Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
File: ozLbxf62AFijLIBWJhQdT9gOW9Q.mft (raw, json)
Hash identifier: NkD/LDuayewfbzq/5YUcttcse8YMBQBclx60O4C6M0o=
Subject key identifier: 04:1A:B9:EE:AA:82:D1:EA:34:31:12:D5:1C:41:90:82:5B:E9:E9:9F
Authority key identifier: A3:32:DB:C5:FE:B6:00:58:A3:2C:80:56:26:14:1D:4F:D8:0E:5B:D4
Certificate issuer: /CN=a332dbc5feb60058a32c805626141d4fd80e5bd4
Certificate serial: 01A0C8582931984AD9EC1AD7FAFC3397453D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:15 +0000
Manifest this update: Tue 22 Sep 2026 09:00:15 +0000
Manifest next update: Wed 23 Sep 2026 09:00:15 +0000
Files and hashes: 1: 1-o0oBAgqjbEtsKujdEf_t825kA4.roa (hash: SwOkcVx10T9YlM/ZZvY4xDb4IxE8gvR4HljVlu3CooU=)
2: ozLbxf62AFijLIBWJhQdT9gOW9Q.crl (hash: 4FGMUx/xeXoyytiUNyEWh0qknJBoktEIQPo8HAu7aCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:29:31:98:4a:d9:ec:1a:d7:fa:fc:33:97:45:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a332dbc5feb60058a32c805626141d4fd80e5bd4
Validity
Not Before: Sep 22 09:00:15 2026 GMT
Not After : Sep 23 09:00:15 2026 GMT
Subject: CN=041ab9eeaa82d1ea343112d51c4190825be9e99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:99:67:8b:41:87:66:34:c3:96:22:67:06:
63:29:15:7d:6d:c9:a4:83:3d:42:74:60:a3:a6:7f:
b9:59:d5:c7:fa:3e:65:dc:55:7f:67:3c:eb:58:4e:
c0:9c:f6:c0:7b:4b:ba:bd:91:24:c3:0f:d4:e6:da:
e9:18:9b:41:46:7d:d7:0e:0b:9f:8c:9c:bc:56:7d:
bc:e4:d8:83:d6:b0:2d:51:7b:75:fe:7a:73:d1:fd:
32:69:4c:ba:78:ac:91:63:c5:e3:f6:57:4f:08:27:
ef:ab:62:d6:97:cf:a2:48:66:c9:2f:a8:de:15:7c:
20:6c:a5:21:87:94:26:82:44:fc:14:a2:96:83:da:
96:df:3b:66:70:99:59:aa:75:6e:99:a2:2a:19:7e:
1e:b0:5c:e9:22:fa:5c:ac:dd:f5:29:d3:e1:24:df:
44:00:61:61:85:22:b5:cb:fb:a3:b1:b9:c2:f8:0c:
2f:fb:c2:de:cd:e7:b0:41:af:cd:f7:79:9c:a3:6b:
f0:ad:dd:f9:b9:ba:77:38:97:76:bd:b4:0e:f7:62:
7f:f2:76:f3:89:67:da:cb:2a:c8:70:07:59:50:20:
ca:77:e2:e9:2f:f9:2e:2e:98:32:f8:c2:8d:14:e6:
89:1b:50:30:ad:89:26:6a:95:12:3e:82:04:86:00:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:B9:EE:AA:82:D1:EA:34:31:12:D5:1C:41:90:82:5B:E9:E9:9F
X509v3 Authority Key Identifier:
keyid:A3:32:DB:C5:FE:B6:00:58:A3:2C:80:56:26:14:1D:4F:D8:0E:5B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:19:7c:29:e2:4c:8e:9f:5a:e2:2c:6e:fa:19:7f:db:bb:ca:
e9:b1:85:40:ca:91:76:95:5b:13:c5:a2:98:f0:19:63:35:09:
36:80:77:2d:12:07:53:2a:49:a0:d5:d4:d9:1a:38:70:61:a2:
63:64:b7:1a:f3:41:1f:e1:f4:36:87:89:9b:26:fb:ac:f7:0b:
53:46:11:dd:2d:e0:1c:57:f7:37:2d:d5:36:35:43:0f:d4:fa:
5c:22:57:b8:da:e3:7d:20:2e:84:0c:b8:d7:d2:9c:c3:72:fb:
e2:2c:e7:da:53:d3:25:55:d1:0d:36:57:32:5d:ec:f1:d1:65:
d3:33:0c:8f:1b:b8:6c:8a:31:d4:76:f6:65:a9:24:48:1a:88:
05:60:0c:93:dd:ea:eb:09:8f:0f:0f:32:55:e5:a6:17:9a:09:
04:8e:f5:30:db:0c:24:dc:5f:3b:4f:09:9b:4e:e1:81:a1:dc:
ab:3d:69:d7:9c:45:b8:da:6b:45:ba:5e:c9:2f:c1:71:27:fb:
d1:0e:d7:18:04:ed:7d:e2:bf:a7:fe:52:34:74:5e:3f:8c:86:
8e:64:b3:48:0e:1e:3c:69:23:23:f1:27:44:29:70:ca:13:c6:
7b:a7:62:fb:c4:0c:1f:73:b4:8c:60:fb:4a:84:22:47:2f:e9:
6a:5d:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:33 2026 by rpki-client