Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: Iz3ToxQojrgeYX2t8L3qPR80SCNyc4BL8eWxUDMXqyg=
Subject key identifier: FF:C1:15:5F:77:42:91:63:73:EB:5F:4B:84:CF:88:36:41:D1:8C:76
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 01A0BFC37A76BB968627E430EAB58067AA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 1A70
Signing time: Sun 20 Sep 2026 17:00:54 +0000
Manifest this update: Sun 20 Sep 2026 17:00:54 +0000
Manifest next update: Mon 21 Sep 2026 17:00:54 +0000
Files and hashes: 1: 9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa (hash: qftJAO5xZn04TQEdzEIUocCNdk0IiIOqR+bZ8YJWZ7o=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: QZVPnUMwgcngXzwTn/sQ0dn0xNiMn67w/BjOuvl9x68=)
3: n6OO-WnnkHzceF7bSScsPeztc-c.roa (hash: E3zuJZBnxJWbp6sji/yaodu4Rd/MUTtyvemA5p5Biac=)
4: tNm4Kj6pURpIDAOhjCaj5b4oBeI.asa (hash: AL9vjuRr/GpcvmtoQMe6I7TNeV/MZ4vDKYV842zbN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:7a:76:bb:96:86:27:e4:30:ea:b5:80:67:aa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Sep 20 17:00:54 2026 GMT
Not After : Sep 21 17:00:54 2026 GMT
Subject: CN=ffc1155f7742916373eb5f4b84cf883641d18c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:72:ae:eb:8b:84:47:11:d5:c4:4e:6f:14:
01:fe:f9:a4:13:b7:e7:13:71:87:07:29:08:75:f4:
10:74:56:ca:b0:16:86:c6:5f:ec:91:0e:09:21:41:
35:44:6c:53:91:10:f1:4a:f3:3b:b7:c4:15:76:03:
1f:6a:60:39:56:ca:76:02:d2:14:02:84:79:20:b1:
25:41:f4:dc:67:95:0a:20:8d:f4:62:ff:d7:43:77:
e3:bb:b3:b9:98:ec:a9:03:99:31:80:5c:04:a9:c5:
c4:17:b9:89:d2:de:3c:01:d1:a2:94:10:40:34:0c:
32:d4:bc:72:58:54:ee:15:7a:d6:6b:cc:cb:77:7f:
8c:6a:fa:0d:f9:2d:5c:37:09:22:ca:3e:2f:14:c6:
bf:4b:a8:18:ad:7d:72:1b:db:56:a2:c0:1c:53:fe:
be:ba:a5:9e:3f:1e:bb:5c:fd:5f:5c:72:40:76:79:
56:4d:6e:f1:cc:12:e9:9c:e3:fc:c0:1d:a3:3a:8f:
81:84:c0:8e:bb:c6:6a:9b:77:79:5a:35:f2:a7:b7:
8d:8a:e3:c0:8d:09:de:d4:20:e6:d2:0e:c5:94:30:
5a:20:0b:9f:9d:44:ef:d2:5c:a4:ca:50:7a:64:7a:
e5:46:c6:94:0a:3a:e7:50:d4:e9:5c:65:d2:2c:1a:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:15:5F:77:42:91:63:73:EB:5F:4B:84:CF:88:36:41:D1:8C:76
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:47:a1:24:57:73:9d:5b:5d:31:b9:68:67:af:2b:dc:c8:38:
1c:c6:f2:ca:b7:ae:84:47:31:3b:23:a7:df:b0:a4:55:2e:7c:
1b:41:b8:f0:f9:dc:86:72:2d:f6:45:99:de:c1:22:89:3c:5e:
9d:e1:35:ff:3d:ef:7e:ca:65:98:8a:72:cb:2a:a6:87:89:37:
3c:0c:04:29:ec:ee:d0:3b:2a:98:f5:93:07:76:18:0c:9a:7c:
f2:20:0a:e1:f3:29:3f:b3:a0:28:70:80:59:c9:c2:6d:20:1a:
ef:92:59:b3:98:c0:86:06:db:66:b1:5e:07:3b:52:7d:82:5c:
b6:68:45:6e:66:d8:f4:79:90:b3:5c:0f:46:d7:f0:37:57:23:
58:14:ac:2f:75:59:37:7f:eb:62:4a:a5:cb:f6:ef:29:f2:b4:
32:9d:07:ec:19:9c:9a:4d:c6:f3:b9:9e:03:a0:1a:79:3b:cb:
cb:b9:b5:15:d6:ba:c7:85:81:3d:74:f6:94:38:6e:e6:af:f4:
d5:1a:af:57:4b:12:bb:25:ec:ed:c2:b3:57:81:4d:1b:c0:a7:
ab:bc:25:23:e1:39:03:7a:b9:fb:d1:21:27:90:76:56:ea:55:
9b:5a:6e:16:f4:09:2a:e8:ae:51:65:d9:bc:d2:4a:e9:73:46:
14:c3:be:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:28:05 2026 by rpki-client