Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: l/c3UKvZPkUyUVDh7fh7Cy9LorVBf+MyGPwOWEfjPAw=
Subject key identifier: 20:C7:21:A4:81:B3:F9:E3:40:2E:9A:DA:AB:71:C2:59:EE:52:C6:1D
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 019D9A06FE8CF6A937BD3589DFECC4523FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:42 +0000
Manifest this update: Fri 17 Apr 2026 06:00:42 +0000
Manifest next update: Sat 18 Apr 2026 06:00:42 +0000
Files and hashes: 1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: 2oL4dOGN2al+PMO5eJgVLPB6tflu3eBea25OL2c6xEU=)
2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:fe:8c:f6:a9:37:bd:35:89:df:ec:c4:52:3f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Apr 17 06:00:42 2026 GMT
Not After : Apr 18 06:00:42 2026 GMT
Subject: CN=20c721a481b3f9e3402e9adaab71c259ee52c61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:61:72:de:c2:51:e0:e7:a3:5c:14:da:25:
b3:43:d5:09:3b:42:17:47:fb:9f:96:1c:f7:19:a9:
76:21:32:25:83:50:03:8d:67:a2:69:d1:eb:10:8e:
af:aa:9b:f5:96:9b:c1:6d:68:bb:d1:dc:6b:8a:ad:
02:fb:53:56:d5:db:ad:7e:f1:fa:bd:78:01:9e:de:
e4:5e:2d:8b:d5:cc:f6:61:1c:87:15:38:8b:f2:99:
0c:f7:be:8f:1e:09:42:09:54:d7:ff:99:82:65:6d:
74:08:5f:4d:c3:63:e4:e2:22:13:8e:81:84:5b:64:
b3:d4:84:ca:ef:f9:39:5e:18:94:87:7c:eb:c6:02:
66:bc:db:63:27:e9:44:91:8e:b7:1b:de:46:95:84:
f0:63:cb:b7:c1:81:1a:7a:c8:69:88:7c:c5:c9:01:
64:3e:0e:37:6f:13:f0:ea:f6:86:bd:39:b9:39:d1:
04:0e:56:d6:1d:8e:e8:38:42:8c:00:b3:2c:2e:27:
f6:f6:6c:8b:c2:f6:fc:bb:0b:77:7c:ce:42:02:34:
ce:64:8b:7e:8b:89:d2:ee:50:68:3e:18:40:19:66:
bf:84:0e:9f:9a:71:3b:12:06:d6:f0:cb:9c:1f:cd:
81:76:9e:86:85:36:34:03:69:45:21:f1:72:8d:64:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C7:21:A4:81:B3:F9:E3:40:2E:9A:DA:AB:71:C2:59:EE:52:C6:1D
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ce:62:3d:42:a4:e1:3c:24:bd:2f:13:8c:8e:0e:56:a6:63:
60:36:18:74:d8:4e:16:4d:b5:d7:ba:65:8c:53:52:a1:c7:6b:
c6:a3:86:36:50:17:5e:2f:f4:c8:1a:d4:cb:55:2f:64:48:d3:
e8:0c:02:72:43:7b:49:c4:27:c3:56:4b:7f:f1:e6:0a:ef:7e:
b2:96:2d:69:41:fc:a6:5b:c0:89:44:0b:7a:4c:ce:26:e0:8b:
51:dc:d6:0a:31:3b:cc:42:d7:b7:9a:06:5a:42:98:50:9c:36:
03:15:3a:f6:1f:20:05:2d:56:6d:3b:a7:e0:d1:d0:be:1c:a6:
98:a4:0d:bb:a8:f1:bc:69:87:36:66:bb:02:cb:07:ac:0e:6f:
d2:f7:43:59:a1:20:66:16:9d:36:8d:d1:ae:b0:6e:a9:9e:24:
51:3f:46:06:fb:1b:21:57:6d:59:95:34:72:b3:75:85:a1:86:
d1:f1:3c:4f:bf:87:ed:3c:b2:94:ea:ec:1e:4b:81:0a:dd:98:
3b:68:98:82:ad:d2:38:3c:1a:16:cb:0a:6b:63:d3:93:2f:fa:
48:2f:ea:25:c5:4e:7b:c3:bf:35:ce:7a:d0:b2:f5:d2:01:d9:
ec:1e:fc:d5:78:e4:51:4d:56:c9:17:ec:15:0c:9c:a4:e6:2a:
0c:34:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:47 2026 by rpki-client