Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: JDWND4GDfh7WTgD89yTKrDe+XXtXirlVQAVyZyYLJ+s=
Subject key identifier: 8B:2B:E8:D0:11:02:EE:70:C7:EC:BD:37:9E:28:85:BB:2B:C9:A7:94
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019EC30016E410CE6759B4085A1EC16A0BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 14B1
Signing time: Sat 13 Jun 2026 22:00:23 +0000
Manifest this update: Sat 13 Jun 2026 22:00:23 +0000
Manifest next update: Sun 14 Jun 2026 22:00:23 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: cuqMWNUN/hNCnONdNy/9LNGTDiMoFknIfzPK60VOWos=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:16:e4:10:ce:67:59:b4:08:5a:1e:c1:6a:0b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jun 13 22:00:23 2026 GMT
Not After : Jun 14 22:00:23 2026 GMT
Subject: CN=8b2be8d01102ee70c7ecbd379e2885bb2bc9a794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:52:a6:fb:11:6f:3d:2e:0b:6f:c8:75:00:
12:2b:87:39:02:6d:e2:0c:97:3d:3c:b8:69:5b:a7:
91:33:c2:21:66:74:2f:b4:15:48:f8:4c:84:66:94:
09:ed:fc:61:6d:ba:b4:e4:d9:8c:c7:d8:77:3f:a6:
8d:49:75:34:a4:2a:f9:11:30:5a:cf:3e:a0:96:d2:
7f:d8:2c:fb:2b:35:72:20:ce:b3:96:0e:15:09:33:
7f:db:85:e7:df:be:92:cc:8b:1c:0a:9d:6d:1c:eb:
2f:70:95:6c:4f:14:14:25:91:94:d7:25:d4:b8:d7:
dd:db:28:df:42:7a:04:34:b0:d0:b1:7b:0a:3d:f7:
28:be:4b:a0:f0:b9:94:d7:a2:58:4f:1c:7c:d4:2d:
03:26:12:a1:d8:98:d1:e5:31:cd:dd:54:20:f9:99:
1b:b5:66:c1:96:64:c3:79:60:ea:5f:b0:a4:0b:79:
c5:ae:79:66:0e:e1:b1:ba:f4:2e:19:aa:04:35:dd:
2b:dc:5e:23:7a:2b:1d:f1:0a:31:03:62:84:1f:69:
93:3c:0c:2e:bf:a8:77:a8:b8:78:af:62:44:c8:ba:
49:b2:33:4a:9e:e2:33:5e:27:83:8d:06:5d:f6:af:
d3:f7:0d:fe:90:cf:a1:93:89:f2:7f:a3:8c:b7:dc:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2B:E8:D0:11:02:EE:70:C7:EC:BD:37:9E:28:85:BB:2B:C9:A7:94
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:62:08:0b:3e:61:bb:70:2e:d3:59:f2:58:29:94:fb:10:f2:
01:2a:9c:cc:92:0a:8e:d3:dd:0c:88:c8:20:1e:97:c6:e2:8a:
a5:50:22:45:2e:b4:a2:69:c1:0e:3f:73:80:34:b2:bb:6b:4d:
95:36:89:52:4b:c4:89:d0:13:ca:0e:8e:63:d3:b6:76:7d:fc:
c5:8f:8e:2a:49:29:f9:6a:5e:01:51:3d:47:3a:b2:8e:6f:15:
6f:28:b8:3b:94:1f:cd:eb:15:c3:11:de:62:5e:43:4b:66:e7:
c1:22:57:35:c3:00:b7:2c:e1:34:3a:3e:01:97:d5:98:16:3b:
cf:e2:8a:e7:52:48:fc:e5:5c:57:3f:28:f4:7c:b0:5b:e2:44:
25:bf:e6:eb:e2:a5:b6:18:2c:a9:45:fa:32:9d:22:91:92:19:
7a:c5:49:44:46:32:9d:0c:bf:5d:dd:6f:ad:fd:7b:01:65:f8:
36:b1:43:66:f3:37:db:a0:84:3e:b2:ab:ca:54:7e:ce:67:d5:
b6:ff:69:6d:12:53:10:9b:82:e2:c0:18:dc:a7:17:23:24:b6:
95:d3:2e:82:33:26:e0:a0:05:b6:72:1c:44:50:6e:0b:81:b6:
41:69:84:bc:d0:f3:59:e5:3e:2b:54:77:52:ca:13:49:d8:5a:
1e:b7:4f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:14 2026 by rpki-client