Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: Or1zn7Zokf+Um6SSGhFZUolQd9Nd++Dz5c4RYHC3bIc=
Subject key identifier: 7B:B8:E8:B7:9F:A9:AD:C5:A5:F9:85:B0:5D:1D:DA:D7:31:E7:1D:93
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 01A08AC3337FFFC6691E7BA24B27C7548478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 159D
Signing time: Thu 10 Sep 2026 10:00:43 +0000
Manifest this update: Thu 10 Sep 2026 10:00:43 +0000
Manifest next update: Fri 11 Sep 2026 10:00:43 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: IfpjUqyzqHcHXYXBnXLqhanVgAtkIWtYoWSMWy3IsmU=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:33:7f:ff:c6:69:1e:7b:a2:4b:27:c7:54:84:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Sep 10 10:00:43 2026 GMT
Not After : Sep 11 10:00:43 2026 GMT
Subject: CN=7bb8e8b79fa9adc5a5f985b05d1ddad731e71d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:9f:1a:83:f1:66:4b:6e:5b:86:0c:40:b9:
5d:33:53:67:a7:30:98:57:6e:dd:96:6f:fd:3d:5a:
f3:17:42:46:c8:47:1a:f4:7c:d8:07:10:2d:fd:a0:
39:55:11:fa:21:f4:4b:df:2c:78:58:75:a9:e3:d9:
a2:d9:20:5b:d2:0b:87:b9:00:a9:32:d2:fc:23:fb:
c9:bf:dc:ca:21:65:cd:79:2c:59:51:bd:9e:a3:c6:
f8:fa:00:9e:c5:ea:cd:0a:32:19:eb:1f:9a:ca:40:
75:24:ce:77:48:bd:b3:4c:5c:46:54:e0:06:ef:d7:
74:6e:79:54:e7:7f:20:4d:6d:a6:31:96:45:74:a5:
fc:5b:7e:c0:f1:00:36:3e:c8:f3:ef:7e:31:22:00:
8f:15:25:f8:9a:af:ab:06:8e:32:85:0e:43:45:1e:
b0:ee:3c:56:8c:a1:81:97:cf:ed:30:13:92:94:25:
ac:9b:61:40:62:d1:0f:bc:02:4d:ff:be:f4:fa:b9:
06:a5:fa:28:02:fb:1d:34:5f:be:e1:79:56:3a:3e:
4f:05:d6:d2:6f:ee:58:15:de:5a:fa:52:dc:33:0c:
82:d2:af:8a:a7:e9:77:8f:ff:98:d3:f2:7c:65:1f:
1e:ba:c1:d7:0d:87:c4:9b:38:d6:e1:e0:b8:07:2a:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:E8:B7:9F:A9:AD:C5:A5:F9:85:B0:5D:1D:DA:D7:31:E7:1D:93
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4d:0d:b1:ee:ce:fd:5a:9a:f9:43:a8:db:72:92:37:77:44:
1e:d1:76:90:12:4d:cd:3a:2d:e4:90:d7:15:91:27:ac:14:9b:
54:8d:27:a3:25:20:91:be:ff:d9:ac:40:c4:a8:d4:0a:4d:4a:
4e:14:2d:24:4e:0c:ed:45:9a:51:17:e6:cd:f0:84:cb:88:e5:
fc:9a:0c:a2:5c:0e:57:2b:05:5b:fd:8d:b8:57:40:e8:2c:70:
4d:59:63:8d:c3:c1:70:97:21:94:84:71:db:58:58:90:a5:9c:
93:48:eb:83:60:3a:e5:1f:f4:85:93:ee:6f:aa:49:32:1f:86:
d0:f7:42:cc:a1:04:a3:ae:88:9e:bd:4f:c5:35:a4:98:e6:9b:
fa:da:bf:df:e8:78:76:54:21:cc:1d:7e:96:30:b9:86:5e:58:
d9:ca:e2:55:ab:e8:bc:e6:96:a0:d6:af:b6:67:a3:3c:df:7e:
87:aa:15:a6:37:27:b1:89:72:89:a1:e1:2d:eb:ad:fe:8a:05:
3b:b2:c9:78:94:ce:a7:e6:d4:17:02:36:c3:af:cd:f5:d7:62:
6f:cc:4d:ba:14:9c:99:2d:97:db:90:e1:89:a7:d4:1c:11:7c:
0c:6a:1f:f3:dc:20:c8:65:a6:8b:c1:a0:f8:40:f3:ba:bb:0d:
e2:37:1e:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKwzN//8ZpHnuiSyfHVIR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzM2VlYzAzZWExMjI3MTMyNzhiNDA2NmVjZjJiZmVhYTE1
NjNjMGQwHhcNMjYwOTEwMTAwMDQzWhcNMjYwOTExMTAwMDQzWjAzMTEwLwYDVQQD
Eyg3YmI4ZThiNzlmYTlhZGM1YTVmOTg1YjA1ZDFkZGFkNzMxZTcxZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteufGoPxZktuW4YMQLldM1NnpzCY
V27dlm/9PVrzF0JGyEca9HzYBxAt/aA5VRH6IfRL3yx4WHWp49mi2SBb0guHuQCp
MtL8I/vJv9zKIWXNeSxZUb2eo8b4+gCexerNCjIZ6x+aykB1JM53SL2zTFxGVOAG
79d0bnlU538gTW2mMZZFdKX8W37A8QA2Psjz734xIgCPFSX4mq+rBo4yhQ5DRR6w
7jxWjKGBl8/tMBOSlCWsm2FAYtEPvAJN/770+rkGpfooAvsdNF++4XlWOj5PBdbS
b+5YFd5a+lLcMwyC0q+Kp+l3j/+Y0/J8ZR8eusHXDYfEmzjW4eC4ByrAPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHu46Lefqa3FpfmFsF0d2tcx5x2TMB8GA1UdIwQY
MBaAFKM+7APqEicTJ4tAZuzyv+qhVjwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDct
NTlhNWVlM2FkOWE4LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDctNTlhNWVlM2FkOWE4
LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJE0Nse7O
/Vqa+UOo23KSN3dEHtF2kBJNzTot5JDXFZEnrBSbVI0noyUgkb7/2axAxKjUCk1K
ThQtJE4M7UWaURfmzfCEy4jl/JoMolwOVysFW/2NuFdA6CxwTVljjcPBcJchlIRx
21hYkKWck0jrg2A65R/0hZPub6pJMh+G0PdCzKEEo66Inr1PxTWkmOab+tq/3+h4
dlQhzB1+ljC5hl5Y2criVavovOaWoNavtmejPN9+h6oVpjcnsYlyiaHhLeut/ooF
O7LJeJTOp+bUFwI2w6/N9ddib8xNuhScmS2X25DhiafUHBF8DGof89wgyGWmi8Gg
+EDzursN4jcedw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:18:56 2026 by rpki-client