Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: eEqZ44lUhx81hfzp84er74MfsUE1ehZN1J7WhX8o40c=
Subject key identifier: 29:37:EB:A7:3B:FE:C1:3F:9B:C7:42:07:FD:3F:1D:F8:A5:44:4A:FB
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 01A0E4ABC29B5F84ABC313556B0AF7B6FC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 037F
Signing time: Sun 27 Sep 2026 21:00:56 +0000
Manifest this update: Sun 27 Sep 2026 21:00:56 +0000
Manifest next update: Mon 28 Sep 2026 21:00:56 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: EmfIfwN2UKiH4GvZJ11tP3oKMAW334pgb7feWvoNaaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ab:c2:9b:5f:84:ab:c3:13:55:6b:0a:f7:b6:fc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Sep 27 21:00:56 2026 GMT
Not After : Sep 28 21:00:56 2026 GMT
Subject: CN=2937eba73bfec13f9bc74207fd3f1df8a5444afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:33:c6:a4:43:d7:8e:63:73:97:be:24:70:
78:ce:3d:9d:29:96:d6:24:a0:cf:d3:b5:18:74:ea:
5d:6f:ed:09:37:56:2d:0f:8c:21:d1:b0:e5:14:3b:
79:51:f4:3f:12:af:a1:05:45:31:6c:d5:4f:12:84:
98:b9:64:15:38:90:0a:ce:97:ee:dc:7b:dc:e3:25:
bd:ce:1c:8c:f4:7f:f1:8d:b2:34:a3:c7:04:07:5b:
df:43:45:86:50:19:f7:d9:45:b8:0f:fb:5b:fd:62:
f3:40:96:91:44:bb:ec:1e:9c:c5:84:5b:a5:21:76:
3f:02:b4:0a:a8:4f:e7:03:d0:89:fc:e8:7f:c3:42:
71:93:df:b2:66:e8:bd:b7:8f:f5:7c:f0:0b:77:83:
15:b4:fe:21:12:57:bd:0f:55:87:d1:8a:d4:9f:93:
e5:60:4d:e7:c0:cc:a9:91:cc:c1:a7:ef:62:9d:36:
26:74:48:cc:43:4e:33:b8:21:6a:95:ab:da:8b:bc:
d0:f5:19:86:b4:ee:d3:49:21:cc:8f:6b:c1:23:c3:
f4:4e:db:66:b4:33:68:ea:b2:c9:62:63:6e:eb:e3:
26:32:50:9f:9f:3b:24:6b:75:6d:ac:4e:05:07:cb:
86:ec:1f:a8:25:06:8b:b7:0a:ab:d7:12:2b:f4:0c:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:37:EB:A7:3B:FE:C1:3F:9B:C7:42:07:FD:3F:1D:F8:A5:44:4A:FB
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b5:1f:0c:f2:f8:21:80:28:3a:d3:80:62:79:87:25:28:17:
04:4e:d1:c1:d1:87:56:8e:04:54:5a:97:13:5c:35:ed:dc:1d:
88:32:72:45:2b:20:ad:00:9a:1c:c2:85:15:5c:af:3a:ed:96:
5e:d3:b6:76:04:7c:6a:dc:cb:bb:3c:26:4e:e3:99:dd:97:c2:
d2:aa:d9:62:ee:f7:a8:8b:13:54:46:c1:e4:62:eb:be:f4:d0:
d4:8c:9f:d8:93:11:fc:17:47:87:c7:78:3d:b2:18:1b:21:27:
b6:c5:21:1d:f5:0d:35:1b:1e:16:55:c3:51:f0:5f:d4:f5:d8:
05:51:7f:a8:bc:69:ed:60:6d:87:20:09:f5:3b:9b:fe:81:59:
71:5b:f4:0d:56:c9:5f:33:30:ce:c2:51:f5:a4:25:ab:fb:be:
09:64:d6:a9:81:bb:0c:c9:23:4d:2e:37:27:a9:34:2e:55:6d:
8b:af:e9:06:14:43:bb:ee:0c:5b:a6:3e:7d:2f:a4:44:be:93:
10:ca:98:2c:12:c0:86:16:11:71:a4:62:e9:48:79:bf:18:11:
6b:ea:25:82:23:58:b9:7c:8e:2c:a4:74:9a:ec:8a:65:ba:bc:
89:5b:7a:44:dc:6d:fc:2a:fc:94:ca:26:e2:c7:b5:f9:b5:8b:
28:27:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:04:35 2026 by rpki-client