Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: 2rZd5MaQcBcC1QiJV30CuggZFzaru01u2C0bdrPIAWY=
Subject key identifier: 8A:7D:1E:B4:70:45:1F:45:4F:12:0C:6D:D2:9A:D6:E9:8A:15:EE:F3
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 01A0C7B3F0A32F260D0832B9A4AEA309893E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 0A48
Signing time: Tue 22 Sep 2026 06:00:53 +0000
Manifest this update: Tue 22 Sep 2026 06:00:53 +0000
Manifest next update: Wed 23 Sep 2026 06:00:53 +0000
Files and hashes: 1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: fYnbv2sEHTgFtgOfe/5L/u9VnVMPbN5Y616D5+4oGhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:f0:a3:2f:26:0d:08:32:b9:a4:ae:a3:09:89:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Sep 22 06:00:53 2026 GMT
Not After : Sep 23 06:00:53 2026 GMT
Subject: CN=8a7d1eb470451f454f120c6dd29ad6e98a15eef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:c4:c2:b9:a4:d1:c8:aa:a5:5f:d5:93:34:
d0:28:e5:76:b3:df:b6:f8:c7:da:ce:9c:48:a6:d0:
29:8c:ef:f7:33:37:d7:47:78:d9:4b:db:7e:92:ec:
0a:6d:a3:c6:74:20:a6:97:2b:43:3e:9c:d2:55:5f:
1b:8f:d6:02:b9:49:d2:dd:0e:09:08:98:86:62:0e:
1d:c5:62:91:f9:29:3e:01:86:e5:10:cb:59:01:ad:
bf:47:94:50:74:9f:da:48:ac:10:84:5e:92:34:ba:
90:65:cf:57:57:da:13:c2:79:19:f2:f9:b3:dd:00:
c8:75:19:15:a3:5d:34:ae:37:2a:6c:76:72:a0:d3:
16:61:8d:17:c9:32:10:e1:51:d0:a9:fd:f4:fd:1a:
02:e9:2e:45:3f:39:b5:18:69:5b:fb:a1:cd:74:0a:
ac:1d:ee:71:13:d7:e8:58:4b:72:d6:90:59:29:c0:
c4:95:b5:85:55:d1:49:87:97:91:4a:ea:2b:e9:56:
61:09:1e:16:91:7d:6f:30:46:8f:73:40:2d:90:46:
60:2a:f7:bb:d8:2d:2e:5d:4a:7c:ed:0e:5f:15:88:
da:9f:76:74:ee:49:0c:2f:3e:70:11:ed:15:4b:26:
7f:d1:47:85:12:13:e3:29:50:9c:26:86:d6:f7:9e:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7D:1E:B4:70:45:1F:45:4F:12:0C:6D:D2:9A:D6:E9:8A:15:EE:F3
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8e:9c:96:bd:a5:0c:93:da:3c:07:0b:7c:bd:32:67:35:c0:
e6:dd:dd:f3:13:43:4b:a3:f0:71:2b:a6:19:30:3e:27:88:8f:
35:b8:8b:f8:15:42:40:f3:2e:9d:00:b4:79:a5:0e:71:c2:50:
51:10:09:63:36:91:3a:09:d9:80:6b:43:e2:6f:85:b8:68:3b:
3d:bc:07:57:f5:d1:8e:4f:fa:c0:b7:ca:9e:e5:83:4d:07:91:
af:76:3c:c6:dd:4f:25:bd:3c:59:4f:ba:d1:61:ba:1e:fe:12:
49:b2:8a:d4:e2:52:2e:8c:5e:9c:dc:61:f5:25:98:53:ae:b9:
a3:14:28:f6:d9:a7:84:05:cb:7f:79:8a:d6:a4:29:ad:ce:82:
98:97:e3:22:52:49:59:58:b5:1e:5e:05:10:66:88:cb:47:35:
46:d4:e9:69:06:0a:dd:89:33:db:ee:b3:15:5d:6d:f4:1c:42:
4b:78:7f:f3:c5:06:40:b1:38:ff:5c:6e:f2:8d:85:58:e4:89:
72:24:0a:7c:e5:3b:08:d5:60:ae:ff:2b:9c:5f:c4:85:04:47:
62:c7:75:69:67:c4:cb:5a:38:98:5c:a8:78:51:b0:72:41:39:
b0:a1:7f:22:bb:2c:d9:7a:52:96:c2:db:b3:35:f8:ac:c8:66:
8e:11:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:33:30 2026 by rpki-client