Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
File: OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft (raw, json)
Hash identifier: 4HyewegGQkvtSkG9zVb5BKq06pqrDvsGeeYx7HzrOdU=
Subject key identifier: B7:D4:93:CE:A1:E1:18:E5:CF:5A:58:38:38:74:9E:96:00:0F:BC:F4
Authority key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Certificate issuer: /CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Certificate serial: 01A17DE218CB15B81BD18E4399434212F553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
Manifest number: 1248
Signing time: Tue 27 Oct 2026 15:02:11 +0000
Manifest this update: Tue 27 Oct 2026 15:02:11 +0000
Manifest next update: Wed 28 Oct 2026 15:02:11 +0000
Files and hashes: 1: OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl (hash: 8sW2kidp/4H7OYBjWesxM4NjgntCELiDzqEXJcQmqPo=)
2: qvZ-nKf7EFh0r3KXcsWmv_aLkqs.roa (hash: XaQIlBTlE+Jhvgae5CyaS1DgkFx27OpIcetptyKOkgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e2:18:cb:15:b8:1b:d1:8e:43:99:43:42:12:f5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Validity
Not Before: Oct 27 15:02:11 2026 GMT
Not After : Oct 28 15:02:11 2026 GMT
Subject: CN=b7d493cea1e118e5cf5a583838749e96000fbcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:f3:de:35:4a:1a:d9:d3:78:6d:3e:6b:40:
a2:01:aa:ea:83:7d:c5:09:2f:a9:eb:60:2f:0d:14:
7a:90:de:cc:22:12:ca:ab:09:c9:1c:c6:e5:91:44:
94:84:8b:1d:b8:3a:29:92:48:a5:b3:d5:70:89:c8:
73:e9:d1:36:1e:3e:4d:45:98:03:5d:44:8c:f2:67:
69:1b:d6:34:d7:17:74:83:c6:91:ac:92:19:b0:61:
b5:5d:fb:cc:19:e4:57:f0:9f:c7:8a:a0:6d:6f:62:
77:0f:01:3a:60:cd:3b:37:6b:2d:c4:0d:9a:94:0a:
ff:24:6d:82:48:ec:2b:5c:05:84:81:45:85:0a:77:
d3:ec:5c:c9:ca:3d:3b:23:fe:66:6e:01:38:25:56:
13:71:6c:1c:68:94:71:08:61:a7:76:74:41:7c:f2:
49:8f:cc:de:6a:bb:f6:59:5f:5a:53:1b:c4:3d:d7:
ca:ae:7f:c1:f6:4e:1a:8f:34:a5:d1:db:18:cf:92:
05:db:c3:ce:78:a1:71:98:a6:ce:c9:fe:92:ee:d2:
65:b6:d5:30:93:6f:df:9f:cc:66:6a:cb:8a:07:a6:
3a:cb:6b:ef:6d:07:fe:b0:2f:b8:c5:10:6d:62:fa:
f5:8e:57:ac:b1:39:3d:8d:d4:20:4a:01:e4:bf:63:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:93:CE:A1:E1:18:E5:CF:5A:58:38:38:74:9E:96:00:0F:BC:F4
X509v3 Authority Key Identifier:
keyid:39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:55:bf:56:1b:2f:3b:d4:fd:d5:10:c3:14:ca:0b:a8:a1:98:
a5:84:f1:02:42:56:a9:69:ec:3b:2c:44:d1:e3:01:b1:d8:53:
31:00:55:35:16:f0:11:11:e3:f6:a9:37:cd:a7:65:d9:d7:fa:
50:16:10:11:49:3d:6e:31:b2:70:4c:1a:51:0d:11:61:c1:92:
b3:5a:55:38:74:2d:7a:8b:9a:47:b4:ab:22:f2:7b:99:e0:1a:
02:c3:d4:14:f7:5e:1f:e9:60:f0:c2:6a:cf:87:79:e1:00:64:
1d:c5:a1:05:9f:2c:f0:1d:bc:b6:d7:80:d4:80:ff:86:d8:2a:
55:fe:d5:4f:6e:8f:b9:c4:7e:12:cd:aa:97:a2:b5:e8:2b:f6:
26:af:0a:1d:99:e7:b3:1b:83:39:8f:8d:11:39:65:26:eb:a6:
a1:9e:e6:58:ad:cf:d7:06:f2:92:f1:13:c7:f4:86:7a:3d:e5:
19:71:a5:93:96:bb:e3:cd:14:1d:c4:5c:2a:1f:47:52:d0:23:
14:96:b2:86:aa:9a:ca:1b:74:a3:42:53:30:7e:13:68:e6:a5:
c9:50:54:4c:33:b5:16:df:be:68:e0:ea:50:a9:25:20:30:41:
13:f8:b7:58:31:ad:4e:af:f7:8d:b5:d4:f9:c4:32:b2:86:0e:
30:30:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:35:35 2026 by rpki-client