Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: qtM53RgyV+ncZQuiQfy4mjUPTB8gTvjV41EZFyOM29w=
Subject key identifier: BB:63:92:A7:BE:B5:FB:28:13:59:C4:27:F4:93:FF:76:84:16:37:E9
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 01A0EC660E51452792B1C56F4126AE23E200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 0383
Signing time: Tue 29 Sep 2026 09:01:46 +0000
Manifest this update: Tue 29 Sep 2026 09:01:46 +0000
Manifest next update: Wed 30 Sep 2026 09:01:46 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: E6CKvqmo2yZOpulmHghoTTJxpXyN9qsVF4c9Cyqzn+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:66:0e:51:45:27:92:b1:c5:6f:41:26:ae:23:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Sep 29 09:01:46 2026 GMT
Not After : Sep 30 09:01:46 2026 GMT
Subject: CN=bb6392a7beb5fb281359c427f493ff76841637e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:22:ad:cf:87:7d:03:10:d7:c7:3c:40:8a:
59:c1:87:40:e9:9f:07:cc:e8:ac:58:ef:a0:33:49:
df:c4:13:85:2a:32:16:0c:d8:42:60:ee:ac:6f:82:
83:b8:6d:5a:be:db:ac:a6:b6:41:63:12:d9:1f:1a:
b1:b0:2f:5a:b0:1a:fa:11:fa:fe:0b:18:48:86:c3:
25:82:96:fc:be:90:2e:10:00:ee:64:bc:4b:35:87:
8c:b8:76:0b:2e:dc:21:19:34:93:65:93:a2:d1:61:
2a:01:0a:4b:29:a0:e1:6d:16:86:b7:42:b6:19:8d:
28:c9:0b:77:58:16:db:01:de:a5:d8:d8:97:0a:c2:
93:d4:b5:fb:f6:d3:60:f9:18:63:f5:fa:44:ea:5c:
0a:cf:39:d6:f9:26:ad:5d:5c:b2:ba:97:7b:a0:b9:
66:48:cd:f0:4e:5d:22:f1:82:81:e2:17:5c:fb:41:
e2:a4:16:bc:47:39:73:68:4a:fa:1e:7e:64:50:59:
72:72:2f:88:0e:47:8b:e4:a7:65:ed:d5:1b:bc:9d:
b6:00:69:7d:93:15:ba:81:ee:cc:c4:2a:c7:99:5f:
eb:90:2b:10:05:b8:e7:ae:49:a8:1d:0c:d7:35:6b:
f6:52:cb:04:00:72:c7:d3:1f:a2:62:e3:3d:d4:12:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:92:A7:BE:B5:FB:28:13:59:C4:27:F4:93:FF:76:84:16:37:E9
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:95:63:24:32:be:3f:36:08:77:36:a9:b0:2d:32:6e:11:23:
c7:a7:d9:7f:53:9a:da:f0:c2:a3:13:85:a5:f9:fe:64:57:87:
7b:bc:3e:06:dc:b2:73:38:62:d3:05:87:b4:6c:88:37:fe:2f:
92:36:e9:67:22:63:86:0e:fe:b0:49:41:a2:09:6e:c7:bc:15:
19:3c:b5:5e:86:38:b5:30:ba:52:96:bf:67:ba:e5:d4:10:e9:
b5:31:88:06:97:f7:cb:a4:ea:e4:17:da:80:0c:47:c8:a6:b0:
a8:f4:e9:00:71:b4:df:04:ff:06:d8:79:6e:55:70:dc:34:96:
3e:0a:c5:d1:63:e8:2a:71:84:c4:b2:85:91:48:df:73:bb:0e:
84:68:cb:29:17:47:0e:f6:24:21:13:58:33:8a:83:69:c6:9d:
5c:ea:77:d9:97:f1:eb:ed:19:0a:3c:3a:30:f8:a9:e7:cf:8d:
1d:36:ec:9c:6a:0d:d5:07:a7:f1:e2:dd:5f:24:a5:b5:b6:29:
b7:59:92:c0:fa:00:c2:6d:c3:83:29:6e:3d:cd:39:f9:ab:d9:
f3:e8:c7:e4:19:1d:f7:c2:bc:11:24:2c:7b:3b:7f:7c:c4:ad:
3a:b3:85:e0:67:ee:bf:dd:59:f6:f0:a3:ed:15:ef:71:9a:f9:
81:3b:e5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:14:30 2026 by rpki-client