Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
File: OzBfl6JvMdgAYFn7OrGerPt4NFU.mft (raw, json)
Hash identifier: PUUjgb/cJFN0xwvtMCtRh7neyuTdLLd4QsyDVCwERLo=
Subject key identifier: F6:92:21:DA:5C:F8:6A:34:BE:D7:31:31:6F:18:BA:C0:D9:94:34:FB
Authority key identifier: 3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
Certificate issuer: /CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Certificate serial: 019CAAFD60C8A9D676EE5784D1246F80BF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
Manifest number: 0C30
Signing time: Sun 01 Mar 2026 20:00:57 +0000
Manifest this update: Sun 01 Mar 2026 20:00:57 +0000
Manifest next update: Mon 02 Mar 2026 20:00:57 +0000
Files and hashes: 1: Nph9BsHMAWz3v3KuWSmSYaAs3t0.roa (hash: PiH06TnQZKY0ou+2ssqAuJ7EJt+8n060evKXmiAMkgE=)
2: OzBfl6JvMdgAYFn7OrGerPt4NFU.crl (hash: phyXv6Lue3n+hxvgIZ/5SHGpa9bmlGsezWg7wnZRVXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:60:c8:a9:d6:76:ee:57:84:d1:24:6f:80:bf:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b305f97a26f31d8006059fb3ab19eacfb783455
Validity
Not Before: Mar 1 20:00:57 2026 GMT
Not After : Mar 2 20:00:57 2026 GMT
Subject: CN=f69221da5cf86a34bed731316f18bac0d99434fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6a:5e:fa:cf:4e:7e:ae:7c:84:a6:88:7a:12:
83:f8:85:72:00:76:e8:8b:36:6c:31:cf:c1:9e:97:
19:04:8f:64:78:c0:80:4f:eb:62:a2:b9:92:e2:35:
3d:2d:56:e4:d4:9f:73:90:3b:7a:03:f5:e5:b0:1c:
61:00:c0:ab:19:97:f1:ce:f3:d5:a6:14:74:1e:81:
95:6d:71:36:0a:13:ce:09:53:a5:c7:94:49:d5:a2:
c2:ad:37:26:17:16:8e:bd:eb:95:4a:a4:90:33:cd:
8b:58:b6:63:f7:1d:59:79:2d:2e:df:eb:09:5f:ef:
7a:e6:81:44:40:1c:b1:7f:23:30:13:f7:b3:a4:52:
3d:bb:a6:41:22:5a:f9:b8:db:bb:45:1d:7b:9f:f4:
81:55:d7:9e:34:87:30:07:17:bc:d5:8c:55:b9:ed:
79:1d:f7:85:05:29:94:44:05:c0:f2:ee:02:c6:8a:
f2:05:0c:f0:ed:4a:6c:88:0b:69:22:2f:fa:75:61:
b8:b7:1f:d1:4d:44:50:e2:71:34:fc:98:9b:a1:c6:
9d:a2:0b:c4:51:76:18:bc:a3:af:94:4c:12:ad:52:
87:6f:70:19:f2:18:4e:98:42:8e:45:9b:d5:de:29:
37:80:30:14:03:89:d2:fa:88:e6:39:3e:c8:23:ba:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:92:21:DA:5C:F8:6A:34:BE:D7:31:31:6F:18:BA:C0:D9:94:34:FB
X509v3 Authority Key Identifier:
keyid:3B:30:5F:97:A2:6F:31:D8:00:60:59:FB:3A:B1:9E:AC:FB:78:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzBfl6JvMdgAYFn7OrGerPt4NFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1aa951-6c48-493d-ad89-58b9b0c2440b/1/OzBfl6JvMdgAYFn7OrGerPt4NFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e0:06:09:78:61:b4:4b:98:a1:fe:bf:fb:1c:f1:1b:35:01:
37:e1:13:08:99:5b:34:79:84:a2:4a:c3:9d:b1:9c:f3:d7:1c:
28:26:87:c1:f4:d9:ed:4f:47:a8:df:71:c5:13:d9:b3:24:84:
59:44:c8:43:e1:88:4a:f2:78:3a:4e:5a:ac:98:ba:c2:3e:d6:
73:71:c8:cd:30:f0:7e:fd:dd:03:b4:20:2c:80:6c:86:cd:98:
70:81:ec:2d:64:fe:f2:e0:0d:9e:42:7e:81:cc:1b:5f:55:64:
07:e1:21:5a:b2:91:22:87:8c:03:a7:1a:fe:2c:7c:5a:cc:2b:
c4:8a:e1:a7:bf:98:57:e1:9c:c3:41:32:d2:a6:41:a8:32:66:
5b:5d:7f:0c:ac:c2:1c:3d:82:c2:4a:3e:c5:bb:3b:8f:26:40:
d8:b4:8a:e7:a3:14:73:a7:ba:73:13:f4:56:30:3c:6c:4a:09:
82:ac:b7:fa:d1:d0:94:30:39:da:f9:c3:70:e7:ed:c2:69:4d:
f7:74:8c:bc:ce:ea:ad:a1:4b:12:75:53:08:da:ec:33:9b:8a:
1a:fa:35:bd:81:4d:81:11:6f:ee:f5:d5:3c:31:c9:a0:b2:07:
51:c1:2c:89:d1:bf:fb:42:47:65:40:b1:71:43:89:9f:90:95:
36:7d:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:38 2026 by rpki-client