Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: lx0lIxGe96WltGPelStn0nLJmLMaxtOb9Sc7icWkXkQ=
Subject key identifier: 38:19:E1:EA:DA:A8:17:24:F3:DE:26:78:7B:A0:5E:48:69:E9:83:FF
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019EB76A50253448986B3AC09522B2F47FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 14AB
Signing time: Thu 11 Jun 2026 16:00:58 +0000
Manifest this update: Thu 11 Jun 2026 16:00:58 +0000
Manifest next update: Fri 12 Jun 2026 16:00:58 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: /qCHRnoP0NpQ+ejxVV3Py31IOzuWCYlLQnZRKRHzrc8=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:50:25:34:48:98:6b:3a:c0:95:22:b2:f4:7f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jun 11 16:00:58 2026 GMT
Not After : Jun 12 16:00:58 2026 GMT
Subject: CN=3819e1eadaa81724f3de26787ba05e4869e983ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:3f:fa:10:0e:44:e0:01:0d:ee:4c:8d:fc:
f7:05:1f:b0:ae:c0:fb:9d:63:f2:4f:a5:5e:ce:c4:
20:ab:c4:ba:59:a6:51:c2:83:54:41:39:1c:00:09:
41:69:1b:1e:8e:e1:20:1c:7d:e7:25:ff:8a:ba:7a:
86:34:73:61:56:5d:d5:6a:f0:38:c0:5c:e7:93:40:
df:ee:fe:eb:a3:1e:fe:b7:f6:66:26:93:5b:86:a2:
4f:f4:af:62:7f:7c:11:3c:b3:05:3d:e4:16:b1:e1:
c5:0f:93:31:c4:11:65:ee:4d:b1:e8:64:0b:7c:3f:
f6:8c:10:38:7a:a8:5c:fa:df:00:f4:bd:6e:45:dd:
7a:9c:87:a7:3a:ce:05:0c:d6:89:cd:45:31:41:21:
8e:91:9d:8f:7d:d7:ca:29:fe:6f:e3:c0:c7:66:5a:
51:b3:e7:4c:4d:e0:95:ae:a7:1a:fe:66:5c:50:1c:
d8:ae:f4:29:1e:dc:23:ba:05:96:17:e9:c4:8f:d8:
32:fb:d4:b6:68:c0:ce:7c:70:8e:a1:7c:f0:62:18:
6e:87:ae:c7:71:fb:3a:90:df:ec:bd:16:57:67:d7:
bb:16:c4:6f:80:f3:61:12:0f:76:91:f6:6e:bd:64:
ed:0c:78:59:8d:e8:ea:e8:bf:b5:b5:98:a4:33:7c:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:19:E1:EA:DA:A8:17:24:F3:DE:26:78:7B:A0:5E:48:69:E9:83:FF
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e8:ef:31:ba:f7:a7:e6:e9:a0:cd:ea:ec:b4:ad:17:66:68:
24:8c:45:93:30:e8:59:5e:6b:aa:85:78:b4:5b:58:e0:8d:7e:
99:9f:f5:9c:28:5a:bc:67:8f:a4:bc:ac:b0:97:ba:47:c7:bd:
2b:a5:11:de:ff:eb:50:57:2a:01:e4:8e:1c:ad:2d:1e:1d:b4:
68:37:90:32:f6:04:45:bc:f9:f8:07:73:34:96:e9:b6:1b:25:
e8:21:95:ec:68:61:05:a0:39:ac:78:be:2a:35:b9:f5:ef:93:
c7:bc:46:35:4c:6a:dc:12:90:f8:8f:31:c2:5d:a9:65:31:d0:
5e:1d:80:34:04:92:c2:a2:c4:6c:26:4c:26:a6:fd:85:60:3a:
01:ba:7e:f8:c2:c7:f9:68:96:84:e3:51:9b:f9:f3:3c:26:87:
36:07:7e:21:0b:d1:d1:53:55:66:6e:de:86:c1:72:5d:a7:53:
ab:be:c7:a9:88:2c:1f:7b:30:f1:81:e9:c3:cc:df:51:fa:e8:
7f:0f:be:d8:36:69:66:f4:23:22:c8:ca:6c:b7:f1:09:85:fa:
ee:ff:75:f3:69:ca:c5:46:a9:15:b8:ef:53:de:a1:05:ec:15:
fc:19:58:d5:8c:32:b9:46:87:36:9d:61:95:52:ee:a6:97:50:
95:fc:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:09 2026 by rpki-client