Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: 2wGyB/lxuQ3FvUo2TzoUPMFZyQtju+YPqXG0YsV6LVM=
Subject key identifier: 2C:DA:90:2B:3A:C0:2A:4B:E8:95:2F:78:29:CD:65:FE:F3:75:0D:F7
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019FACAD69CC19199EEBB28934C1383B03EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 152A
Signing time: Wed 29 Jul 2026 07:01:13 +0000
Manifest this update: Wed 29 Jul 2026 07:01:13 +0000
Manifest next update: Thu 30 Jul 2026 07:01:13 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: WTu1r2l4SZCME5ruFV3h64NPuxkfeXsSDNZZUs/Fhog=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:69:cc:19:19:9e:eb:b2:89:34:c1:38:3b:03:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jul 29 07:01:13 2026 GMT
Not After : Jul 30 07:01:13 2026 GMT
Subject: CN=2cda902b3ac02a4be8952f7829cd65fef3750df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:92:95:b7:e2:f5:64:ef:0c:4c:4d:67:dc:
56:6c:72:33:e1:13:28:fd:db:f3:88:2d:ba:b0:66:
53:4b:3d:ff:25:08:38:a6:47:58:2f:f5:48:ea:ac:
2b:4a:4b:bd:6d:bb:2e:79:cc:a3:da:de:c7:fe:b1:
04:a1:a2:44:91:34:97:07:50:12:48:ba:81:e8:29:
bb:0d:19:12:e0:ee:d4:56:c9:38:3a:a3:c7:b2:67:
49:b1:80:2a:76:1f:6f:0d:1b:ab:cf:ba:69:10:2e:
36:7b:69:c2:35:30:96:43:ca:48:99:a6:79:05:b6:
1b:45:62:e9:54:a2:05:75:20:47:0c:55:ad:49:62:
b9:98:bb:89:27:0e:f1:8e:86:b6:b8:d1:db:f6:21:
cb:02:5a:7a:af:97:38:be:51:51:a8:48:d2:03:bb:
bb:b9:08:f9:f3:61:07:25:d8:51:e7:ec:40:15:3f:
25:e3:7b:e8:ee:03:9b:80:c3:64:36:17:f5:d6:4a:
f6:f3:0a:f3:33:81:8a:69:45:b7:9a:4f:bd:77:85:
52:67:9a:9c:cb:0b:e1:c3:5b:88:05:56:4a:59:88:
49:19:bd:59:5e:2c:2b:8b:dc:d8:c7:6d:d7:12:fb:
89:b5:83:a8:ae:22:09:92:b0:d9:75:15:56:d4:4d:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DA:90:2B:3A:C0:2A:4B:E8:95:2F:78:29:CD:65:FE:F3:75:0D:F7
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b5:8d:9a:c0:c6:2b:2f:37:82:03:97:67:e6:11:c8:dc:fb:
d0:86:a9:37:1e:c2:c5:db:fe:94:2e:9d:7b:28:23:4d:72:a3:
8c:80:2b:47:52:fc:05:35:bf:3c:2b:04:42:90:dc:9d:f0:fe:
9f:21:ba:27:4e:08:32:32:42:09:b9:6a:21:c1:42:7a:7d:bf:
76:7e:e9:28:6c:74:4e:3f:b7:7a:b2:72:0d:f9:d2:b6:87:fc:
98:78:03:4a:8a:8d:e1:d8:ce:fe:f2:99:49:13:64:fa:91:27:
7f:dc:a8:a7:2e:a2:2d:27:fb:c1:9a:23:48:2d:7c:a3:33:5e:
d2:ea:c8:6a:52:4a:b1:a1:20:9a:bd:72:1a:87:98:6c:21:32:
5a:fb:c1:ba:4e:5a:8c:c5:86:71:ad:8d:8b:71:02:d8:7a:86:
d4:ff:06:dd:8f:92:c9:8e:8d:47:c9:88:61:05:7a:fc:f2:ce:
35:35:91:b0:3e:66:ad:62:ef:5e:d7:f1:d5:4f:9f:a2:75:79:
ad:9c:da:fb:bd:53:d5:23:c0:fa:40:28:88:ba:6a:e8:3b:1b:
35:ad:c6:b7:af:a2:19:a2:b6:f0:51:9d:2e:bc:b9:a2:1f:22:
30:f7:ed:e6:8d:98:26:f9:78:12:ef:d8:36:fd:28:df:ed:b6:
32:1a:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:57:34 2026 by rpki-client