Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: fIjdsqGd+VduqyiPhrfINosGugkKOmgF9m4t0mllWKY=
Subject key identifier: B6:4A:17:2A:E4:A3:52:55:67:97:4D:B1:A1:23:79:99:FF:89:16:1C
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 019E1DFE4E1E326A1C66616397FB02F60C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 020F
Signing time: Tue 12 May 2026 21:01:05 +0000
Manifest this update: Tue 12 May 2026 21:01:05 +0000
Manifest next update: Wed 13 May 2026 21:01:05 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: xd25BVHrY3dUhgqTnlB1o/D0c5pOzI5OD+RFFiILekE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:4e:1e:32:6a:1c:66:61:63:97:fb:02:f6:0c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: May 12 21:01:05 2026 GMT
Not After : May 13 21:01:05 2026 GMT
Subject: CN=b64a172ae4a3525567974db1a1237999ff89161c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:26:a2:c0:e3:85:2d:14:58:a8:7e:05:f8:
56:b9:26:d1:6c:09:09:96:cc:3c:93:67:eb:52:59:
68:8b:98:00:b9:0a:56:7b:91:09:95:f0:e1:8c:e3:
0e:8c:a2:80:30:82:ea:f2:4b:83:55:3b:14:78:dc:
fb:7c:ec:29:fe:44:4c:b1:d2:91:23:3b:37:d0:44:
c9:bb:a0:79:38:cf:06:bb:f9:ac:b6:49:20:c1:39:
d8:c1:cf:a1:1a:72:ea:fc:44:45:1b:d9:9e:6b:16:
ed:04:7e:53:a3:6b:31:e2:c6:1e:90:8d:cd:03:67:
0c:c5:b2:7e:71:d2:e4:16:d7:20:fb:79:41:5b:c5:
f6:e1:e5:64:75:34:d9:99:ae:7a:9b:d1:95:4c:fa:
25:6d:63:11:b4:f5:9b:7f:c7:d6:bc:84:0c:40:27:
4d:5d:33:11:d1:46:83:4b:9b:ae:40:c4:c1:72:f0:
71:43:fb:3b:9f:68:ed:48:a6:fb:6a:9a:5f:ae:6d:
b9:9a:7e:62:91:51:3e:e5:62:c8:89:cc:a4:df:f9:
66:8f:d4:c2:73:75:29:f2:c4:24:84:9c:6d:2c:1c:
53:74:f9:ce:60:e2:3b:9e:97:3a:ef:0d:90:53:5f:
09:45:74:d9:40:92:5b:31:fc:13:65:ec:33:a6:b2:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4A:17:2A:E4:A3:52:55:67:97:4D:B1:A1:23:79:99:FF:89:16:1C
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:83:64:a1:10:7a:5c:c5:48:87:0b:a5:ef:98:ed:a2:56:6c:
3e:33:38:56:95:25:b8:c8:bb:08:7b:d0:fc:0d:59:70:02:16:
ff:7b:ac:59:26:8d:11:a0:ed:c5:5a:7e:d4:4a:e3:64:a5:87:
de:26:3d:1f:46:d0:80:2f:f5:54:e4:10:23:73:ba:1a:16:c4:
6c:e7:94:4c:44:36:8d:bc:e7:20:00:b7:14:98:24:22:62:1d:
72:5f:ed:41:bf:0b:4f:92:e8:e6:ff:8c:21:8a:4e:2c:93:c4:
50:c0:ef:d9:fe:75:46:2a:95:08:ac:a1:c3:35:f0:a6:0a:16:
b5:61:b4:db:5e:51:ae:73:98:1c:d9:38:5f:e4:b2:22:55:bf:
1e:4e:20:f1:ca:59:85:d7:9c:56:b0:ff:78:b8:4c:30:d2:c4:
6d:6d:f3:5b:96:c9:ab:00:85:03:a6:26:e3:6a:be:23:06:d7:
79:e3:5a:ad:45:3d:68:77:a9:33:2a:e9:d1:99:76:9b:e9:40:
78:36:89:06:e8:97:62:be:21:2a:a6:3a:7a:ec:d0:b2:fe:12:
f0:d2:bc:54:10:9b:5e:b7:71:f9:2f:5b:96:d7:b3:76:68:a8:
5c:f0:35:4b:67:9d:66:9e:94:5f:35:61:b5:42:73:7e:e6:b8:
2e:4d:24:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/k4eMmocZmFjl/sC9gxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzM2NkNjI3OWUzYWRjMTk5Y2NlZDE0NDhmODA4ODE4NDI5
NTlkYmIwHhcNMjYwNTEyMjEwMTA1WhcNMjYwNTEzMjEwMTA1WjAzMTEwLwYDVQQD
EyhiNjRhMTcyYWU0YTM1MjU1Njc5NzRkYjFhMTIzNzk5OWZmODkxNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs14mosDjhS0UWKh+BfhWuSbRbAkJ
lsw8k2frUlloi5gAuQpWe5EJlfDhjOMOjKKAMILq8kuDVTsUeNz7fOwp/kRMsdKR
Izs30ETJu6B5OM8Gu/mstkkgwTnYwc+hGnLq/ERFG9meaxbtBH5To2sx4sYekI3N
A2cMxbJ+cdLkFtcg+3lBW8X24eVkdTTZma56m9GVTPolbWMRtPWbf8fWvIQMQCdN
XTMR0UaDS5uuQMTBcvBxQ/s7n2jtSKb7appfrm25mn5ikVE+5WLIicyk3/lmj9TC
c3Up8sQkhJxtLBxTdPnOYOI7npc67w2QU18JRXTZQJJbMfwTZewzprIVRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZKFyrko1JVZ5dNsaEjeZn/iRYcMB8GA1UdIwQY
MBaAFKM81ieeOtwZnM7RRI+AiBhClZ27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2UwNzYtMTI2ZS00ZTQ4LWE3NTkt
YWE1YmIwYWJhYzIzLzEvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82Y2UwNzYtMTI2ZS00ZTQ4LWE3NTktYWE1YmIwYWJhYzIz
LzEvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4NkoRB6
XMVIhwul75jtolZsPjM4VpUluMi7CHvQ/A1ZcAIW/3usWSaNEaDtxVp+1ErjZKWH
3iY9H0bQgC/1VOQQI3O6GhbEbOeUTEQ2jbznIAC3FJgkImIdcl/tQb8LT5Lo5v+M
IYpOLJPEUMDv2f51RiqVCKyhwzXwpgoWtWG0215RrnOYHNk4X+SyIlW/Hk4g8cpZ
hdecVrD/eLhMMNLEbW3zW5bJqwCFA6Ym42q+IwbXeeNarUU9aHepMyrp0Zl2m+lA
eDaJBuiXYr4hKqY6euzQsv4S8NK8VBCbXrdx+S9bltezdmioXPA1S2edZp6UXzVh
tUJzfua4Lk0kSw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:35:46 2026 by rpki-client