Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: GrAwHcn7a8G5zHdBtQqOlq/9CNfGU1zJUqTGhKZ63rY=
Subject key identifier: 95:C6:61:09:2F:C2:C9:3B:4F:24:9D:D1:5E:F4:9A:60:63:A4:00:35
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 019EFA270C45AFCDCC65A40563DA540E046D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 1985
Signing time: Wed 24 Jun 2026 15:02:03 +0000
Manifest this update: Wed 24 Jun 2026 15:02:03 +0000
Manifest next update: Thu 25 Jun 2026 15:02:03 +0000
Files and hashes: 1: 9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa (hash: qftJAO5xZn04TQEdzEIUocCNdk0IiIOqR+bZ8YJWZ7o=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: v3xd/TvQOnwygH5wcQ23xmO6YamylwdegxDdc8U9iik=)
3: n6OO-WnnkHzceF7bSScsPeztc-c.roa (hash: E3zuJZBnxJWbp6sji/yaodu4Rd/MUTtyvemA5p5Biac=)
4: tNm4Kj6pURpIDAOhjCaj5b4oBeI.asa (hash: AL9vjuRr/GpcvmtoQMe6I7TNeV/MZ4vDKYV842zbN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:27:0c:45:af:cd:cc:65:a4:05:63:da:54:0e:04:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Jun 24 15:02:03 2026 GMT
Not After : Jun 25 15:02:03 2026 GMT
Subject: CN=95c661092fc2c93b4f249dd15ef49a6063a40035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:7a:57:d2:a8:16:f4:49:8d:ae:27:79:10:
ce:f4:50:78:cd:b5:a6:fa:d3:61:3d:5b:4d:0b:18:
65:13:b7:e1:4a:d7:32:af:54:00:cd:cc:5b:de:20:
e7:96:ba:0c:5a:7e:34:d6:4f:59:1a:a9:5c:ce:2b:
55:64:55:31:42:f6:23:0b:c1:d6:20:fb:8f:1f:2a:
3c:6b:f3:87:01:25:8f:ca:fc:bb:43:20:df:aa:ef:
f5:96:33:cf:6f:a6:06:fe:43:30:be:77:56:66:49:
72:2f:21:29:7c:d9:bf:9a:94:7e:67:73:0b:c5:b9:
7a:8e:8a:f2:f3:4c:ed:fe:c7:d3:98:2d:b4:03:9b:
a1:f7:11:90:86:0f:cb:9f:62:33:51:78:ff:1d:9e:
3d:1c:55:e1:dc:58:0f:bf:88:4a:a5:71:d2:63:e2:
9f:10:36:0d:43:e1:b8:b7:e9:d2:8b:2c:45:26:8c:
e5:9a:d5:9a:7d:b6:aa:a8:c3:b8:97:d0:f2:2a:91:
d0:6b:81:f5:6d:66:e3:fa:fa:52:83:dc:d5:45:24:
dd:bc:2d:08:1e:4d:d7:20:98:ee:fe:92:cb:3f:3c:
8c:84:ad:7e:c9:64:7c:46:96:05:14:48:1c:5e:dc:
54:56:fa:83:ce:45:63:8e:d4:23:be:c3:2a:23:e2:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:61:09:2F:C2:C9:3B:4F:24:9D:D1:5E:F4:9A:60:63:A4:00:35
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5e:07:30:a4:2a:1d:ff:5b:f1:d1:b4:3b:40:f3:5e:34:57:
27:1b:91:fa:0e:06:47:90:a7:1d:42:e8:a7:0b:a3:1e:ed:c5:
95:11:f4:a9:76:1d:11:62:cf:3d:a9:9b:f5:71:8a:0f:96:c5:
bc:67:31:f3:e3:d6:cf:32:73:e4:f5:62:71:0b:fb:0b:fe:8f:
64:f4:3a:64:1e:fd:90:bd:aa:fa:ec:1c:56:54:4e:64:91:cb:
8e:47:37:04:ff:a6:f8:01:ae:f2:a6:2b:45:ee:f8:4f:f3:06:
11:30:bf:07:7a:46:0c:88:a1:80:d7:48:e5:3b:81:fe:e8:72:
6e:2f:96:f2:1e:3f:62:8e:bb:5f:0a:b6:e0:db:54:5a:26:20:
71:9a:e4:07:5e:79:ba:4b:64:44:c0:4d:da:64:44:d1:ed:4a:
72:51:8c:ff:d5:84:c7:6f:70:82:8a:61:96:e6:f3:ce:10:ee:
1b:85:2a:be:4b:33:9c:66:33:59:02:52:9d:a3:75:b3:bd:ed:
bc:e1:a3:33:5f:b0:88:15:75:4b:c7:8d:51:73:dc:d4:fd:df:
01:47:ff:8d:74:10:21:26:52:72:15:dd:6b:55:b0:7e:23:71:
ee:5d:0f:bc:b2:86:00:07:3b:16:53:9f:dd:d4:71:f4:26:9f:
4a:a9:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:04:28 2026 by rpki-client