Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
File: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft (raw, json)
Hash identifier: nq6ESFYSbANdl8SOfar4YfunqgMu57zIsv+/D6hN49E=
Subject key identifier: 71:A2:D6:D2:FF:DE:D5:BA:EA:D7:B3:A6:0B:94:E6:6A:E1:07:47:63
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Certificate issuer: /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial: 019D9DAD69BC8850E30A6F224FAD040A792E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
Manifest number: 0E85
Signing time: Fri 17 Apr 2026 23:01:20 +0000
Manifest this update: Fri 17 Apr 2026 23:01:20 +0000
Manifest next update: Sat 18 Apr 2026 23:01:20 +0000
Files and hashes: 1: 0V0swpWjFjeVPqWf_UnTN_5aN_c.roa (hash: yyF6Vx5pBt9ed5ZOE5ouGaUbQamlPSAGeUtJJ2Wer1E=)
2: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl (hash: G4P0U842tZ/j2+mMuPZO7M0i8MUlmaBKI16KQQfKomQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:69:bc:88:50:e3:0a:6f:22:4f:ad:04:0a:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
Validity
Not Before: Apr 17 23:01:20 2026 GMT
Not After : Apr 18 23:01:20 2026 GMT
Subject: CN=71a2d6d2ffded5baead7b3a60b94e66ae1074763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:2e:eb:f8:6c:4e:2d:6e:2d:2a:54:0c:31:
c9:16:73:2a:a7:57:19:3f:83:7c:c1:62:ed:41:f9:
ee:9a:31:a1:b3:91:78:e2:92:92:37:0b:1d:43:21:
86:4b:47:d7:f2:97:56:90:f4:0a:91:6b:13:c8:64:
42:59:d9:27:79:eb:0f:35:ab:69:ad:1b:01:5d:97:
83:a2:2c:31:a0:55:d5:fe:a8:0e:cf:d2:18:d3:b8:
b7:ee:4f:4c:af:ca:99:c6:93:e2:fc:08:c0:be:36:
59:d1:c7:1a:72:a5:6f:23:d0:15:82:f5:76:0c:83:
b0:78:ce:03:4a:a7:9d:2a:ce:8d:bf:02:fc:6a:d3:
77:2b:38:5f:32:8a:a1:ca:ce:70:d6:b4:23:eb:29:
3a:d2:fb:9a:96:b3:cb:20:cb:f6:a3:74:7e:fc:16:
57:0a:1a:65:1e:26:1d:8a:f4:41:d4:38:e9:31:26:
40:4f:6c:1d:b4:5b:e5:25:02:12:c3:a1:c8:24:b6:
60:2b:82:f4:5d:c0:2d:79:a9:1b:83:8f:73:8f:82:
15:2b:7d:75:ff:6e:20:53:f4:27:05:3b:53:ad:7f:
d0:c6:7e:c7:c4:e2:85:6d:53:4d:00:cc:15:2e:26:
1b:ac:db:89:4b:bb:a6:b1:80:77:ba:3f:e4:b7:38:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A2:D6:D2:FF:DE:D5:BA:EA:D7:B3:A6:0B:94:E6:6A:E1:07:47:63
X509v3 Authority Key Identifier:
keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:60:1f:2f:8d:0b:cf:48:3c:a3:78:1d:8c:37:66:7e:6d:a1:
e1:73:69:8d:0d:4b:57:dd:53:a6:88:63:67:8a:f8:f9:40:d8:
9f:7f:b7:f0:68:0b:49:56:7a:e8:46:4c:83:34:d5:d3:46:e1:
7d:e6:ea:06:ad:6e:95:e2:61:9a:77:74:ad:c2:97:9e:97:a4:
d9:52:b6:f3:d1:66:59:7d:8d:69:17:b4:0f:9c:f5:1c:67:9b:
3d:b1:90:b0:18:e8:6c:23:9a:49:5b:c1:79:83:71:99:1b:9d:
8d:09:34:4c:87:d4:43:34:87:79:ec:53:ec:44:07:78:37:18:
96:56:d1:dc:f5:9e:33:d2:31:31:2c:b9:ca:02:4d:ae:c0:20:
af:29:73:71:c7:a3:75:90:60:f3:f9:3d:24:b3:c9:ed:d7:7d:
f8:ed:90:39:e8:29:66:f1:95:96:82:3f:64:2d:a8:2e:3a:78:
1c:59:d4:ec:66:51:64:3f:f7:19:89:e3:e3:b7:22:d1:eb:4f:
bc:6d:d1:51:14:4d:9a:2e:a1:12:06:05:27:b4:ee:49:a2:94:
2c:d7:1d:43:7e:0e:95:a9:d8:a9:56:61:0a:1a:44:60:95:c5:
78:df:1f:7b:7b:fe:62:9f:7f:b3:cc:dd:1e:ba:d3:5e:52:7e:
2f:ad:0f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:45:37 2026 by rpki-client