Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: vC5qzQStm49VZLTu9PoLa2rnedBUZgfapB01QPNnXyI=
Subject key identifier: FA:3C:52:9B:7A:1B:7C:6E:1B:E6:9E:5F:48:2C:BD:95:51:0F:D7:28
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 019CAB3460B5C7988966B9F1280478EA880F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 014F
Signing time: Sun 01 Mar 2026 21:01:02 +0000
Manifest this update: Sun 01 Mar 2026 21:01:02 +0000
Manifest next update: Mon 02 Mar 2026 21:01:02 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: PwlsOEZWbsL/4IhD2YeppqR7kLbO+bGn2FAgQ9jbtX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:60:b5:c7:98:89:66:b9:f1:28:04:78:ea:88:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Mar 1 21:01:02 2026 GMT
Not After : Mar 2 21:01:02 2026 GMT
Subject: CN=fa3c529b7a1b7c6e1be69e5f482cbd95510fd728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:47:0f:9a:bb:e3:4a:46:e1:dd:44:24:31:
1e:f9:e6:5f:23:c4:d0:11:64:1e:ff:ea:5b:04:45:
7c:e8:74:d7:46:5c:8e:7f:b2:40:f8:2f:65:b6:6a:
7b:95:90:fb:50:fb:45:90:c6:66:38:b2:29:91:e6:
98:d3:eb:89:93:be:8b:69:f5:eb:25:5f:d6:b4:ec:
fb:12:33:fc:c8:6c:dc:74:19:4e:61:de:02:1e:17:
63:27:fa:c0:f6:d8:e5:8a:fc:ba:bc:7e:66:cf:29:
52:48:2e:9f:e2:c9:2c:8d:72:22:c2:53:ce:56:0d:
fc:df:3a:48:ae:43:47:1c:bb:54:94:52:b2:12:a1:
f7:9e:71:1f:30:20:35:7d:9d:22:d3:ee:e8:8c:f3:
d9:63:00:b7:23:cc:92:24:6c:7a:2b:83:09:cc:e3:
94:c0:a7:83:99:cc:62:17:ee:db:2e:ba:7c:23:df:
fc:09:76:e9:14:5d:50:50:04:d2:80:30:4e:9d:50:
31:c8:28:49:de:44:82:4a:0b:06:40:5e:e9:1e:14:
d6:2b:df:27:59:72:69:56:51:de:27:78:55:ff:fa:
39:20:6a:f1:33:4e:8a:65:12:30:fa:80:32:c6:dc:
31:34:76:e3:87:b3:8c:97:cd:90:b9:1b:60:4e:c1:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3C:52:9B:7A:1B:7C:6E:1B:E6:9E:5F:48:2C:BD:95:51:0F:D7:28
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:55:d6:85:16:61:2b:63:b0:25:17:b3:c9:de:e5:16:f0:01:
ac:70:8d:01:b5:b6:fb:03:61:47:dc:f6:a5:92:b1:a6:f5:49:
31:1a:71:81:ab:49:96:df:0a:3a:a8:83:0c:57:da:e9:a3:32:
7d:dc:8c:63:1d:c3:a6:01:d5:5c:fa:4c:3a:7f:6b:55:f0:f6:
ee:97:20:5d:a4:cf:5f:3c:17:02:af:cf:e9:05:a3:8e:ca:10:
87:cc:63:d5:2e:9a:cc:00:19:71:e4:bd:11:27:b2:55:d8:da:
4d:d7:b4:c4:1d:4b:5c:c7:7e:37:05:2a:68:7e:b5:cc:d0:7a:
1c:74:b0:1d:3c:1d:a0:9c:39:d4:99:fc:ab:6c:74:f9:e0:ec:
91:34:84:c1:fd:dc:71:97:3a:10:97:ba:d6:0d:81:7f:3d:af:
b2:8d:bf:1c:ae:96:2b:2f:69:b8:57:59:f3:30:3a:56:e9:e2:
88:92:f4:1b:4a:77:9b:0e:83:b3:22:1d:d9:70:15:da:d1:25:
23:29:a9:46:ad:f4:af:bd:b1:7b:9a:23:61:76:80:ad:89:fe:
50:bc:a9:a7:82:b3:74:0b:a3:1e:14:b6:19:98:b0:9a:11:80:
2a:5d:97:de:2e:62:dc:a4:92:9e:d9:a7:73:29:ec:ef:62:22:
ea:d0:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:02 2026 by rpki-client