Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
File: OzBfl6JvMdgAYFn7OrGerPt4NFU.mft (raw, json)
Hash identifier: nY8PhTJv4zcUEteNvhK1lp7mYtOoEC6rT0TiFBby7P4=
Subject key identifier: F1:43:95:0D:D3:59:B5:3A:77:D6:DA:E2:B2:D4:F8:90:86:1D:14:1E
Authority key identifier: 3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
Certificate issuer: /CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Certificate serial: 019D9A74A889B27AFE4B432674F9E1410B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
Manifest number: 0CAC
Signing time: Fri 17 Apr 2026 08:00:29 +0000
Manifest this update: Fri 17 Apr 2026 08:00:29 +0000
Manifest next update: Sat 18 Apr 2026 08:00:29 +0000
Files and hashes: 1: Nph9BsHMAWz3v3KuWSmSYaAs3t0.roa (hash: PiH06TnQZKY0ou+2ssqAuJ7EJt+8n060evKXmiAMkgE=)
2: OzBfl6JvMdgAYFn7OrGerPt4NFU.crl (hash: Gf/gl6kbceQ9vFNfwQ5hhVVmOT3xcLDOu4WiP3ueSlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a8:89:b2:7a:fe:4b:43:26:74:f9:e1:41:0b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Validity
Not Before: Apr 17 08:00:29 2026 GMT
Not After : Apr 18 08:00:29 2026 GMT
Subject: CN=f143950dd359b53a77d6dae2b2d4f890861d141e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:2a:8e:ad:16:e5:76:3a:07:54:4c:b2:86:
a1:e1:95:0c:40:cc:95:13:d0:ad:02:41:29:47:79:
a2:85:85:a8:f3:0c:aa:71:26:15:7b:a4:df:10:69:
c6:35:ee:a3:5d:56:68:3e:3f:98:5a:15:2f:35:6a:
9e:c8:68:b9:ea:13:ab:9e:57:fa:e8:ef:e9:21:2b:
87:a1:52:3f:63:c7:35:9d:1c:ac:43:dc:ed:dc:87:
ed:79:11:54:21:51:d0:a2:46:9c:d0:9b:f2:d8:9f:
4a:c8:fa:04:2c:ba:1b:0d:ed:3b:c1:c3:11:87:6a:
a1:68:f0:0f:65:e0:8a:65:8f:8c:1f:4f:db:bc:56:
cf:fb:87:dc:08:01:7c:9c:8e:6e:6a:5a:68:4a:bd:
f9:ac:6c:39:a6:c2:ec:21:87:1c:bf:d6:94:8e:8f:
29:6a:d1:6d:bf:7d:d6:42:83:01:3f:47:38:c7:5f:
35:91:cb:bc:73:10:f9:97:db:d0:81:94:e2:1a:72:
e7:1b:6e:bd:b5:a1:18:c9:df:ea:80:24:94:57:98:
b9:92:68:77:5b:bf:a0:95:f6:27:d1:69:01:4a:08:
67:f5:44:95:ce:b5:46:e2:0c:65:cb:52:c7:22:f7:
d8:8e:aa:71:ea:5b:fd:c2:89:33:43:a2:33:62:21:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:95:0D:D3:59:B5:3A:77:D6:DA:E2:B2:D4:F8:90:86:1D:14:1E
X509v3 Authority Key Identifier:
keyid:3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e5:82:54:83:0f:92:e4:5c:4c:8e:ab:fd:3c:d9:0a:f2:b7:
95:16:60:a4:3b:7f:86:5e:5a:c2:0f:e8:cd:90:bd:25:98:2c:
8c:2d:26:54:2d:22:18:75:50:e5:81:95:52:6e:2b:31:a8:8e:
ce:e6:85:a3:a4:af:ef:f2:4e:80:99:62:85:ca:38:81:fa:86:
ed:ac:3a:83:13:1e:28:98:41:28:48:7f:44:99:61:5e:91:36:
cc:cc:d0:07:4c:0f:a2:15:9b:9b:01:5b:2e:0f:a3:ce:b4:6f:
70:58:a7:47:7a:cc:39:83:b0:d1:63:72:64:8b:a0:22:00:d5:
ed:81:ad:69:29:9e:af:03:c3:20:2f:65:15:2b:a8:22:3e:1e:
de:e8:06:6d:77:69:0d:49:4f:9e:a4:ca:79:51:20:57:44:4c:
98:d3:90:48:c5:a8:78:9d:d3:a2:f1:11:66:a2:1b:ba:bd:a3:
c7:e2:70:12:c8:54:ed:fb:43:da:99:5a:8e:01:03:d4:0e:3d:
ba:13:4d:dd:a8:43:74:48:7f:51:ab:3d:5a:e8:06:53:ec:ae:
eb:94:f2:62:3e:f9:ae:53:01:da:5f:7c:38:3b:ad:ee:98:f9:
59:dc:d0:50:c5:7d:7b:c9:e9:e3:81:f0:d3:0c:bc:cc:c1:17:
67:19:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:55 2026 by rpki-client