Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: jKQ0AmDctC4QlvuxFfll+2qGyg57W2FuNa12Gepm60g=
Subject key identifier: E7:0F:F3:58:04:67:19:8C:29:19:84:CC:EE:21:26:09:12:90:19:D9
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 01A0EC2F42AF2610195E1971B5E6EDC565ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 1A87
Signing time: Tue 29 Sep 2026 08:01:55 +0000
Manifest this update: Tue 29 Sep 2026 08:01:55 +0000
Manifest next update: Wed 30 Sep 2026 08:01:55 +0000
Files and hashes: 1: 9ryC_FwVqFhw7YCtYhe3m9sgtPQ.roa (hash: qftJAO5xZn04TQEdzEIUocCNdk0IiIOqR+bZ8YJWZ7o=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: mViqRJrGjapU8F8720EYL3gU/tGWLDhOfQZRXOzDeSw=)
3: n6OO-WnnkHzceF7bSScsPeztc-c.roa (hash: E3zuJZBnxJWbp6sji/yaodu4Rd/MUTtyvemA5p5Biac=)
4: tNm4Kj6pURpIDAOhjCaj5b4oBeI.asa (hash: AL9vjuRr/GpcvmtoQMe6I7TNeV/MZ4vDKYV842zbN/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:42:af:26:10:19:5e:19:71:b5:e6:ed:c5:65:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Sep 29 08:01:55 2026 GMT
Not After : Sep 30 08:01:55 2026 GMT
Subject: CN=e70ff3580467198c291984ccee212609129019d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:b4:55:eb:83:c0:eb:9d:cd:a0:8e:8a:8e:
5f:62:ee:24:30:4b:d0:7d:a2:b6:36:59:d1:50:f5:
20:01:8e:6d:8c:30:ec:eb:dd:cc:be:d7:fa:da:24:
3b:66:4c:3e:6a:82:c8:ba:da:26:e9:28:01:4f:9b:
24:6f:39:e4:58:91:24:ca:a7:71:53:85:36:5d:f8:
65:e8:2c:d2:fe:63:9d:99:1a:0c:09:9c:dc:cf:be:
40:ad:99:8b:25:6a:91:38:f1:d6:f5:e7:a0:26:74:
1e:cb:10:3d:52:d9:11:2d:14:71:81:2b:48:cd:94:
b9:7b:49:9f:16:3f:23:cb:ee:45:46:e5:df:a4:fa:
bc:42:a0:56:b7:2a:ff:a3:46:68:a2:ca:49:29:aa:
e4:a4:af:d7:55:30:b9:1e:73:45:41:18:37:62:92:
4f:22:7a:fc:19:0f:ea:9f:50:c0:b5:58:c4:b8:2e:
51:fb:1b:a6:44:81:3e:81:bd:d3:7f:51:4c:4e:f2:
53:5d:a9:a2:7a:92:c7:c8:d4:1a:14:34:31:f2:63:
5c:80:ec:50:71:ef:9b:4c:f7:4c:eb:ae:bb:86:e3:
2f:cd:ef:79:98:7a:78:8d:aa:13:42:8a:f9:c7:51:
c3:86:b1:21:7d:80:b8:52:12:e5:78:c4:e3:7c:b1:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:F3:58:04:67:19:8C:29:19:84:CC:EE:21:26:09:12:90:19:D9
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:76:e2:05:79:17:81:8b:82:a7:26:83:5f:8e:8c:10:b0:71:
fe:ea:c8:d7:9e:74:3a:21:db:d0:85:9b:57:24:a4:d3:65:67:
08:54:25:5b:b6:ff:ac:24:ea:2e:8c:d6:f0:43:09:bf:fb:0a:
9b:57:ac:9d:22:29:a7:bb:bc:30:8f:a9:6d:9f:6f:a8:1a:4d:
3a:ed:02:2a:be:5e:78:2f:b3:6e:7c:7f:47:bb:f3:96:6e:85:
84:bf:a3:ca:08:e6:42:27:9d:ab:01:53:c2:45:49:8c:16:1c:
2e:61:db:33:51:d4:ec:a0:88:b1:b5:de:8b:fd:f6:e9:e4:79:
a2:ff:30:7a:67:e8:f8:b8:8c:66:7e:06:df:ae:14:95:5d:0c:
e0:46:5b:9c:52:e4:88:64:b0:75:f7:e8:0e:d5:b3:78:9a:7c:
41:3e:63:e8:3f:8d:2a:bd:55:61:03:85:b0:d8:8f:55:6b:86:
fd:bb:e6:79:03:4a:d4:2c:c0:42:95:48:14:51:5a:6c:91:35:
a4:91:62:17:94:a9:2b:a1:cd:46:a8:f1:df:95:1a:12:60:db:
e9:47:1f:0e:2a:fc:a1:e7:33:13:57:18:4b:c1:e0:76:7b:65:
3a:56:1e:d8:07:52:98:dc:a6:42:5d:84:bc:11:b9:85:db:eb:
4f:95:16:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsL0KvJhAZXhlxtebtxWXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiM2RhZWY4OTMwNmE3NWYwYjg4MTkxNDQwNzQyYTcyMGFm
YjNmMjAwHhcNMjYwOTI5MDgwMTU1WhcNMjYwOTMwMDgwMTU1WjAzMTEwLwYDVQQD
EyhlNzBmZjM1ODA0NjcxOThjMjkxOTg0Y2NlZTIxMjYwOTEyOTAxOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXW0VeuDwOudzaCOio5fYu4kMEvQ
faK2NlnRUPUgAY5tjDDs693Mvtf62iQ7Zkw+aoLIutom6SgBT5skbznkWJEkyqdx
U4U2Xfhl6CzS/mOdmRoMCZzcz75ArZmLJWqROPHW9eegJnQeyxA9UtkRLRRxgStI
zZS5e0mfFj8jy+5FRuXfpPq8QqBWtyr/o0ZoospJKarkpK/XVTC5HnNFQRg3YpJP
Inr8GQ/qn1DAtVjEuC5R+xumRIE+gb3Tf1FMTvJTXamiepLHyNQaFDQx8mNcgOxQ
ce+bTPdM6667huMvze95mHp4jaoTQor5x1HDhrEhfYC4UhLleMTjfLHZIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcP81gEZxmMKRmEzO4hJgkSkBnZMB8GA1UdIwQY
MBaAFDs9rviTBqdfC4gZFEB0KnIK+z8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mMTUwYjEtNDNiOS00OTExLWEwMDUt
YWFjYWQ4NmM2MTdkLzEvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mMTUwYjEtNDNiOS00OTExLWEwMDUtYWFjYWQ4NmM2MTdk
LzEvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3biBXkX
gYuCpyaDX46MELBx/urI1550OiHb0IWbVySk02VnCFQlW7b/rCTqLozW8EMJv/sK
m1esnSIpp7u8MI+pbZ9vqBpNOu0CKr5eeC+zbnx/R7vzlm6FhL+jygjmQiedqwFT
wkVJjBYcLmHbM1HU7KCIsbXei/326eR5ov8wemfo+LiMZn4G364UlV0M4EZbnFLk
iGSwdffoDtWzeJp8QT5j6D+NKr1VYQOFsNiPVWuG/bvmeQNK1CzAQpVIFFFabJE1
pJFiF5SpK6HNRqjx35UaEmDb6UcfDir8oeczE1cYS8HgdntlOlYe2AdSmNymQl2E
vBG5hdvrT5UWzg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:10:29 2026 by rpki-client