Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json)
Hash identifier: xeMR1N0Onk2PpAyzc++Yj1v8rhDidmD8BJrOTjQyWAk=
Subject key identifier: BC:38:9C:D8:ED:35:D8:14:8B:0F:C6:7A:D2:DA:57:DA:39:27:23:3C
Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5
Certificate serial: 01A13D49EA07AA9B816D4D46BF324C54A900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
Manifest number: 19FC
Signing time: Thu 15 Oct 2026 02:00:16 +0000
Manifest this update: Thu 15 Oct 2026 02:00:16 +0000
Manifest next update: Fri 16 Oct 2026 02:00:16 +0000
Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: iAmMKarkTQg+Rl+moCBdgOguSm2SBwgr/3FIenCEVxw=)
2: EK7og_r9H_ffSIUUiem5NEk6UL8.roa (hash: eLq/wtFM6uQM0OwlqKSUvfOwD4gri3G8Vxxkp/URFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:ea:07:aa:9b:81:6d:4d:46:bf:32:4c:54:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5
Validity
Not Before: Oct 15 02:00:16 2026 GMT
Not After : Oct 16 02:00:16 2026 GMT
Subject: CN=bc389cd8ed35d8148b0fc67ad2da57da3927233c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:c8:90:a9:d6:f5:12:33:f7:25:9e:11:dc:
d6:83:4f:9d:83:9a:16:45:08:7d:9d:28:c1:86:5a:
9d:dd:66:d8:0a:3e:82:91:e4:69:fa:5a:fa:37:1c:
14:08:fd:59:83:9d:c7:95:61:15:5b:7f:79:69:c2:
f8:01:e7:d5:b4:63:d6:e8:34:fa:6e:79:fc:26:60:
8e:50:75:aa:de:16:32:3d:bf:ed:8a:17:f6:71:bb:
ea:06:22:45:5f:cf:60:4c:42:59:d2:fe:65:d2:82:
90:55:c5:8e:8a:4a:cd:d1:e1:05:87:2a:a3:d5:e9:
06:92:19:fd:ef:bc:1e:ef:cc:09:db:db:c6:16:97:
67:ba:e6:67:52:0d:c9:c7:5c:72:04:f1:3c:c4:a8:
1b:76:1d:fd:32:6a:05:42:f3:31:97:bf:f8:21:4c:
da:89:89:96:28:29:55:ce:71:cd:cd:19:99:b7:c2:
83:a2:d3:cc:db:f3:10:0c:48:ac:cb:5a:0b:58:c0:
6c:c6:0c:c1:62:c3:51:6b:b3:35:3d:ee:b7:6b:bf:
59:6b:58:ab:37:51:02:34:47:ae:0e:f3:43:d9:c0:
c3:64:06:26:10:d4:1a:d1:49:44:ab:fd:b7:2f:93:
16:d9:57:c3:b3:20:e8:c3:d5:10:d2:09:0a:a7:05:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:38:9C:D8:ED:35:D8:14:8B:0F:C6:7A:D2:DA:57:DA:39:27:23:3C
X509v3 Authority Key Identifier:
keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bc:65:b5:9c:e0:4a:f5:e0:ce:30:d6:2b:f9:7c:22:d4:1c:
5d:82:08:d7:c6:15:4f:d8:22:b5:b6:e1:d5:e4:31:1c:d9:a3:
94:c2:3f:81:a3:91:ec:77:d6:59:65:3d:db:bf:e2:43:db:0c:
8c:10:7c:5e:d3:28:f5:64:e4:d0:ca:34:41:c3:82:e0:31:17:
af:8b:0e:4c:e9:29:20:d3:bd:df:6e:09:71:e6:b2:b9:a2:fc:
80:64:b1:9e:0b:30:b1:f6:5a:6e:8d:ec:2a:3f:48:b9:dc:eb:
96:3f:55:aa:b4:7e:d8:a8:25:cb:c3:ee:6a:4d:b8:6c:18:01:
c0:61:18:92:40:64:34:ea:78:bb:74:17:e9:14:63:af:02:ea:
09:62:40:b5:63:14:15:51:2f:68:38:e0:c1:5a:dc:0a:fa:8f:
52:f6:a6:db:f4:73:f2:7f:b6:1a:b8:7e:85:6d:d4:a8:17:88:
98:f3:53:31:76:13:64:47:2a:55:7d:df:3a:63:a0:91:e4:2b:
97:bb:f4:61:05:6c:8f:aa:30:fb:85:52:1e:f8:6b:b7:58:a2:
55:94:77:a3:0d:2b:3a:66:bc:0a:c2:af:28:2a:80:5e:c8:0b:
1d:6a:14:fc:ab:0e:89:12:f4:9a:e9:5a:fa:a7:92:df:17:cf:
77:bd:47:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:01 2026 by rpki-client