
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: CvMlakWLViGIV/0Lt7Rnqz3NQvB9Xbgw4xn9mPAParQ=
Subject key identifier: E9:A4:DB:6D:3D:75:09:24:BE:C0:28:63:A8:A9:E8:58:61:AB:CD:DE
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 019DA3AEAF5EC4C50A8CC64A81B41CE2A1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: 06F5
Signing time: Sun 19 Apr 2026 03:00:27 +0000
Manifest this update: Sun 19 Apr 2026 03:00:27 +0000
Manifest next update: Mon 20 Apr 2026 03:00:27 +0000
Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: U1u4K2+XlA0weVpDRVFk+ObCd7+Xw/2W7BTyT6LlBvE=)
2: Pja4mNctEO1syGRjo8GcPhgekVI.roa (hash: Ihp8XzTztX/T4ldZhzh4fgPvsQaA7Zl4szEC5xqNuDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:af:5e:c4:c5:0a:8c:c6:4a:81:b4:1c:e2:a1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Apr 19 03:00:27 2026 GMT
Not After : Apr 20 03:00:27 2026 GMT
Subject: CN=e9a4db6d3d750924bec02863a8a9e85861abcdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:3b:99:2b:bb:a2:f0:58:4f:e8:15:cd:03:
2a:69:78:34:02:d4:57:87:fe:14:49:36:6a:ca:54:
0a:8a:3e:43:88:ed:9e:40:39:00:52:36:f3:88:bc:
1d:29:5e:b0:27:e8:65:d4:6d:70:56:1d:2b:24:58:
fd:0d:36:46:d7:7d:c8:b6:58:8b:76:0c:9d:a8:a8:
cb:f7:4b:30:c1:ae:83:4a:79:87:eb:38:bc:dd:f9:
12:67:d1:9d:8e:01:bc:6d:8d:84:81:58:64:cc:c6:
95:bf:49:fd:e3:60:20:57:aa:97:86:7d:10:42:62:
cd:43:44:45:db:06:46:c4:98:73:e2:db:a7:cc:ba:
c7:0f:e1:7b:2b:a0:93:83:72:ba:b0:37:ba:93:57:
8a:da:88:cf:33:2e:a4:bf:24:e3:c3:4f:f9:f3:6a:
a1:3a:9a:01:b1:62:36:a2:7a:94:d2:9e:bf:67:cf:
23:34:70:98:ee:7a:78:a0:17:f1:98:f0:91:81:23:
81:14:ae:cd:80:b2:17:25:5b:98:6a:cc:d4:74:fb:
1e:11:3f:aa:19:fb:28:fc:32:80:d7:22:d6:b0:85:
0e:eb:ed:79:80:30:50:27:a1:e0:fd:a3:7e:34:cf:
34:db:dd:ca:59:82:56:a1:e6:ee:cf:38:07:ea:36:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A4:DB:6D:3D:75:09:24:BE:C0:28:63:A8:A9:E8:58:61:AB:CD:DE
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:22:47:05:b9:80:29:57:bf:60:0d:d5:2a:1d:77:04:08:d0:
62:0f:60:b0:76:12:58:ad:2d:7c:98:e7:a4:63:1b:ec:7d:2a:
de:04:36:9a:ac:59:f5:0d:52:25:f1:8a:0b:8e:06:3b:a2:e8:
45:52:7e:8c:0c:0f:6b:4a:6d:d1:14:b2:57:51:b6:28:85:ce:
69:b0:de:b5:2c:85:8e:e0:6f:d5:5c:d9:be:01:66:ec:5f:9f:
c7:c6:a6:17:e1:9a:b0:ec:44:75:9f:a0:dd:b5:05:b6:08:83:
8a:fb:9a:af:1a:2c:73:7a:36:38:d3:44:1f:90:45:a0:ce:00:
5c:ef:40:84:2a:0f:31:ac:74:c1:38:0d:f5:7e:26:a1:25:71:
0e:12:08:00:2b:03:7d:44:50:b3:86:89:17:7f:b2:b2:e4:03:
b0:ff:b7:57:5e:23:60:65:8b:64:a5:a1:01:cb:cd:2d:eb:1f:
b5:ee:6b:7d:bb:e7:f6:f7:f2:59:fd:8c:f3:ff:b5:d5:a5:91:
69:8c:4b:dd:d7:93:a9:7f:02:0c:34:96:7b:54:04:ec:65:c5:
cb:87:1c:39:fc:89:c4:2e:19:ab:23:70:eb:66:a9:72:a4:7c:
d6:5e:e8:43:5c:2c:8f:52:bf:26:7c:98:66:c9:0b:0b:62:63:
7f:d0:8f:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrq9exMUKjMZKgbQc4qHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMzg5ZjliNTY3ZTc0NWM5NTIxYmIxYzE1NDFhMzQ1OWFl
MGU4YTUwHhcNMjYwNDE5MDMwMDI3WhcNMjYwNDIwMDMwMDI3WjAzMTEwLwYDVQQD
EyhlOWE0ZGI2ZDNkNzUwOTI0YmVjMDI4NjNhOGE5ZTg1ODYxYWJjZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ87mSu7ovBYT+gVzQMqaXg0AtRX
h/4USTZqylQKij5DiO2eQDkAUjbziLwdKV6wJ+hl1G1wVh0rJFj9DTZG133ItliL
dgydqKjL90swwa6DSnmH6zi83fkSZ9GdjgG8bY2EgVhkzMaVv0n942AgV6qXhn0Q
QmLNQ0RF2wZGxJhz4tunzLrHD+F7K6CTg3K6sDe6k1eK2ojPMy6kvyTjw0/582qh
OpoBsWI2onqU0p6/Z88jNHCY7np4oBfxmPCRgSOBFK7NgLIXJVuYaszUdPseET+q
Gfso/DKA1yLWsIUO6+15gDBQJ6Hg/aN+NM80293KWYJWoebuzzgH6jZFewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmk2209dQkkvsAoY6ip6Fhhq83eMB8GA1UdIwQY
MBaAFDs4n5tWfnRclSG7HBVBo0Wa4OilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2Mt
YmYzNTFjMGYwZWJjLzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2MtYmYzNTFjMGYwZWJj
LzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyJHBbmA
KVe/YA3VKh13BAjQYg9gsHYSWK0tfJjnpGMb7H0q3gQ2mqxZ9Q1SJfGKC44GO6Lo
RVJ+jAwPa0pt0RSyV1G2KIXOabDetSyFjuBv1VzZvgFm7F+fx8amF+GasOxEdZ+g
3bUFtgiDivuarxosc3o2ONNEH5BFoM4AXO9AhCoPMax0wTgN9X4moSVxDhIIACsD
fURQs4aJF3+ysuQDsP+3V14jYGWLZKWhAcvNLesfte5rfbvn9vfyWf2M8/+11aWR
aYxL3deTqX8CDDSWe1QE7GXFy4ccOfyJxC4ZqyNw62apcqR81l7oQ1wsj1K/JnyY
ZskLC2Jjf9CPVw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:59 2026 by rpki-client