Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: tUsLTalxlaPP78fg9u9O0IA/aUvF+5Ajz8orxOvjYAM=
Subject key identifier: EA:2C:24:79:5F:5D:DD:89:1F:CA:46:0C:36:E2:8A:65:BB:2A:27:15
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 01A1DD950FDA3740FA096C3D3F0CA27B0DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 1A4F
Signing time: Sun 15 Nov 2026 05:01:35 +0000
Manifest this update: Sun 15 Nov 2026 05:01:35 +0000
Manifest next update: Mon 16 Nov 2026 05:01:35 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: uywj1U2TJrQOj35lN1xCzeoLdTaopCm6XDmHYfsNt1w=)
2: EK7og_r9H_ffSIUUiem5NEk6UL8.roa (hash: eLq/wtFM6uQM0OwlqKSUvfOwD4gri3G8Vxxkp/URFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:0f:da:37:40:fa:09:6c:3d:3f:0c:a2:7b:0d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Nov 15 05:01:35 2026 GMT
Not After : Nov 16 05:01:35 2026 GMT
Subject: CN=ea2c24795f5ddd891fca460c36e28a65bb2a2715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:b9:d8:f5:ed:90:e3:8a:83:be:90:a7:f0:
43:4f:14:f8:87:95:86:46:05:fd:8b:4f:61:ca:53:
ff:d4:23:65:ce:e6:de:ba:41:50:45:05:dc:93:b4:
f9:72:0a:de:c3:06:9a:3f:54:54:89:f1:5d:7d:7f:
e6:e6:77:8a:ac:9c:40:88:41:75:9d:82:75:49:38:
8b:28:5a:24:29:e6:e7:77:22:0c:bb:57:50:a0:72:
a4:81:fb:7f:f0:56:70:0a:53:94:fc:c2:91:d1:59:
de:7a:a6:87:c1:32:7f:8c:a2:86:f3:05:1b:46:43:
b8:b6:41:3a:b0:29:40:b2:f8:68:c9:8a:dc:d3:7d:
77:78:8c:28:36:59:66:c4:a3:8f:17:52:09:cd:bd:
99:f7:4b:18:fa:9d:6d:fe:cd:53:20:be:3f:56:b5:
c5:93:9a:14:e2:7a:ff:fb:a9:8e:cc:0d:45:16:4e:
04:40:96:c1:3f:dc:74:59:9d:7b:47:b5:5b:ad:1f:
57:be:ff:33:79:bc:91:2b:02:22:6b:11:11:c5:70:
84:24:e1:c0:98:54:a0:ee:ce:3f:a7:b5:f3:fd:9c:
5f:51:e6:db:89:b1:25:ad:93:0c:88:25:6f:d4:60:
62:40:0b:79:9e:3d:77:e2:88:c4:08:52:33:6f:18:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2C:24:79:5F:5D:DD:89:1F:CA:46:0C:36:E2:8A:65:BB:2A:27:15
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:37:3b:50:9b:80:32:88:d0:c4:2c:c7:ba:00:12:5d:a4:3d:
77:9e:14:d2:e9:c8:89:fb:4e:7b:60:16:77:18:49:04:85:69:
41:7c:d0:9a:b4:aa:8b:6a:c6:53:61:48:b9:b2:0c:8d:02:4f:
21:50:32:fd:69:74:6d:3c:ad:ae:7d:60:07:75:46:69:5e:33:
df:68:25:ab:12:cb:67:2a:82:0e:60:f9:c1:43:3a:81:b6:4e:
72:90:70:4f:73:68:30:13:89:0f:f2:b8:b1:3c:52:14:24:d1:
c7:ab:70:e3:72:5c:c7:85:94:ae:52:5d:d8:d6:5c:e0:63:0a:
73:60:ca:3e:7f:c8:41:0b:24:67:6d:e1:80:f2:b5:de:d0:1d:
a8:08:79:7e:3a:14:98:24:24:54:82:59:53:b9:71:48:f8:be:
b0:73:02:25:cc:74:ed:0e:a5:0b:fd:bd:ab:97:ef:f6:00:15:
d7:51:de:b0:02:68:2d:c3:f6:d4:04:fa:e2:9c:70:1a:7b:64:
34:62:b4:1e:e8:0b:0e:8c:b3:9e:7c:7b:da:33:dd:cd:ca:5f:
d5:69:4b:ed:7b:36:49:07:cd:49:ab:a7:ec:26:cb:19:ec:66:
32:40:c1:f3:33:4b:0d:6e:ff:4a:5d:86:39:ce:b5:ac:52:e5:
f0:a2:1b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:08:37 2026 by rpki-client