Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: l9J/oJ/T9ZUua7Ycfv+h1BcMO2+gNW4e6mqVMaVQ4/E=
Subject key identifier: DE:4D:FB:9C:8D:C9:8C:9E:9C:D6:AD:E1:35:0C:5E:17:B3:AC:5A:D4
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019D39099C8CD9E477A15002AAD415B2AA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 13E5
Signing time: Sun 29 Mar 2026 10:00:24 +0000
Manifest this update: Sun 29 Mar 2026 10:00:24 +0000
Manifest next update: Mon 30 Mar 2026 10:00:24 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: gzQ3cOU5DaqmOUr6kL3/F6Nj46oMptCuStRIeGMy/w4=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9c:8c:d9:e4:77:a1:50:02:aa:d4:15:b2:aa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Mar 29 10:00:24 2026 GMT
Not After : Mar 30 10:00:24 2026 GMT
Subject: CN=de4dfb9c8dc98c9e9cd6ade1350c5e17b3ac5ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:5d:cb:fb:91:39:b5:bd:40:73:d6:bf:87:
3f:4c:68:25:b1:6a:fb:34:c9:06:49:d4:55:6d:d4:
33:15:6b:f7:4f:44:88:71:7a:46:b4:69:74:81:18:
28:5b:0f:da:ba:c9:4a:74:49:8b:be:d0:37:85:33:
07:82:35:bf:a6:24:1d:be:98:d6:92:99:7a:86:f7:
43:ff:6a:3e:04:77:f4:8b:ce:6f:95:db:5d:91:99:
bf:a1:17:55:9e:50:84:68:fe:8f:11:5e:de:c6:c9:
79:09:3a:fa:09:07:76:a5:5a:20:bf:98:64:eb:f4:
db:d6:ef:ed:4c:41:69:6e:6f:4e:00:9e:51:b3:e8:
96:f7:15:5f:3e:6a:d6:1d:3c:0b:7a:22:6e:f2:20:
33:f7:51:38:65:51:1e:dc:0a:3f:e4:0c:7d:f6:72:
65:b8:13:0c:3c:fd:6f:b1:be:24:34:36:22:e7:38:
10:5c:be:a7:5e:4b:57:20:c9:29:d4:8c:fd:59:69:
e8:6d:5f:7d:e1:70:db:f5:30:d5:63:00:39:b4:98:
0a:d0:40:2a:11:a9:91:4a:19:cf:cd:37:bc:d1:7e:
f9:4c:41:dc:fd:0f:ce:f4:1f:29:d2:33:77:cb:c9:
5a:7a:a2:44:81:44:02:7b:5d:1a:b2:5c:3c:91:cb:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4D:FB:9C:8D:C9:8C:9E:9C:D6:AD:E1:35:0C:5E:17:B3:AC:5A:D4
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:52:93:a7:fc:3b:cb:54:3a:94:a8:36:1b:5f:a4:71:64:74:
b6:5d:25:6d:ce:b1:93:9e:1b:a1:f6:76:0b:00:33:24:96:d5:
e1:58:27:da:ef:cf:54:5b:25:ee:4c:70:ac:58:d4:ee:ca:59:
db:7e:54:31:2a:c4:c2:ce:ab:3e:c3:ca:df:e3:2d:36:9e:16:
34:aa:2d:1b:15:60:12:b7:85:db:b4:9a:90:b5:02:71:ee:a0:
4d:6a:68:9c:fb:f3:1a:95:f7:35:56:26:75:25:87:ef:91:53:
b0:93:f6:88:f8:3b:ba:48:c8:f3:b1:cc:bc:57:1f:9e:f8:23:
97:c3:1e:6d:ec:00:47:7e:c6:09:af:e5:a7:c2:20:44:97:46:
b2:93:3a:77:0b:c2:51:37:81:d3:56:95:5d:67:3e:93:2e:32:
c7:bc:07:26:0b:b1:8a:59:08:d1:71:cc:a5:27:63:d8:26:d5:
ac:5c:dd:5c:81:e2:c0:70:be:f8:25:ec:1c:cf:4f:c8:0d:f2:
1d:fc:c5:20:ab:35:e5:41:eb:51:e4:03:41:a0:e2:43:15:a7:
14:a2:77:a3:df:a8:cb:1e:9f:7c:c0:66:e7:fa:52:d4:eb:96:
ae:84:17:5d:ba:ac:b3:a3:2d:eb:f3:90:e1:d1:9b:61:3c:b1:
3a:ce:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:33 2026 by rpki-client