Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: zS4h3NK8Nv1QW/jdD02Vc8rE4ghjOGbCzTtlu/dZTio=
Subject key identifier: 10:1B:DD:9C:D3:38:DB:00:FE:5F:ED:C9:A4:38:82:46:71:92:3E:15
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019F9F2864542DEAE4A7D992D5DBC92B3A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 1523
Signing time: Sun 26 Jul 2026 16:00:52 +0000
Manifest this update: Sun 26 Jul 2026 16:00:52 +0000
Manifest next update: Mon 27 Jul 2026 16:00:52 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: 7RrBFwgW3IVhviIloLaehuRYJn+U76xecEDb+nclYSo=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:64:54:2d:ea:e4:a7:d9:92:d5:db:c9:2b:3a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jul 26 16:00:52 2026 GMT
Not After : Jul 27 16:00:52 2026 GMT
Subject: CN=101bdd9cd338db00fe5fedc9a438824671923e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8d:8b:e6:1e:51:11:9f:d5:af:8b:de:71:53:
40:12:90:9e:92:b9:c9:dc:82:bf:4b:49:f6:4b:fd:
e8:bb:34:e3:4f:c9:9c:36:cb:bd:a5:a1:1c:88:3e:
b2:37:58:e8:93:c1:a6:d5:82:0b:47:bb:b6:82:69:
fd:cd:e5:97:55:0b:6b:32:4a:df:02:4e:a8:74:71:
5c:f9:20:69:32:23:32:fe:f4:0f:33:26:f5:b5:18:
7f:af:b7:59:df:0b:92:8d:70:49:88:70:25:a8:6b:
74:84:c2:e4:4b:f9:f1:79:a6:1f:5a:a9:25:ae:9c:
c5:a9:0f:e0:87:f3:fc:6c:f9:7d:a8:54:83:95:44:
05:a1:b2:c3:9e:07:8f:fc:cf:da:85:0f:6f:aa:b2:
6a:c9:2d:3e:ba:9c:20:65:ce:04:4c:79:dd:f2:96:
14:6a:11:b5:14:43:79:21:7d:23:14:0e:cc:ec:fe:
5e:eb:45:c1:b5:3f:1f:40:f3:59:2f:6e:7f:18:a8:
41:51:cf:2d:4b:b5:83:c3:6b:84:e9:82:90:6d:64:
0e:72:f8:64:c9:5c:98:84:0a:20:e0:26:73:eb:35:
ac:95:3c:9a:5a:24:22:41:ce:7f:67:ea:eb:ec:da:
ae:73:d2:74:2d:2c:8a:66:5f:66:4a:e1:a1:f3:94:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1B:DD:9C:D3:38:DB:00:FE:5F:ED:C9:A4:38:82:46:71:92:3E:15
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6b:fb:75:f5:8e:3f:d0:53:2a:4e:96:f9:a8:65:af:f3:49:
02:f3:db:2e:7f:c8:49:a9:9d:b3:47:9a:b7:fe:d4:ca:8d:ed:
97:af:a1:6b:35:7c:38:08:62:51:ac:6f:3a:fe:a4:f8:27:a9:
f3:75:90:6f:22:63:8d:77:2e:52:0e:5d:be:0c:57:c1:07:38:
53:3c:58:5e:b5:d8:6b:bc:2d:fe:6f:7e:d3:a9:e5:6b:1d:6b:
3e:52:1f:36:4c:01:71:39:c6:d8:e1:33:ca:c6:2c:9d:cf:3d:
d5:1c:0f:19:2c:83:bd:a5:38:8f:bc:da:5a:ad:58:19:52:4b:
65:ec:48:7f:87:27:b2:71:0f:3f:3f:83:73:66:32:dd:02:b4:
cd:1a:90:e9:b3:5c:dc:37:6b:f4:74:90:be:a4:3a:ac:7a:6b:
6e:97:f8:82:dd:35:b4:27:23:22:f4:e7:21:4e:de:84:b0:fb:
5a:e8:65:07:5c:0e:ea:19:9c:fd:7b:42:6b:01:55:71:74:c5:
6d:c8:34:78:f4:05:1b:0f:01:94:81:be:26:ea:b1:e6:b1:2c:
5d:ad:56:52:9a:ad:e3:a4:67:1c:7a:a1:bf:da:02:85:e9:55:
d2:9d:bc:3d:3e:8d:f5:fc:92:45:28:0b:cc:be:dd:56:69:80:
20:bd:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:09:17 2026 by rpki-client