Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier: Qi8GPVqr8AN0wn7EW3AncfpZMYW36GpQ7/dSrIlaX2Y=
Subject key identifier: 99:1B:72:C7:42:C5:82:A2:F6:88:C6:FE:A5:47:8B:EB:00:A8:4A:BD
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 019D32D118901215E4D3B855BDFC45440640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number: 12DE
Signing time: Sat 28 Mar 2026 05:00:57 +0000
Manifest this update: Sat 28 Mar 2026 05:00:57 +0000
Manifest next update: Sun 29 Mar 2026 05:00:57 +0000
Files and hashes: 1: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: ctUXRgEqm/TTeuEbPzMfibvov2shtKOTLWICQN/I/1M=)
2: zLO5NhttWnGtKqBNs-55QF4xyAI.roa (hash: Y+DHFPwDb32W512hSzIFIuvnQ5dNais6OF6h18YAYzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:18:90:12:15:e4:d3:b8:55:bd:fc:45:44:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: Mar 28 05:00:57 2026 GMT
Not After : Mar 29 05:00:57 2026 GMT
Subject: CN=991b72c742c582a2f688c6fea5478beb00a84abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:f5:b3:85:7f:80:70:7a:20:5d:bc:89:72:
7c:7c:dc:32:85:5b:94:25:f9:f9:8c:84:eb:7b:5d:
0e:b2:ec:b6:2c:7e:26:b1:a4:0d:af:3d:b6:58:c7:
59:ba:e0:4c:83:a7:dd:26:3d:a3:ca:f2:66:b6:ec:
0b:e9:d4:e9:4a:14:2a:88:a6:35:f1:06:58:b6:bf:
26:f3:dc:c8:11:be:08:bd:15:3c:6d:f3:01:3e:6e:
86:80:cd:b6:ec:f5:65:94:59:5d:dc:70:fa:d8:31:
a1:03:9f:5a:2c:57:c9:5e:3e:6e:b8:b4:cf:af:5f:
43:51:79:04:3b:18:5f:5b:d5:77:9b:da:f1:0f:b3:
b4:15:4a:47:4a:d8:89:41:69:35:b4:11:28:c3:b3:
de:16:a5:11:0d:88:ec:87:18:88:d0:05:cb:5c:77:
90:97:f8:3c:d7:7a:9d:80:74:a9:93:c4:f8:ee:88:
dd:4e:7b:d8:00:a8:21:b9:f1:af:9f:ff:79:44:c2:
4d:79:92:14:49:6a:c8:96:d6:f2:5b:04:30:8a:54:
d7:7b:b4:7f:49:93:1b:0f:2d:41:de:d0:43:91:d5:
6d:ff:e2:bb:b5:7f:d7:f7:23:85:c1:d5:a1:a2:9f:
55:0e:29:f3:66:12:6a:59:5b:4e:5c:ac:5a:fa:d8:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:72:C7:42:C5:82:A2:F6:88:C6:FE:A5:47:8B:EB:00:A8:4A:BD
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e4:d6:d8:e3:41:d2:c9:1c:6f:84:2e:94:e8:3d:28:a1:68:
75:56:b6:db:55:81:e3:51:3b:5c:d0:3b:0a:a4:06:51:0d:45:
7b:a6:f3:40:5d:35:a0:e2:86:c7:51:29:86:d8:31:68:eb:6d:
7c:dc:87:60:f7:3f:2b:f9:36:a6:c2:09:5b:29:fb:13:ff:c5:
de:8b:73:d6:6e:03:6b:08:7b:3a:7f:2e:2c:7d:cd:15:a2:72:
1d:67:f6:aa:ab:b0:6e:97:b6:35:f8:90:0d:f7:16:5e:8a:66:
cf:9b:86:be:81:e3:4c:1e:90:1d:c9:c5:99:bd:e3:65:a0:e8:
7a:4e:ab:67:d4:94:49:b1:2d:48:9f:97:47:72:ad:56:85:7f:
c7:90:02:e0:51:cc:13:3e:0f:bd:a1:7e:8e:05:f4:55:00:9a:
b5:d3:68:d8:42:67:3c:d0:8b:35:66:06:52:3d:89:14:01:ec:
3c:47:5c:50:c7:0e:e9:1a:e3:b0:fc:c0:7f:be:dd:64:31:b0:
24:b4:25:a9:fa:32:7b:23:cc:19:d4:0f:57:5d:40:33:b4:95:
44:ea:2b:cd:bf:04:f8:90:5e:69:df:c0:cb:05:9a:97:82:34:
3c:1e:34:f7:bb:22:76:ff:8b:78:81:52:15:d4:c7:11:cc:47:
ae:ec:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:43 2026 by rpki-client