Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: aoqo+/j4oxqKJNdmBdc9pDxfE04LFHhZw41Yxar2LFo=
Subject key identifier: FA:2C:E1:CB:33:BB:5F:A5:9D:3A:9F:C8:F6:56:F2:0D:EF:00:64:41
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 019CBAA7A8F6B4E26590A12638EFC4C84E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 185B
Signing time: Wed 04 Mar 2026 21:01:15 +0000
Manifest this update: Wed 04 Mar 2026 21:01:15 +0000
Manifest next update: Thu 05 Mar 2026 21:01:15 +0000
Files and hashes: 1: 9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa (hash: qftJAO5xZn04TQEdzEIUocCNdk0IiIOqR+bZ8YJWZ7o=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: DEbTckfTQ6Ag7MxxWJNz0jfXhDxvqjmeT9MrRvhpMuo=)
3: n6OO-WnnkHzceF7bSScsPeztc-c.roa (hash: E3zuJZBnxJWbp6sji/yaodu4Rd/MUTtyvemA5p5Biac=)
4: tNm4Kj6pURpIDAOhjCaj5b4oBeI.asa (hash: AL9vjuRr/GpcvmtoQMe6I7TNeV/MZ4vDKYV842zbN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 19:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:a7:a8:f6:b4:e2:65:90:a1:26:38:ef:c4:c8:4e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Mar 4 21:01:15 2026 GMT
Not After : Mar 5 21:01:15 2026 GMT
Subject: CN=fa2ce1cb33bb5fa59d3a9fc8f656f20def006441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:a0:84:0d:1c:97:13:ba:94:86:6f:8c:cd:
39:6b:53:64:94:8f:56:b8:3e:d0:8d:91:10:ee:a6:
67:f7:e7:ff:0b:dc:82:ec:e8:9a:07:08:d8:e1:27:
7d:88:e8:dc:c0:55:9a:8d:14:48:84:7b:62:41:ed:
6c:97:ca:7c:0b:6d:3c:2f:63:28:eb:97:73:4a:fc:
2f:1c:bc:f0:47:61:bf:53:e8:59:e7:40:e6:38:01:
37:5c:fa:5e:01:e8:38:ed:c0:79:cb:88:3e:6a:a6:
43:2b:82:a0:00:70:b3:e3:51:79:2f:ed:63:33:5d:
f9:55:94:c5:f7:fd:64:0d:36:d1:59:39:87:d9:eb:
a2:69:a1:6b:4e:b9:5b:9f:42:4d:d6:fe:33:5a:29:
bc:08:84:8d:59:69:d8:2d:23:07:fd:f8:7b:d7:43:
62:13:ee:f8:89:13:38:cd:0f:29:39:6e:d8:52:af:
71:14:02:20:70:bf:b1:fa:ea:19:10:6e:45:93:2f:
dd:90:d0:c0:da:cb:80:e7:7b:28:8e:6c:32:d3:0b:
c7:45:28:4b:1d:d2:3f:aa:cd:91:a6:96:01:fa:d8:
2a:08:5f:65:7e:e0:2c:69:53:00:fa:49:1a:59:0e:
a5:37:0b:22:bf:b1:11:d5:5a:81:86:2b:10:04:22:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2C:E1:CB:33:BB:5F:A5:9D:3A:9F:C8:F6:56:F2:0D:EF:00:64:41
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6d:b3:b8:55:3c:e7:8b:c7:1e:55:7f:98:a7:8c:a6:b9:92:
ec:39:89:bb:fb:cb:64:68:cd:67:bb:4e:88:2b:b1:dd:56:97:
d4:6a:a4:62:a1:54:b2:2c:4c:5e:91:50:f2:55:22:ed:4e:be:
ac:68:d3:20:74:60:f1:c2:56:a5:ca:aa:ff:07:f3:82:72:4a:
0d:ce:b6:fe:7b:94:72:ec:5a:bd:9c:4a:1d:4a:7f:42:fb:91:
7a:9a:02:80:8f:fd:9e:58:b1:42:00:f7:cf:aa:92:93:16:d8:
b3:2a:3f:2c:23:ca:07:e7:62:30:10:c4:62:38:7a:7c:a8:94:
9b:18:4e:07:d3:ba:82:b3:14:1d:99:7e:5f:77:80:72:d7:dc:
8e:78:ee:2c:ac:bd:91:57:5a:67:44:04:8a:3a:57:37:a9:5a:
8a:af:3c:c4:58:81:7d:ff:a5:8b:cc:f3:91:d0:c9:28:87:8d:
00:bc:58:23:cd:f8:d8:8d:ef:3f:0e:f1:6c:65:2c:00:96:69:
f7:80:7e:5e:40:d5:cc:b4:28:5c:c6:17:02:0c:0b:e0:4a:82:
60:3d:38:2a:4c:db:cc:b8:0f:a1:ec:56:cc:d9:9e:05:16:b1:
e5:c7:e1:7d:82:ad:41:88:32:d1:b7:73:e4:4c:16:df:65:f4:
3d:6b:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 05:17:03 2026 by rpki-client