Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: tM4QVNmgtV1KA3HMVGG3AUUlJZBA0LYtlI0EukzWOVs=
Subject key identifier: 52:79:86:C1:BB:7D:84:9B:22:64:FA:EE:5E:3E:B7:64:E3:3E:E8:AB
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 01A0DFBD1E7EA4ACE1CA25D9344F09A39973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 15C9
Signing time: Sat 26 Sep 2026 22:01:48 +0000
Manifest this update: Sat 26 Sep 2026 22:01:48 +0000
Manifest next update: Sun 27 Sep 2026 22:01:48 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: TpEy1VaBcahovA+Pm9z1FNKeNaXUL7PAzUPedPbksjk=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bd:1e:7e:a4:ac:e1:ca:25:d9:34:4f:09:a3:99:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Sep 26 22:01:48 2026 GMT
Not After : Sep 27 22:01:48 2026 GMT
Subject: CN=527986c1bb7d849b2264faee5e3eb764e33ee8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:67:a1:d0:4e:d1:01:f1:c6:21:22:78:d3:
ce:b1:54:dc:2e:06:5e:8c:b9:d9:b2:1c:77:67:71:
ee:2c:f5:b0:6b:e3:71:ed:3a:db:97:39:3c:79:d5:
af:6c:3b:f7:cf:46:76:80:69:d1:40:67:b8:b6:6b:
5e:69:f8:e9:a9:f1:92:77:5d:86:cb:fc:cc:8f:2e:
10:1b:2d:a5:60:32:0b:ba:64:18:71:81:94:fa:fb:
14:51:f1:ba:42:7c:03:61:73:d2:3c:1b:01:45:d8:
ee:03:7e:26:16:32:50:3d:05:b0:2c:0d:05:5a:b6:
f6:f6:50:7c:c1:18:64:6b:ae:ea:a2:3c:14:7b:a5:
5c:1a:c3:2c:ee:b3:12:23:59:3f:32:95:40:af:bb:
0d:52:45:8b:cd:9e:68:fc:de:7b:b1:03:d3:fb:a1:
84:7b:de:8d:2b:a0:6b:20:cb:2f:c9:7c:8e:de:7a:
69:73:90:78:6f:59:51:72:64:2b:bc:6f:ea:53:d3:
db:76:32:af:50:19:96:1f:aa:89:1d:14:f5:08:5b:
e4:48:bc:20:74:96:2f:44:83:30:07:e2:51:fc:62:
f4:0a:88:a0:bf:ec:24:fc:da:99:e3:0e:3d:04:b6:
49:ee:54:34:03:79:18:1a:fb:fc:59:b9:69:97:bf:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:79:86:C1:BB:7D:84:9B:22:64:FA:EE:5E:3E:B7:64:E3:3E:E8:AB
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:69:35:9d:c9:04:69:03:c8:ba:35:1b:bb:a4:fe:53:77:c0:
91:c8:69:da:07:af:ab:d1:ef:e8:c1:ef:7d:48:5a:c6:43:87:
e9:db:a0:97:dd:65:d5:39:25:da:c1:9e:a5:1d:c9:c2:c6:b0:
d2:d5:69:ec:84:75:ef:8d:c8:2e:a7:7b:e3:3f:60:42:77:22:
cc:42:33:e4:37:7f:b5:1c:2f:44:c0:1a:01:4b:7a:34:66:d8:
5d:e9:42:fc:6b:c7:cd:a4:73:39:0a:af:21:e2:dd:61:1b:28:
b9:ac:b2:aa:da:f1:29:8f:5f:e8:50:f3:0c:d9:66:d4:a3:a6:
5e:da:20:05:b3:5e:a0:2c:87:9b:0a:68:3b:41:fa:57:f8:09:
ed:a1:a0:01:7a:9f:a0:6f:a6:26:12:93:6a:88:04:50:40:66:
70:c4:e6:63:7c:9e:0c:24:ac:06:5f:e7:52:d1:57:29:ca:87:
7c:50:34:29:28:8f:43:6f:9c:8f:b8:14:77:d0:f2:97:a7:1b:
2e:04:54:ad:91:35:9a:c6:28:f1:fc:87:e0:10:dc:6c:b5:95:
03:66:1b:73:f7:ed:87:b0:34:1d:09:d6:a6:7f:9b:bc:fe:aa:
5b:52:d7:12:d0:f9:3a:77:43:8d:93:07:26:93:de:a1:db:4e:
93:f6:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:50:54 2026 by rpki-client