Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: rhyCCcyy9kxnKWq6MZFrCNC7lsazWf9Cnl76hox8dWk=
Subject key identifier: 8E:BD:1D:EA:AB:5B:61:04:CA:0A:63:68:6E:23:B0:AA:BF:85:7B:0F
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 01A11116D654ABFDCFF463DB74231C576C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 12:01:11 +0000
Manifest this update: Tue 06 Oct 2026 12:01:11 +0000
Manifest next update: Wed 07 Oct 2026 12:01:11 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: IQIf+OJS7pE5ZtQlRwXYDX+uwu9p+w9/2i/AT5Rlk2A=)
2: j6GSjngp4zBMa0A6Up3-vP_HpYA.roa (hash: eFIS08YcHeuG7OXuLasqB4hIQnIZETYTn/VjLjZa0pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:16:d6:54:ab:fd:cf:f4:63:db:74:23:1c:57:6c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Oct 6 12:01:11 2026 GMT
Not After : Oct 7 12:01:11 2026 GMT
Subject: CN=8ebd1deaab5b6104ca0a63686e23b0aabf857b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:cd:e1:aa:92:2a:70:65:c1:06:bb:e0:53:
8d:1d:c1:1a:63:2a:aa:bb:fe:b0:dd:f4:5c:76:42:
76:9d:45:91:16:98:f7:94:e4:fe:da:a8:26:22:13:
0d:87:23:f9:68:8d:27:60:eb:1a:fd:e5:62:fa:f2:
d5:d7:06:af:6f:74:fe:d7:8b:1c:a5:7f:3c:58:ed:
07:32:54:6c:77:5f:2f:57:3f:08:79:d5:12:ce:23:
10:7c:35:65:10:55:52:a6:df:c4:f2:58:34:a8:7d:
23:43:5f:2f:ea:d4:98:b8:d8:fa:54:d8:19:55:e2:
f3:c1:b0:ea:d3:0e:c7:d4:c1:78:50:8b:fd:73:84:
44:28:53:a6:ab:26:6e:bb:99:10:bb:47:c6:a8:87:
1d:3b:3e:c1:32:c5:99:1b:30:2c:15:7b:16:eb:c1:
9c:4f:31:4b:05:5b:f1:2e:27:d4:f2:ea:96:31:72:
96:e0:70:c0:fe:ca:88:1d:4a:80:63:c6:b1:2e:a5:
d8:5c:50:ae:d6:91:03:26:bf:59:92:c1:3c:5a:c9:
b1:30:59:3a:32:26:77:e3:92:c8:80:91:4d:28:d1:
a6:b7:19:f6:40:07:db:f6:17:a2:ec:42:71:15:e1:
db:65:ca:dc:6d:eb:ae:6b:46:9b:7d:5c:ce:7d:aa:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BD:1D:EA:AB:5B:61:04:CA:0A:63:68:6E:23:B0:AA:BF:85:7B:0F
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f3:20:60:1b:f4:7c:85:df:82:7f:4d:22:be:8c:6c:03:31:
f7:03:55:5b:40:a1:f7:0b:0c:4c:d4:17:3f:b6:ff:43:4d:b0:
e4:f8:8a:32:50:16:ac:92:ba:a0:26:f2:73:2d:af:63:1a:50:
7d:59:94:e1:26:88:1e:85:41:e5:33:cc:86:7e:12:81:4e:40:
18:99:8d:3d:ec:dd:09:f7:c6:0d:48:45:8a:79:67:7f:1d:e1:
ad:77:0b:18:c1:47:4d:b2:2d:11:d6:5d:d6:ae:51:0f:83:59:
c4:bb:3a:4c:f4:8d:4e:a5:35:58:26:e5:c0:b2:04:65:10:f4:
d1:83:ba:63:95:04:fd:6c:74:48:ec:64:19:21:78:f0:13:96:
cd:44:a7:9f:11:34:d3:e6:ae:62:3f:4f:de:5e:c4:50:52:20:
b7:71:ad:76:71:99:19:08:1e:fd:f2:a2:ef:78:3e:43:6b:d9:
93:fb:95:2d:0c:2d:00:4b:2a:a1:3f:81:7c:20:c0:e1:76:04:
7d:46:86:3f:6d:0e:f5:ea:f7:44:cf:cd:2e:40:33:e6:ca:c0:
6c:24:91:36:91:f1:fb:48:20:9d:18:ad:cb:e8:8a:e8:b3:a1:
6c:49:79:88:38:ec:a3:49:4b:7f:a4:0e:17:98:19:59:27:16:
3a:e0:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:11:53 2026 by rpki-client