Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: 4CFQ0H+WEP1NjvMZn89q/52Aiqo50xtDc9ile4pogOA=
Subject key identifier: 70:76:FE:6B:89:21:19:FA:28:6D:45:58:29:86:D0:6F:27:EC:54:A7
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 019EC0363634DFDBEC87F68A98B6026AEE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 093B
Signing time: Sat 13 Jun 2026 09:00:38 +0000
Manifest this update: Sat 13 Jun 2026 09:00:38 +0000
Manifest next update: Sun 14 Jun 2026 09:00:38 +0000
Files and hashes: 1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: OuznlZDvCNtwVNcQUNs5FzmDhsZLe2Or29/Dgd4h6Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:36:34:df:db:ec:87:f6:8a:98:b6:02:6a:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Jun 13 09:00:38 2026 GMT
Not After : Jun 14 09:00:38 2026 GMT
Subject: CN=7076fe6b892119fa286d45582986d06f27ec54a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:36:a2:b3:85:6d:c8:64:b5:c3:18:30:10:5e:
b5:bd:71:e2:5b:0c:6d:86:5d:c2:ed:82:ac:df:16:
ce:c6:d7:65:21:7a:c0:03:19:c0:f8:d0:fc:d8:1d:
bc:62:9e:c0:f0:98:de:56:80:04:30:89:5d:82:6e:
96:c1:69:12:53:a8:17:ce:54:20:be:db:ed:f0:2e:
76:0d:1f:e1:18:b6:17:5b:70:0f:3c:51:8f:a6:e1:
a7:94:51:66:2f:37:37:20:c6:b7:73:5d:e2:2f:e5:
38:94:cf:a0:96:9b:f5:c9:88:17:97:73:28:b3:d5:
fb:dd:6b:27:20:b8:5c:84:0f:f2:a1:aa:37:ce:16:
83:97:22:c8:19:d5:f9:4a:2d:ee:b3:c1:b7:0f:38:
d4:32:7f:02:77:5c:3d:1f:50:5f:c8:dd:1c:0a:88:
2a:55:18:8f:50:e0:94:c6:49:9d:0b:e0:a6:57:f2:
58:10:1f:f2:d4:72:ff:a3:8c:c9:39:e4:bd:e9:ba:
b5:c8:9a:f3:f6:fb:ac:1b:90:90:34:7f:0e:58:2f:
4c:62:c6:1e:33:02:db:de:71:3b:0a:3d:b3:3d:93:
59:3c:2d:d6:43:90:c4:f5:4b:b0:76:fd:7c:74:d6:
74:f8:d2:7d:b2:9c:d1:64:9c:f0:0d:5f:fe:e7:03:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:76:FE:6B:89:21:19:FA:28:6D:45:58:29:86:D0:6F:27:EC:54:A7
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:cb:ea:2f:39:01:6a:c4:e3:e9:bf:c0:25:d6:ef:26:58:2f:
fc:a3:60:58:1c:93:69:8f:53:52:50:66:c3:d3:a1:67:33:f1:
ca:1a:91:95:eb:28:53:45:16:70:2f:eb:d8:7c:66:2b:58:95:
4c:91:9f:3f:69:28:12:ca:fb:34:8b:63:67:c9:4e:a7:0f:a2:
52:2a:2a:71:9f:5d:55:f8:be:e1:58:26:e1:8a:51:63:c1:87:
0b:29:56:ba:cf:fd:08:c8:1d:df:7d:2e:8c:bb:f6:a3:fd:13:
27:01:ff:52:36:c6:08:db:a8:d3:c0:61:a7:e8:f6:72:d2:af:
d7:4e:10:80:3d:5f:aa:0f:aa:8c:d3:a4:63:b3:15:f7:52:ce:
c5:0f:16:25:9a:09:79:17:cd:a7:ed:de:ba:d1:a6:53:8f:cc:
93:a2:14:90:62:2a:c8:95:ed:0e:20:11:81:68:22:04:21:32:
19:05:b8:be:b4:61:7e:ce:98:85:08:73:2f:c3:51:43:28:fc:
a9:12:33:b1:94:19:69:1a:c8:96:da:2b:96:96:98:24:3e:4d:
d7:73:ba:b5:89:96:ef:d8:11:a3:a6:ad:0c:5f:9e:dd:2b:c6:
da:c1:34:0f:25:ec:ed:f0:cc:a5:7b:ea:bb:a5:9b:77:25:38:
7c:26:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:07 2026 by rpki-client