Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
File: OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft (raw, json)
Hash identifier: grz5vII4Iu9rZLupI1Y58FDtA8aokyududm2UfN/Ja8=
Subject key identifier: E5:40:E8:04:F5:E3:46:7A:4F:D5:55:C1:C9:95:C8:E8:85:5B:DE:C4
Authority key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Certificate issuer: /CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Certificate serial: 01A06D9576EDDEC65CDFDA7E369D0EAAF309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
Manifest number: 11BB
Signing time: Fri 04 Sep 2026 18:01:46 +0000
Manifest this update: Fri 04 Sep 2026 18:01:46 +0000
Manifest next update: Sat 05 Sep 2026 18:01:46 +0000
Files and hashes: 1: OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl (hash: h617DYZ1AzyhwFrNlRCbdVHh2DBZd2EJ2kJyFBNOIVc=)
2: qvZ-nKf7EFh0r3KXcsWmv_aLkqs.roa (hash: XaQIlBTlE+Jhvgae5CyaS1DgkFx27OpIcetptyKOkgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:76:ed:de:c6:5c:df:da:7e:36:9d:0e:aa:f3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Validity
Not Before: Sep 4 18:01:46 2026 GMT
Not After : Sep 5 18:01:46 2026 GMT
Subject: CN=e540e804f5e3467a4fd555c1c995c8e8855bdec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:f9:ff:c3:f6:19:61:b8:f9:96:b0:eb:50:
22:17:fb:89:bf:12:e1:b2:d8:ea:28:50:70:1a:a1:
cf:a0:ad:fb:d8:d7:c8:0d:5f:90:9d:99:35:6b:a1:
e0:a0:4b:70:b9:3e:a8:71:1c:02:de:04:2f:13:65:
b2:93:79:83:19:4f:0e:a6:9b:1d:1c:dc:63:d5:ca:
20:1f:93:2d:13:cb:e2:cc:2d:3f:9c:7b:96:fe:7f:
68:33:ce:dd:7c:52:03:ef:e7:c6:8c:72:3a:5b:58:
d0:ba:4f:65:29:a3:31:54:fb:15:61:d5:62:29:e4:
87:11:bc:b9:c2:52:fd:c3:c2:fe:bc:86:9a:d6:6a:
e3:5c:7d:c1:61:e9:98:d7:89:31:e6:64:14:e4:d9:
ff:b1:a0:81:ee:24:ea:42:05:26:a8:a2:95:a2:08:
91:53:ec:a2:91:20:cd:ed:a0:17:f4:89:c1:dc:60:
49:68:f3:a0:8a:c3:50:20:1a:5f:96:15:9f:93:cd:
67:b3:be:9d:df:5f:68:51:67:58:ba:39:6e:71:b1:
cc:c5:86:e0:30:99:8a:99:fb:50:a0:2a:db:c5:29:
6d:80:fd:83:b5:96:b7:8d:ae:8c:5f:f9:bb:24:68:
b6:75:dd:b6:22:51:75:a4:5f:2c:23:27:a3:6c:8d:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:E8:04:F5:E3:46:7A:4F:D5:55:C1:C9:95:C8:E8:85:5B:DE:C4
X509v3 Authority Key Identifier:
keyid:39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3d:a6:94:96:40:05:d9:b1:b5:29:78:51:8e:c2:b8:03:8f:
73:20:1e:59:60:aa:3d:ef:90:7f:b1:80:1b:cd:ad:a6:f0:02:
59:6a:a9:2d:b4:37:17:69:32:3f:bc:6c:14:29:5e:48:b3:8f:
13:38:e3:5c:0d:a1:0b:2a:75:d7:c9:fa:40:0c:4b:13:f8:f5:
ac:94:ab:d6:7f:d8:0c:f3:8a:4e:25:7d:7a:a9:6f:f0:39:04:
d0:6b:4c:7e:bf:66:cb:7c:a2:11:c4:93:0e:cc:66:df:58:73:
3f:7b:33:d1:71:d6:c2:65:21:1f:f4:e5:42:45:79:2f:83:85:
e9:07:82:e8:fe:c7:17:dc:c1:67:f5:65:d1:d5:e2:b0:b6:df:
b8:b2:c1:20:f2:ee:fc:5a:30:38:f8:40:c7:83:ff:1b:43:3a:
cb:6c:b9:5e:74:3a:52:30:bf:9c:50:de:96:ac:8a:0a:0a:10:
69:e3:55:df:82:17:88:ae:ed:45:ec:6b:af:38:d2:fd:00:60:
12:82:cd:7b:f4:93:af:3b:b3:c8:8a:24:bf:0a:93:40:2a:e0:
99:16:6a:68:9e:15:e6:a0:fd:1d:bd:c2:5b:a5:3f:b8:01:6a:
70:6e:04:41:62:fd:b1:c1:2d:8a:19:b2:20:7f:04:93:9e:d3:
4a:69:f6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:26:48 2026 by rpki-client