Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: JwedUKPFviM72pNGXI1rOFDHLIMr6gKSvACLhS6+psQ=
Subject key identifier: 80:F4:82:70:AB:39:4A:6D:F5:C6:D8:E6:E6:52:9A:F8:54:A8:78:7C
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 019FA9ABF2998847FAE060FA6505B0A87F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 192B
Signing time: Tue 28 Jul 2026 17:00:45 +0000
Manifest this update: Tue 28 Jul 2026 17:00:45 +0000
Manifest next update: Wed 29 Jul 2026 17:00:45 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: kURj4WoNClyCqIYLEcbenKrjyWJILPZEMLebGmA6tAA=)
2: EK7og_r9H_ffSIUUiem5NEk6UL8.roa (hash: eLq/wtFM6uQM0OwlqKSUvfOwD4gri3G8Vxxkp/URFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:f2:99:88:47:fa:e0:60:fa:65:05:b0:a8:7f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Jul 28 17:00:45 2026 GMT
Not After : Jul 29 17:00:45 2026 GMT
Subject: CN=80f48270ab394a6df5c6d8e6e6529af854a8787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:e3:bf:76:a4:91:83:e0:91:b3:25:a4:19:
64:80:7a:1e:ea:89:f5:fa:36:c3:ec:1c:7d:0e:ae:
e5:8a:3f:44:76:c2:ef:97:53:a8:10:2e:1f:28:84:
28:e2:e4:ea:d4:e6:9d:ea:56:05:43:fe:53:c7:fa:
43:80:07:21:e4:0f:83:4f:d0:c2:04:2c:07:bb:18:
ec:76:02:cf:e9:4f:cd:24:6f:16:a6:92:56:85:d7:
68:fa:45:9a:00:1f:8d:12:82:be:c4:6e:96:7e:bb:
18:16:26:54:4a:84:b3:e1:9f:69:95:5b:65:f6:0b:
e1:ef:5a:99:4a:03:cc:b2:f2:5a:73:fd:97:20:7e:
f5:4e:df:2b:ac:b3:a9:d9:fb:96:a1:00:95:65:ea:
66:a0:4a:20:b7:4b:e5:eb:26:eb:8e:1c:39:f2:c1:
36:2d:5c:0d:9c:97:a1:b1:34:a2:8b:e0:e8:5c:c0:
07:f7:ee:3b:1f:11:b1:63:00:0d:31:30:c2:1b:fa:
b0:e0:59:37:d4:5f:41:f5:e5:ae:83:5b:55:2f:e2:
d5:f5:dd:71:cc:90:a3:9f:e3:ed:17:03:3c:ed:5c:
e8:22:4b:9a:77:89:ef:6f:e0:18:d0:02:53:21:91:
de:5b:cc:97:a6:b5:69:6f:4c:8a:e7:4f:d9:65:07:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:82:70:AB:39:4A:6D:F5:C6:D8:E6:E6:52:9A:F8:54:A8:78:7C
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:db:82:50:10:48:25:91:9e:f6:6a:48:cd:cc:0a:c5:98:80:
b6:71:bb:92:e7:68:70:05:41:f3:f5:f8:50:77:a7:2c:bc:c2:
b5:8d:78:4e:fc:96:68:b7:a0:a9:7a:bd:ab:fe:51:0b:1f:5d:
c7:f0:2c:2e:ff:38:6a:b3:7a:ec:26:7b:e2:2e:a9:0f:60:30:
59:c9:07:11:5b:0f:fa:79:24:d8:85:17:22:26:68:24:8d:3a:
06:d4:9e:12:ce:e6:cf:2e:81:1e:60:a4:36:e3:3b:06:c7:db:
f4:6a:c6:a8:df:ba:5b:22:9c:6b:7b:95:4f:81:e0:67:e3:44:
05:39:0b:2f:d4:d7:94:b4:8c:eb:c2:7d:c7:4c:91:53:47:3f:
44:fd:6d:74:51:29:8f:9d:50:e0:e7:34:0d:9f:99:8c:ce:0b:
16:3d:d5:6c:5f:49:f3:d6:a5:c7:90:da:9f:7f:8d:b1:96:79:
70:50:94:2f:a3:b5:3d:d7:30:79:f6:ff:b4:9d:b8:b0:2d:5c:
bb:bc:b1:84:6b:36:e7:ac:70:a4:cd:b1:8e:e6:2a:bd:3f:3a:
33:03:a9:72:7a:c8:e7:bf:09:4d:0b:e1:67:8f:a6:d3:ae:fe:
0b:55:d9:9f:39:5d:dc:89:ac:e7:a3:06:63:e0:2a:22:49:23:
69:16:3c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:36 2026 by rpki-client