Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File: OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier: TMG9a9az4XW3RQnCfyV64wNJO9hoR1zOwuyN7gY3PaQ=
Subject key identifier: 31:AD:DC:7A:8F:30:57:85:8B:E8:A8:B0:C0:FC:13:27:56:02:C9:58
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial: 01A15A42CAC63B3B81F990B7C1962EF1066D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number: 1775
Signing time: Tue 20 Oct 2026 17:01:28 +0000
Manifest this update: Tue 20 Oct 2026 17:01:28 +0000
Manifest next update: Wed 21 Oct 2026 17:01:28 +0000
Files and hashes: 1: 4wCH1xXH2AmEqNEibg1P7FM72SE.roa (hash: 1jaXMinq6qu7nzoECfPCDfNYeYpFgouOjB2jk7Nl0Sw=)
2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: 3/y4KSZhDENQPBdyO4xkgSXJQVEhMBq345rnchp+4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:42:ca:c6:3b:3b:81:f9:90:b7:c1:96:2e:f1:06:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Validity
Not Before: Oct 20 17:01:28 2026 GMT
Not After : Oct 21 17:01:28 2026 GMT
Subject: CN=31addc7a8f3057858be8a8b0c0fc13275602c958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:aa:1f:7e:46:32:2a:88:0e:30:e5:04:4b:
24:24:11:1f:07:9e:ce:3a:8b:3e:89:96:0e:d4:cb:
d0:9f:1d:b7:ef:ec:94:f7:be:e9:be:91:f4:a0:aa:
74:2b:0a:ee:25:4a:df:eb:57:07:b0:7d:49:5c:61:
6a:69:76:45:0d:d4:38:97:76:ce:56:d3:6b:a7:c0:
d4:79:9b:69:39:3a:3d:33:88:97:52:13:ce:04:06:
54:d9:58:11:91:09:23:e8:2f:00:8b:04:83:f9:20:
d6:54:db:24:5d:04:e2:0a:9f:b9:92:4e:c5:70:60:
b3:1a:fa:f3:3c:f4:0a:f3:64:ad:04:8f:94:f6:3d:
c3:5f:8f:56:bf:1f:a0:a3:f2:60:29:01:0c:09:7c:
c8:98:58:7a:c9:49:5b:f5:77:4c:af:5b:c2:f9:d3:
d0:ad:17:cd:ba:ad:50:bb:11:2d:a3:c4:92:99:0d:
99:01:f9:a1:17:76:86:0a:1c:c3:7c:a6:ee:fb:34:
87:7d:47:8b:28:b6:d4:56:e8:ef:23:7a:df:f0:f3:
10:17:ab:0c:5d:5f:a2:41:18:fe:ed:07:fc:93:5e:
18:33:f0:8b:8b:8b:96:df:fe:69:f8:6e:5f:98:68:
1a:bb:15:e8:77:e8:21:2a:0e:09:65:63:2c:9e:95:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AD:DC:7A:8F:30:57:85:8B:E8:A8:B0:C0:FC:13:27:56:02:C9:58
X509v3 Authority Key Identifier:
keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6e:eb:6a:b8:33:20:7b:1c:fe:45:74:93:92:21:a6:82:27:
be:2f:03:0e:36:6e:8a:7a:1d:c2:92:d2:65:9a:a0:76:82:57:
d4:cd:da:a9:ed:92:8b:50:cb:28:7b:72:fc:f7:01:84:ca:97:
e4:0b:49:ce:60:54:98:8d:37:ad:0d:0e:b6:3d:f1:12:ad:2c:
cb:82:2f:f1:fa:89:72:ec:ac:b5:dd:40:f0:00:17:7e:61:48:
cf:54:a8:83:70:a4:89:29:92:e6:e7:c5:2c:05:78:69:81:44:
f8:aa:6e:3f:68:85:7b:fb:3a:a3:5a:c5:9e:a3:c3:fd:9c:d6:
8e:ba:cd:4a:b3:0f:28:ba:45:ce:ca:19:8b:c6:7e:c8:33:27:
04:bc:a7:d3:3b:69:44:9f:e6:74:3a:86:d2:94:b0:19:1f:ae:
4d:05:3a:91:e4:8a:ff:7e:90:b2:0e:c3:28:16:e0:98:9b:52:
82:44:ea:93:e8:31:0d:51:b6:26:ac:f8:30:dd:e4:7f:b3:86:
8b:47:be:4e:de:7e:2e:e7:e0:58:22:01:91:7e:d1:bf:00:4f:
ec:48:a1:ef:f3:88:84:ff:7b:eb:c5:a0:40:6d:50:f4:e1:5c:
b9:55:c7:58:d1:c0:7f:a2:c4:99:1a:83:ff:5a:8a:da:54:9b:
9e:cb:52:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:31:35 2026 by rpki-client