Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: xPpX2EOKF7650mlblXL0DpK1GXtDL/8UuDfY5+xpxx4=
Subject key identifier: 7F:6A:64:09:26:41:F5:B2:08:FE:49:5A:D0:9D:7B:0D:9A:00:CD:44
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 019CA945B7B13B03270ABCC79A79CC44B2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 1852
Signing time: Sun 01 Mar 2026 12:00:44 +0000
Manifest this update: Sun 01 Mar 2026 12:00:44 +0000
Manifest next update: Mon 02 Mar 2026 12:00:44 +0000
Files and hashes: 1: 9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa (hash: qftJAO5xZn04TQEdzEIUocCNdk0IiIOqR+bZ8YJWZ7o=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: z49LTdLjzPTg1OLw/IzAd7nXK3p6nrchT1tiyUAf6eE=)
3: n6OO-WnnkHzceF7bSScsPeztc-c.roa (hash: E3zuJZBnxJWbp6sji/yaodu4Rd/MUTtyvemA5p5Biac=)
4: tNm4Kj6pURpIDAOhjCaj5b4oBeI.asa (hash: AL9vjuRr/GpcvmtoQMe6I7TNeV/MZ4vDKYV842zbN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:b7:b1:3b:03:27:0a:bc:c7:9a:79:cc:44:b2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Mar 1 12:00:44 2026 GMT
Not After : Mar 2 12:00:44 2026 GMT
Subject: CN=7f6a64092641f5b208fe495ad09d7b0d9a00cd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:96:5e:63:4a:3f:c8:62:a3:47:97:e8:13:
b3:48:cb:29:b3:62:ec:18:e2:96:a3:c6:5e:be:bb:
40:56:5c:25:b5:6d:06:3b:77:b9:fc:fa:94:5a:c1:
d4:48:56:e8:8e:f8:69:29:45:48:e3:40:ac:c5:52:
41:54:fd:e6:f2:19:2d:48:24:90:f1:32:a3:44:ee:
53:d7:c6:42:fc:57:93:cd:12:8e:88:e9:07:19:f1:
21:a9:8a:95:04:d4:7b:ce:d8:07:d5:7a:39:b7:fd:
97:19:d6:65:a7:b7:99:f3:33:cd:c0:10:6f:29:7d:
52:f8:26:8c:f4:bc:c4:e9:44:8f:2a:ef:c6:8d:3d:
d9:4b:18:a6:91:03:1b:67:6f:bb:23:d9:ed:54:22:
83:33:8d:12:86:4e:71:b0:52:53:bb:2a:17:02:a2:
e5:3b:2a:33:4c:cc:37:43:dd:a8:36:bc:6f:b4:21:
a0:d8:5b:48:2f:53:e9:df:b5:08:e5:e4:d1:54:d4:
6c:e4:a1:fa:ea:80:28:45:34:39:72:28:2f:a0:84:
2f:9b:ad:fa:c8:80:69:2f:22:95:c1:67:e2:20:c3:
31:d4:e0:a2:39:fc:6a:11:fb:d3:ca:7e:39:40:ce:
ce:cf:79:54:92:7a:ea:5a:e7:15:57:ca:05:2b:82:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:64:09:26:41:F5:B2:08:FE:49:5A:D0:9D:7B:0D:9A:00:CD:44
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1f:b3:e4:45:ac:46:ed:03:72:32:3c:b6:3d:92:a3:53:e1:
4b:0e:f6:f4:54:10:9e:3e:60:3d:66:69:8d:a9:91:56:65:f3:
2c:bc:f7:f6:32:61:39:01:e7:d8:90:54:c5:f1:a9:6f:93:8d:
c1:9a:80:7a:3f:b1:4e:cf:f8:c0:12:19:90:1c:75:22:cd:b6:
7b:78:2f:de:e2:40:fb:36:d9:fb:73:09:82:42:9e:63:fa:30:
1b:fc:a9:14:00:83:bb:4e:9b:63:d8:77:8c:9d:b0:26:a3:04:
a7:1a:b3:13:2c:65:c3:b5:0b:b6:61:59:04:ad:41:f0:f7:8c:
36:92:a6:dd:63:de:ff:3c:59:04:1d:a9:a6:25:18:e7:92:3a:
3b:c1:b5:73:0c:8d:c8:8d:af:92:2e:da:82:20:df:08:6e:8b:
1b:88:87:76:08:8c:c0:4e:df:f7:0b:2e:3c:96:d5:08:5c:1d:
3f:fc:aa:06:a0:22:7e:86:2b:81:c1:c7:9c:1a:96:c1:fd:90:
41:f7:de:a1:43:4e:e5:49:4d:7a:c5:c2:9b:22:a3:ba:b3:ad:
f6:7a:43:de:85:d2:d1:ff:88:52:d2:f4:33:e2:d0:b2:b7:73:
95:ee:15:f6:29:bd:89:62:51:34:8b:2a:8e:96:39:99:6e:21:
46:20:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:30 2026 by rpki-client