Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: QMYA2iJif6a04dCJtG/4QUFiCQBMx0sfIVzNWbSlcLc=
Subject key identifier: 96:94:F0:99:E3:BA:BD:62:41:FD:C4:82:04:6C:8A:51:D4:4C:DB:2E
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 019F92B6597F90886C11C5530CE3E02027DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 02D0
Signing time: Fri 24 Jul 2026 06:00:51 +0000
Manifest this update: Fri 24 Jul 2026 06:00:51 +0000
Manifest next update: Sat 25 Jul 2026 06:00:51 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: W1gGUi74DXVQPw5vfipKpnF8ndC1d3/bg8Oeh4e4k5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:59:7f:90:88:6c:11:c5:53:0c:e3:e0:20:27:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Jul 24 06:00:51 2026 GMT
Not After : Jul 25 06:00:51 2026 GMT
Subject: CN=9694f099e3babd6241fdc482046c8a51d44cdb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:ad:ae:a7:c6:e5:8c:19:8b:c0:0f:6b:09:
64:81:92:5b:4d:0c:40:6a:14:b8:36:94:3f:b8:56:
d6:d0:b6:5a:c9:39:16:8b:e3:ce:88:b3:39:d1:70:
c4:f0:f9:20:3f:42:d2:a2:4a:88:09:b1:99:9f:4f:
8e:c2:7f:02:62:9e:2d:7c:d5:5c:b7:ec:1b:c7:99:
ce:5d:03:ee:f5:59:90:62:b8:c4:24:cc:cc:55:52:
c4:f8:a5:06:11:66:c5:cb:1c:ab:ff:80:ba:df:d7:
e0:c1:90:ad:e1:f6:43:42:58:e7:9d:63:11:82:f5:
32:46:a1:9e:37:1d:44:14:0d:ee:8a:ce:1f:e9:12:
65:f3:bc:65:df:d9:0d:09:02:2d:ef:57:00:c4:8c:
37:d1:e5:f3:a5:d4:f5:67:d6:76:a1:ce:7a:ea:75:
79:7c:73:f4:98:c1:51:68:8f:f1:8e:e1:93:a9:ab:
99:23:68:af:49:10:6b:38:83:9a:42:b2:e1:02:14:
61:5c:d5:ac:22:28:91:b0:d3:07:c4:48:bb:fc:dd:
76:b9:df:1f:94:c4:34:00:69:66:87:0f:fc:13:84:
a6:53:e6:d8:04:f2:61:e6:fc:b7:75:aa:17:f4:56:
c0:08:1e:cd:a7:fe:ca:e1:9f:33:fd:1c:a6:a3:af:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:94:F0:99:E3:BA:BD:62:41:FD:C4:82:04:6C:8A:51:D4:4C:DB:2E
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9e:8b:cd:c0:f2:ff:a7:2c:b7:d4:d4:92:ce:8a:fe:98:76:
a8:0d:7d:60:e7:3b:8c:e9:4a:f8:92:a4:14:b1:08:60:67:b3:
e5:c7:90:84:f6:a4:0d:70:31:75:42:55:ba:a7:35:7b:86:46:
ed:fe:d7:a9:5b:b1:91:36:d9:31:35:e4:1c:4e:3f:12:2f:13:
2d:18:e7:0a:52:63:2e:4b:85:89:07:a7:28:1a:8a:67:29:67:
98:22:ab:63:74:ef:57:06:a0:84:45:3e:bf:f0:58:91:fe:14:
71:ba:4a:0d:28:9e:b9:83:97:bd:da:e9:64:32:fa:6c:ab:a5:
dc:3d:13:d0:fc:c2:fe:18:a9:f3:a5:10:a5:22:50:03:f1:ea:
e7:17:0d:65:4b:c4:bd:ad:9d:4e:40:b2:d3:cc:33:e8:91:b7:
94:f1:6d:72:2b:4c:cb:52:3f:c4:eb:d9:4b:19:81:c7:16:97:
26:fd:3b:9b:75:42:46:b7:11:80:93:d0:cb:5d:4b:f6:7a:dc:
07:48:7c:e5:b8:b1:ae:4c:ca:d9:7f:60:ca:8f:f4:69:33:4e:
7d:47:54:31:22:a3:c8:3b:d2:b2:b1:97:7e:cf:c4:73:54:89:
9e:10:bb:91:0e:1c:07:ea:27:c7:73:5e:7b:84:f9:f6:5c:ea:
55:4c:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:54 2026 by rpki-client