Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: 2tBGlXxDgL3pG0+sfgxLcODX/+K7z1dO80Cq500QU1A=
Subject key identifier: 3F:13:74:DA:FD:33:73:11:BB:13:FF:F6:1A:7D:EB:BC:23:24:77:82
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 01A0E2BD9B2F2FA0D773F750782CC9C98D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 037E
Signing time: Sun 27 Sep 2026 12:01:11 +0000
Manifest this update: Sun 27 Sep 2026 12:01:11 +0000
Manifest next update: Mon 28 Sep 2026 12:01:11 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: t6PzVWKjRVHi538rwJqtmdOuYnmfqhlFzrovUXbcUSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:9b:2f:2f:a0:d7:73:f7:50:78:2c:c9:c9:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Sep 27 12:01:11 2026 GMT
Not After : Sep 28 12:01:11 2026 GMT
Subject: CN=3f1374dafd337311bb13fff61a7debbc23247782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:5f:ed:89:f8:e6:ec:2f:5c:3d:55:6c:ea:
ba:d3:74:7d:8f:39:80:76:71:00:a1:ae:3e:87:42:
8a:e7:ce:d5:32:5c:00:5e:00:0b:1f:b1:6f:47:de:
6d:ee:d5:c9:61:d3:3b:4b:83:88:1b:77:2a:f8:17:
1d:bc:94:18:10:0c:31:50:72:84:81:b1:f9:ee:e9:
ca:ab:4f:cd:c4:42:42:e0:68:6e:b9:2b:c4:66:2e:
e9:6f:1a:0e:00:55:2b:f7:70:3a:01:6b:a9:43:85:
52:92:ca:c7:04:de:61:63:db:1b:6a:4a:f3:22:6b:
f8:c4:c9:98:db:45:0d:0f:8f:92:7c:4b:09:d3:a4:
7b:8f:67:9d:92:11:37:f3:02:f5:31:d3:1e:e5:49:
8e:fe:23:04:29:59:89:c4:a7:47:40:e9:d0:28:46:
64:97:97:c1:26:10:ea:b6:42:93:01:8b:37:5b:4d:
9d:08:e6:72:57:42:a4:a3:b4:e5:6a:4f:4e:25:84:
a5:1a:39:4b:70:04:2e:e9:1e:0c:6e:0a:31:7f:a2:
78:25:4f:4f:72:e0:10:2c:73:d6:dd:bd:b8:37:15:
b2:1d:23:88:a9:06:6d:3a:5c:44:63:a5:3a:81:7f:
d7:ca:76:58:31:64:c5:d8:37:6d:44:eb:97:df:f4:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:74:DA:FD:33:73:11:BB:13:FF:F6:1A:7D:EB:BC:23:24:77:82
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2d:a6:02:61:16:6a:77:72:c7:4e:7e:3a:3f:32:62:01:41:
68:df:bd:ad:c9:0f:7a:c3:b4:74:f5:35:be:9a:65:f6:bc:68:
01:0a:5b:5c:ea:91:4c:fe:48:6d:14:74:ea:9a:c8:ed:ee:87:
48:6b:f6:b7:b9:bb:38:d1:57:3c:b3:4f:c6:2d:71:48:ce:81:
57:d9:fc:94:85:36:e6:5e:59:ac:e1:00:2f:ee:a0:44:69:8b:
21:68:97:24:f5:40:17:df:2d:8f:1b:88:f6:55:60:1e:32:dd:
cd:47:5b:26:34:7d:47:26:b9:ea:d2:e5:15:3c:49:bc:e8:a5:
6a:76:d4:69:ee:3c:26:d8:71:74:4d:9e:b9:ec:34:52:2b:b3:
8b:47:49:35:1e:3b:e7:4d:2f:85:4b:86:9a:0c:fb:e2:fa:cc:
2f:1c:9b:be:15:2a:d0:3c:e8:24:24:6d:bb:bd:05:1c:31:e6:
2d:99:59:3c:76:36:75:e0:98:05:29:77:2b:5d:81:eb:8f:2d:
1b:38:f8:13:9f:02:f2:5b:5e:36:93:10:c6:a4:57:af:ea:bc:
4d:cd:c8:66:37:eb:81:58:0b:55:49:d4:16:63:aa:27:40:73:
e5:ac:e8:15:4d:b4:80:e2:ea:a1:20:a4:e5:18:30:95:bf:41:
c8:1a:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:53:31 2026 by rpki-client