Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: GImrGkdtLMcW1AuwFdUTM8oIll/1cDOBFP+7rmGHd08=
Subject key identifier: 3F:01:6A:CC:86:28:67:1D:A2:69:48:91:2E:70:0D:1A:34:BA:1A:90
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 019FABD0DA9A6F91FC5E987340BCD47B2BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 09B5
Signing time: Wed 29 Jul 2026 03:00:19 +0000
Manifest this update: Wed 29 Jul 2026 03:00:19 +0000
Manifest next update: Thu 30 Jul 2026 03:00:19 +0000
Files and hashes: 1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: i2uUtnDHliQe9MU3QI2LDLeyG6sRR5iA2WWIYKTFJSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:da:9a:6f:91:fc:5e:98:73:40:bc:d4:7b:2b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Jul 29 03:00:19 2026 GMT
Not After : Jul 30 03:00:19 2026 GMT
Subject: CN=3f016acc8628671da26948912e700d1a34ba1a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:27:05:2a:a8:d4:ad:63:46:39:c1:33:05:
a4:f8:0e:43:0f:8d:2b:13:f2:56:4e:0e:11:f7:c4:
34:c4:f5:9c:ef:fe:07:c5:8c:f1:29:fb:01:da:d4:
8f:a2:c0:5a:f2:55:e0:43:03:16:e6:b4:b8:14:23:
f3:d5:31:b7:a3:42:c2:b9:52:24:79:80:ed:0e:b8:
d1:24:1b:5b:54:57:e5:72:d0:e5:c5:19:d2:3c:84:
df:b1:ca:f6:ee:dd:e0:97:7b:3b:70:d7:ad:e5:34:
83:a9:f7:6c:92:77:27:fe:fb:9c:3e:5b:32:f1:0f:
42:10:b2:d8:95:5f:96:22:71:21:26:36:4c:aa:e9:
a3:e7:8c:bb:cb:4d:33:18:9d:1d:d3:63:0c:d7:28:
34:5a:3c:7b:33:e8:ac:d9:8c:51:04:06:36:26:44:
1f:21:64:27:ab:47:8a:bc:a4:68:01:b1:bb:b3:d3:
2c:07:ba:06:6e:60:6e:87:ae:e8:c0:b6:33:51:81:
aa:e2:67:db:82:21:1b:9b:1e:32:74:df:e3:34:c5:
5a:e3:22:26:15:bc:9f:c3:7e:c9:a2:34:24:f8:32:
a5:f6:7b:cf:74:6d:c0:2c:d1:fb:8d:91:3a:a7:be:
72:ea:61:89:eb:3e:60:e4:f8:34:e9:60:1b:0d:05:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:6A:CC:86:28:67:1D:A2:69:48:91:2E:70:0D:1A:34:BA:1A:90
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6e:b0:da:b7:59:f8:51:b1:9f:53:18:73:bc:e9:93:d5:c3:
aa:00:d0:cf:ff:05:84:94:da:31:67:5c:22:b1:06:4b:85:96:
61:e0:bd:c7:11:eb:0d:37:b4:11:8f:95:ad:90:70:c6:62:e9:
65:cb:ff:cb:b6:3d:0a:4b:58:79:b8:ce:89:06:dc:dd:75:d2:
ed:ad:c8:fa:06:ae:fa:57:6c:37:c0:95:3c:5d:7d:14:ce:78:
79:ef:df:25:73:4f:4f:fd:21:d4:e8:ad:74:74:6f:ba:9f:f0:
8f:c9:ac:84:ff:c8:29:28:ef:88:e3:56:74:20:3b:b2:e1:5d:
a4:0e:e8:e6:ad:9c:0a:4e:29:46:c7:75:3e:39:57:52:ca:77:
08:a6:9f:05:ff:41:3e:c8:61:a9:36:7c:88:fb:40:28:8d:22:
82:5a:7b:aa:94:ed:20:92:70:67:58:7c:26:dd:a2:54:53:53:
ca:bb:53:7b:37:c2:33:d6:8b:be:69:41:eb:a0:98:b3:ab:7c:
b8:fe:f3:4d:f4:89:9e:2e:52:24:59:69:0d:86:2c:e3:23:f7:
c1:a7:2f:fd:cb:82:67:75:12:05:0d:d9:19:90:07:0a:cc:d8:
41:ca:67:a0:12:e8:70:8b:70:cc:3c:4a:87:4c:92:e8:6d:44:
ae:87:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:21 2026 by rpki-client