:f4:8c:d7:c1:22:37:80:c9:28:bc:b4:
c4:b7:74:92:e9:10:08:d8:4c:0b:64:a7:00:1e:a1:
05:91:56:42:78:85:db:a0:19:98:82:92:a5:d4:1b:
3b:f1:53:f8:58:69:e0:cc:7d:0d:d5:a4:44:29:91:
ee:6c:d7:8f:cd:3b:28:f8:6d:36:55:66:86:5d:dd:
ac:f6:81:a5:14:12:89:b0:ae:c6:fc:dd:6e:12:28:
2d:a0:a1:5b:e3:ae:1f:c5:46:a9:56:d7:a6:02:43:
25:fd:e6:41:5f:29:67:a2:8f:83:60:44:24:81:c8:
7d:1f:df:fc:c6:14:94:09:2f:ab:8e:b5:d1:9e:6c:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:4F:F6:29:C7:D6:F6:29:62:65:08:EC:61:6E:EE:0F:B7:FD:3F
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d9:5f:9e:cf:14:ce:a4:56:fc:b1:90:e5:08:f5:74:14:17:
63:88:11:80:e4:62:30:f9:c1:37:30:04:fb:41:8f:03:53:f5:
23:ab:c4:57:f8:12:3b:2e:ce:f8:ff:8a:e0:59:48:da:d0:d0:
4f:ab:6e:e3:f0:98:cf:b5:15:26:ab:da:bc:08:71:73:be:91:
a4:b0:ab:da:e3:5d:d6:84:2a:16:0d:2d:c6:c4:8d:a6:a0:a2:
36:3c:d8:f7:27:fd:57:8d:01:bc:72:2e:f7:6a:ae:69:9d:23:
50:13:92:91:79:aa:07:e5:03:89:f8:19:e0:c6:7f:00:ea:55:
26:30:6b:af:c4:ec:4e:ab:fd:6c:6a:d2:83:56:41:c9:52:ad:
58:1d:9c:e9:a7:3d:35:a4:26:0a:b7:26:2e:6d:75:c8:fa:9c:
ca:91:0c:17:6a:b6:a0:fb:94:ce:86:01:05:ef:b5:fe:56:0f:
bd:5e:fa:c3:27:8b:28:3c:c5:2b:0d:61:4d:9b:b2:4e:e7:9a:
a2:f4:b5:b0:c1:6d:4a:b4:a3:a5:d9:e0:6c:96:39:46:4a:02:
88:5b:2b:e5:8e:22:55:a9:c3:0d:23:7c:69:b4:e9:73:fd:93:
92:33:13:d7:d3:8b:81:5c:c8:af:ce:17:7c:2e:6f:ae:3d:90:
c5:40:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:22 2026 by rpki-client