Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: 3Bt685K8JKqMMpDFtenpf8K1pulqtd4jjb7VKUjmxEI=
Subject key identifier: 17:C2:39:F7:45:3D:F6:5D:51:59:50:5A:C3:0B:6D:87:E1:62:9A:6B
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 019CAD22BE9DC2B37C17DB0ED9A92CF81183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:01:01 +0000
Manifest this update: Mon 02 Mar 2026 06:01:01 +0000
Manifest next update: Tue 03 Mar 2026 06:01:01 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: qBv8remABA1USqo7K0XCOmDvhpHjaufECNqsUFHpuU8=)
2: j6GSjngp4zBMa0A6Up3-vP_HpYA.roa (hash: eFIS08YcHeuG7OXuLasqB4hIQnIZETYTn/VjLjZa0pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:be:9d:c2:b3:7c:17:db:0e:d9:a9:2c:f8:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Mar 2 06:01:01 2026 GMT
Not After : Mar 3 06:01:01 2026 GMT
Subject: CN=17c239f7453df65d5159505ac30b6d87e1629a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:68:ec:de:f3:f0:3c:f4:5d:0b:33:c1:12:
89:d4:5d:15:98:19:eb:06:b5:80:a6:dc:32:d7:1f:
cc:63:46:3f:c5:7c:1f:a0:23:5f:62:c9:f5:bb:29:
96:3c:bc:59:12:f4:67:4a:bd:44:f0:25:a5:3b:3b:
c5:e3:4f:53:02:06:83:99:41:2d:a6:6c:21:98:06:
04:c4:09:b5:fc:ea:b9:78:28:72:45:72:df:35:3d:
23:f2:48:c5:13:bf:21:14:d4:ed:01:ef:19:eb:84:
ec:6f:15:a8:63:b1:62:00:c6:a9:06:ee:2d:f0:75:
c4:c5:ac:e5:63:d1:42:71:29:30:d3:ae:00:46:f9:
3b:86:86:2a:e1:89:8b:fe:74:be:fe:65:fe:c0:2b:
5c:4e:ab:50:e2:1b:b7:e0:e3:b4:e1:32:05:94:f0:
7d:33:2e:20:97:8f:cd:3c:db:36:16:af:24:cd:f1:
5e:45:45:0e:c4:20:12:8e:3a:62:f6:a6:c7:31:3f:
7c:b1:a1:7a:d5:81:99:e2:2b:08:aa:41:b5:1f:4e:
06:e7:4d:d7:ee:25:ab:f3:9e:64:e4:96:04:cd:72:
bb:a4:06:2d:a0:4f:70:4b:b4:29:9b:79:6c:d7:f4:
a6:6b:6c:06:fa:a7:fb:62:8c:94:87:24:33:6a:82:
d7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:39:F7:45:3D:F6:5D:51:59:50:5A:C3:0B:6D:87:E1:62:9A:6B
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fc:64:01:2e:0b:37:be:07:df:e7:2f:60:bf:d0:9d:f5:b6:
02:93:96:a8:bd:17:5a:cc:0c:83:7f:21:cd:0a:b0:4b:3e:df:
1f:61:cc:49:94:aa:40:2f:bd:71:98:1f:04:2e:85:49:c9:51:
ad:7c:10:d8:18:07:60:66:5b:bb:ed:2b:f4:c2:ac:db:6a:bd:
0a:12:8f:04:17:6d:b3:6a:03:1f:95:29:9e:f9:72:25:74:80:
8b:85:c9:59:94:29:a1:a9:a1:29:58:6c:35:e7:49:67:d6:f3:
44:56:9f:bf:82:0e:9f:df:71:f9:f6:71:db:87:7f:0b:59:27:
0a:ed:7d:4e:9d:ad:eb:0a:18:90:0a:57:b2:7e:a2:1c:ea:22:
1b:57:30:8b:12:1a:26:9a:a9:56:9a:85:53:4c:4d:a3:aa:ce:
99:1b:13:d6:32:5f:50:cc:39:59:5d:d4:98:ec:26:e6:9f:4d:
3b:94:a8:33:74:cb:6a:62:c8:39:bf:86:14:52:bc:ef:b9:7f:
0b:a3:98:7c:3f:f7:0f:fd:04:cf:e7:83:f0:46:d4:2d:49:e4:
ae:d8:eb:71:13:c5:52:9b:69:aa:51:65:fa:9f:b4:c7:4f:88:
02:e1:3e:37:1c:09:f3:7d:4f:81:c3:6a:04:61:c0:52:ac:cf:
e0:da:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:45 2026 by rpki-client