Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: 1l4PLe28FGnZtwooY2r8zUQbzFCQrNwqOZyLQCgvcKY=
Subject key identifier: AB:3F:28:F1:38:33:3C:71:99:F9:D3:B3:96:A6:CC:76:E5:36:DF:CF
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 019CAB6B724E4F46EE26878E3A47D2E18482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 0827
Signing time: Sun 01 Mar 2026 22:01:11 +0000
Manifest this update: Sun 01 Mar 2026 22:01:11 +0000
Manifest next update: Mon 02 Mar 2026 22:01:11 +0000
Files and hashes: 1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: 7bpLvjVCszXDfDNiFIqyAfXlQZ9lcSFHTRrd4oo5u98=)
3: bb_iJ1U1Lf6VC6Ovl038VnEkd0c.roa (hash: x4RJFA42s0Y6MhAsHNXRTYoSOIZLJ8yZ/qGJdWD8hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:72:4e:4f:46:ee:26:87:8e:3a:47:d2:e1:84:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Mar 1 22:01:11 2026 GMT
Not After : Mar 2 22:01:11 2026 GMT
Subject: CN=ab3f28f138333c7199f9d3b396a6cc76e536dfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:75:47:30:52:7d:28:ec:96:46:9a:04:17:
73:c3:b1:d1:89:b5:a5:49:a6:55:d9:70:99:e6:32:
bf:13:7f:4a:a5:cb:16:9d:fe:22:dd:36:98:10:b3:
7c:d0:5a:ec:34:d3:0f:6b:51:e2:32:02:f5:06:fe:
44:5c:8a:2f:b5:18:cb:ec:a5:54:47:e6:16:15:4e:
60:65:50:11:0b:1a:03:cc:53:cf:d0:56:01:59:e8:
e5:fa:b4:18:ff:b2:59:84:48:5b:a4:e5:58:5f:39:
24:a3:77:43:7f:0c:33:ca:62:45:ea:57:34:db:47:
14:b2:0d:d2:89:ba:7a:91:d4:7b:e1:a0:09:fe:07:
97:33:3c:ba:de:72:26:6d:44:16:6f:a6:b0:ce:50:
ef:4c:70:d1:8c:f8:f5:5b:8f:d9:12:7b:94:34:92:
43:24:41:c6:24:83:a4:ae:ba:fe:ae:f5:9d:d8:9a:
e8:a6:f6:78:5c:89:6e:d0:5e:77:31:14:84:d7:b7:
45:0c:79:02:a7:31:ed:65:c5:c4:b9:e0:35:c0:34:
14:ef:14:eb:9e:1a:cf:5c:64:b5:26:21:a1:28:86:
ec:d9:09:1e:41:16:5a:13:a3:f6:ca:f8:ae:bd:08:
b0:a8:8c:ac:03:ec:37:0c:e3:bd:43:31:8f:b8:d8:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3F:28:F1:38:33:3C:71:99:F9:D3:B3:96:A6:CC:76:E5:36:DF:CF
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6e:e9:ee:33:fc:9c:08:cf:92:59:2e:37:17:de:37:e1:00:
b3:99:fe:f5:c0:58:d8:e6:7e:0b:8c:9b:ee:1b:e5:eb:ce:18:
82:31:6d:d5:f6:80:51:76:81:82:8b:96:69:43:ad:d1:75:52:
56:99:96:c7:d7:00:b0:b8:4a:53:14:95:43:36:a3:14:86:ca:
0b:ad:4d:3f:52:3b:a4:6a:3f:bb:87:65:03:76:ce:b9:fa:71:
08:75:64:2e:3c:c5:4c:26:6e:01:5c:45:18:b6:7d:ea:37:e7:
34:f7:6b:3b:30:b8:23:9c:25:74:c3:d5:b7:bb:ed:2d:83:d5:
c1:51:d4:03:62:62:f4:16:1e:9c:28:86:a0:e7:e0:e0:1c:81:
8b:2f:db:2c:2f:27:ab:5c:9d:e1:16:ef:3e:e8:1d:ba:dc:92:
02:a1:0a:4a:bc:65:66:e7:74:21:fb:89:ed:7d:f1:75:d3:9b:
62:0a:74:48:6e:af:e0:55:0d:14:68:b1:8f:81:e9:14:fb:a5:
0d:99:c2:13:fa:bb:aa:89:5b:a6:73:0d:d7:fa:9f:d2:c9:0c:
0b:64:b2:09:3f:d1:10:b1:cc:48:8d:ec:cb:58:74:b2:b1:15:
bf:7b:d8:bc:42:71:94:0e:ed:9e:74:01:38:6e:8d:a9:23:80:
a6:20:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:24 2026 by rpki-client