Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
File: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft (raw, json)
Hash identifier: qimOC2O2j9ZyH7Zt5LqGixJv84g517l1sLwu6NETC60=
Subject key identifier: 52:38:1F:34:65:C8:12:68:2F:AC:7E:F3:DB:18:50:B1:53:E3:E8:99
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Certificate issuer: /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial: 019CAE35B579B69B7D6A860B236C1A047F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
Manifest number: 0E09
Signing time: Mon 02 Mar 2026 11:01:21 +0000
Manifest this update: Mon 02 Mar 2026 11:01:21 +0000
Manifest next update: Tue 03 Mar 2026 11:01:21 +0000
Files and hashes: 1: 0V0swpWjFjeVPqWf_UnTN_5aN_c.roa (hash: yyF6Vx5pBt9ed5ZOE5ouGaUbQamlPSAGeUtJJ2Wer1E=)
2: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl (hash: GAXAfZVDdRwfQKcZbxSDvD1zyaZEaPg5WI/S3oAIwq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:b5:79:b6:9b:7d:6a:86:0b:23:6c:1a:04:7f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
Validity
Not Before: Mar 2 11:01:21 2026 GMT
Not After : Mar 3 11:01:21 2026 GMT
Subject: CN=52381f3465c812682fac7ef3db1850b153e3e899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:e1:a9:9e:77:da:26:24:c0:c7:40:e1:43:
5b:1c:41:ef:6c:2e:3f:41:6a:09:22:f9:13:f9:d0:
95:ab:d0:88:0f:61:2e:c7:32:31:c4:75:28:87:a7:
0e:64:04:f4:46:9c:b4:4d:4f:e2:e7:2f:bb:f1:7b:
0a:be:aa:73:f8:ee:c3:58:4d:98:5a:8f:14:35:ba:
a7:57:99:0d:a1:9c:5f:0d:93:02:fc:4a:9f:21:c6:
93:e7:c5:8b:ac:4e:f1:26:d1:d8:e1:83:f0:54:64:
9e:fa:83:95:f7:11:c7:cf:fd:a3:0b:43:32:4f:30:
58:fa:01:d8:47:2a:8b:8a:69:59:8d:84:55:64:8c:
74:90:2e:1b:b1:74:56:23:73:2b:5b:30:67:11:1f:
c6:9b:6a:4b:59:97:50:80:e7:78:d7:dd:c7:3f:32:
b1:17:11:d3:68:99:c8:36:45:ed:95:6e:5a:c2:78:
57:06:e2:0f:75:82:32:11:4e:95:ec:0f:16:63:ef:
f7:21:3e:79:f0:dd:5e:ee:8a:ed:22:e7:42:a1:4e:
be:74:4b:0e:0f:34:75:48:3f:e3:6a:de:0d:1f:63:
93:2f:8a:8d:e9:a0:ec:76:cb:7d:35:bc:b1:91:7f:
b5:38:be:f7:ae:19:67:51:e0:69:1f:9f:01:38:ef:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:38:1F:34:65:C8:12:68:2F:AC:7E:F3:DB:18:50:B1:53:E3:E8:99
X509v3 Authority Key Identifier:
keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5f:6b:0f:83:f1:f6:1b:6c:4a:ab:05:1d:62:35:a2:10:e7:
62:73:51:78:4e:f7:0d:ee:63:9d:33:fe:0b:36:f3:83:1d:d0:
1f:9a:23:96:a4:73:70:25:83:36:15:d4:8d:24:74:37:04:7c:
54:66:12:24:33:d7:72:a5:5c:73:18:9a:4e:22:00:d3:f2:ff:
01:59:20:b4:ab:c1:2b:0e:f4:a9:0a:56:0d:0e:21:19:19:3a:
17:40:e5:96:d7:88:1a:05:45:d7:30:44:8c:27:26:b6:fc:ea:
04:4e:b7:c7:fc:8b:84:33:90:0e:bd:3c:ec:34:7e:fe:8a:9e:
5e:66:ad:8c:65:40:b7:08:75:ee:e4:2c:3f:55:d6:bf:5a:f0:
70:70:c4:99:e8:1a:11:29:2e:e1:e5:f2:22:e3:71:32:76:95:
a6:38:2a:e6:e6:fc:f5:aa:27:5d:c1:f6:45:96:ca:77:11:f8:
6a:ba:07:70:27:a0:f4:18:82:dc:6a:09:27:8e:75:0f:bc:c6:
62:3c:5d:4a:ee:d3:2b:d6:76:fb:56:89:45:f9:41:49:71:e7:
1e:5c:6b:c9:ae:a5:9f:1c:ad:36:e9:5d:8d:16:26:b3:61:2a:
b0:36:6b:18:ce:fe:5d:e8:d6:90:f3:66:55:77:87:7a:7e:ff:
51:69:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:47 2026 by rpki-client