Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: crurPTlgjjcBptGYN7+69/1P0xvrBd+jpy4DTIVZxos=
Subject key identifier: 6F:57:53:7A:0B:CD:FE:CA:16:26:80:B6:7D:07:FD:67:8E:DF:F6:3E
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019CAFED2A48AD822CA4A815FFFA5A8DBC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 139E
Signing time: Mon 02 Mar 2026 19:01:21 +0000
Manifest this update: Mon 02 Mar 2026 19:01:21 +0000
Manifest next update: Tue 03 Mar 2026 19:01:21 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: g/fSxmvEpiZVq/OcGDQfI4oL+IQ+/WQuDxuFyd90GRY=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ed:2a:48:ad:82:2c:a4:a8:15:ff:fa:5a:8d:bc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Mar 2 19:01:21 2026 GMT
Not After : Mar 3 19:01:21 2026 GMT
Subject: CN=6f57537a0bcdfeca162680b67d07fd678edff63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:37:46:b6:7d:8c:67:90:71:0f:be:1e:55:
41:ca:0e:14:03:52:f5:31:b3:bb:57:ed:9c:81:fa:
fb:39:dc:4d:dd:be:1b:cb:21:6b:81:4e:39:8b:fd:
2d:b8:cc:24:e8:fa:04:a6:d5:c0:c9:98:50:82:ed:
86:54:e9:b9:6a:34:ab:9a:e9:5a:fc:ae:c1:94:ba:
80:6c:c2:c9:08:6d:bd:fb:f6:0d:ca:15:76:79:3d:
56:f4:94:6d:2e:61:a5:c6:c8:a2:87:cb:67:59:79:
0c:0b:9b:f6:59:82:d6:fb:90:a4:ae:99:3c:0f:98:
64:7a:a9:78:3a:41:64:9b:fe:5c:5b:9c:fb:4d:95:
f0:3f:85:ec:0f:b0:c8:d2:b6:0f:0b:43:59:ae:56:
73:10:87:be:85:d8:97:8b:7d:c6:25:5a:22:c4:fb:
77:06:b1:6d:0a:ba:a4:5f:2c:79:f9:e8:95:6f:7e:
69:9e:5e:8f:a1:c5:03:ce:2b:3a:38:77:ec:d2:7b:
a4:db:ca:df:35:a9:14:e7:20:10:d6:b1:f5:64:94:
de:82:e6:2a:2d:58:57:af:6a:bb:9c:24:83:b4:33:
39:9e:2a:d2:41:5f:19:cb:2f:b8:b5:3d:22:b0:36:
e5:21:fe:07:58:1d:38:e7:90:b7:15:2d:64:0e:fd:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:57:53:7A:0B:CD:FE:CA:16:26:80:B6:7D:07:FD:67:8E:DF:F6:3E
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ff:22:fa:97:1c:28:97:09:d4:3f:7c:6b:5b:bb:bd:68:70:
17:20:88:0e:3b:0d:68:68:a3:dd:19:a1:fd:6e:4e:a7:53:d8:
ac:74:21:39:a3:63:0e:e7:3f:4f:d7:55:8e:6c:c8:51:21:9e:
5d:e1:47:d7:d1:07:30:82:12:20:62:a1:0b:b4:73:a7:0a:bf:
97:93:59:94:c1:7b:21:7a:d8:42:f2:06:92:d3:de:29:1b:46:
34:04:89:db:d5:52:dd:90:29:37:81:ce:e0:49:7c:3e:90:5c:
2e:22:f9:f9:31:b1:e0:75:27:73:6c:1c:3e:b8:c2:a1:a6:b1:
0b:cc:14:cf:4f:bc:96:96:30:e6:02:12:b1:53:fb:ec:49:ef:
a6:db:67:2f:20:97:f0:a8:75:65:81:a4:f7:9d:0b:cb:cf:04:
cf:c1:51:4e:c7:51:d3:07:d2:37:91:3c:4a:c6:f8:d9:65:12:
2e:57:12:84:73:cd:92:7e:61:7d:dc:e3:29:9c:b3:c8:50:26:
ca:e6:79:a6:4b:ed:07:7d:2e:73:ed:56:f7:16:38:db:eb:0f:
2c:13:9b:c2:d5:bf:62:e6:c6:12:c7:d0:4f:02:91:7b:3a:02:
19:92:ac:45:7e:39:75:73:fb:2a:ef:26:73:a1:cd:e1:f2:68:
46:4c:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:33 2026 by rpki-client