Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: Cu1SGVv8w4svpsuSGgCnuQ2qUaAyVpWoFWvnpY9U7Yg=
Subject key identifier: B5:92:A2:E6:4D:3E:FC:B8:B5:69:BE:58:2C:C8:F1:D7:B1:C3:19:6D
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 019EC224BA32A7AE9F624EF4502EBD4A9F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 0264
Signing time: Sat 13 Jun 2026 18:00:47 +0000
Manifest this update: Sat 13 Jun 2026 18:00:47 +0000
Manifest next update: Sun 14 Jun 2026 18:00:47 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: RWUyT5xGkbg3wj+KPZWqIxSsj05ExjzL3bgMTUVkkhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:ba:32:a7:ae:9f:62:4e:f4:50:2e:bd:4a:9f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Jun 13 18:00:47 2026 GMT
Not After : Jun 14 18:00:47 2026 GMT
Subject: CN=b592a2e64d3efcb8b569be582cc8f1d7b1c3196d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f4:56:a5:7c:a8:4f:72:0d:01:84:a5:af:de:
5c:c1:2f:31:ad:4f:10:48:2f:34:ff:01:33:23:0a:
7d:14:3d:a7:3e:54:e5:b9:ed:7b:3b:42:b0:01:1e:
63:9b:db:b9:f0:dd:b7:ee:33:5e:a0:b5:da:b5:fd:
fa:75:ce:6d:a0:99:45:5d:6a:21:60:94:f1:29:69:
fe:8b:fe:19:6e:1a:57:b7:80:ff:3e:f0:a0:aa:7f:
75:a8:19:73:f1:72:45:90:ce:b5:e7:df:69:85:4b:
aa:c5:6b:4b:51:9e:31:07:10:02:e0:04:35:01:c6:
1e:14:15:75:35:76:38:15:85:9a:c0:0d:58:af:b1:
5c:cc:6e:b0:ca:d0:8b:d8:d0:4f:6d:ba:50:a0:b1:
1b:a6:bd:51:ce:56:3c:8b:b1:6c:25:d2:f7:ae:cf:
24:0e:ce:ca:6d:4b:a7:a3:21:e5:80:bd:23:c9:6c:
2f:89:76:f7:05:bc:3d:b8:68:0c:c3:64:71:f8:2a:
b6:9a:91:c9:b2:52:5e:f3:ad:bc:d9:30:2a:8d:db:
5b:2a:30:e1:e2:5e:33:dc:75:3a:b5:fd:45:e9:7f:
24:5b:3c:c8:91:9e:74:69:18:e7:8d:4a:02:25:b6:
12:dc:38:cf:93:a4:40:5a:d5:9c:b6:8e:2d:ba:f4:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:92:A2:E6:4D:3E:FC:B8:B5:69:BE:58:2C:C8:F1:D7:B1:C3:19:6D
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c1:cf:0a:fc:ec:1d:69:e2:dd:e2:0c:c9:4b:cc:90:48:51:
40:3b:d0:b5:7c:76:2d:db:0a:2c:de:74:3a:33:57:f3:91:49:
41:63:41:c9:8a:a1:87:79:fc:1c:3f:00:f9:f9:89:6b:54:1d:
df:d5:36:8e:28:dd:6d:6a:cd:11:fc:19:0b:ef:8d:59:7d:ad:
6a:e9:d2:26:a0:f2:db:a4:de:54:87:f9:e2:9f:73:2c:ae:2d:
bc:ff:b3:c6:0f:03:c4:0d:7d:7d:d4:fe:c6:14:ca:25:7c:8f:
cb:cc:6a:1a:15:f4:fa:d6:28:43:f8:cd:0d:dc:f2:b6:29:28:
b9:63:6c:4c:c4:a2:47:bf:36:56:47:76:71:a6:01:0b:88:92:
aa:5d:ac:53:49:fc:cb:36:ad:18:e0:f4:e3:7a:9e:8c:37:da:
6d:d7:af:ca:5d:2c:ec:7d:0c:af:a2:9a:62:ce:8f:29:20:19:
80:2d:eb:a6:f8:f2:85:ef:ac:68:29:5a:ac:c5:cc:21:6f:4e:
d3:51:fa:32:dc:8a:94:d0:79:87:cb:9c:d5:38:55:d4:76:c8:
0d:6a:f9:ed:b1:f8:af:5f:e2:43:ef:6e:9f:4a:0c:63:7b:f9:
c8:27:5c:3a:65:41:db:3f:53:c4:61:ca:1f:ad:72:0f:fc:82:
8d:0d:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:13 2026 by rpki-client