Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: o52HGUkXDlwRWJIxzupPrWsb2chaoYHjaR9EOvK5gXQ=
Subject key identifier: 9D:7E:34:47:E3:43:C8:5A:A9:ED:07:27:EC:4C:3C:C7:FF:07:57:40
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 01A08A8C59C142AF70FBDA07BF848489D652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 066A
Signing time: Thu 10 Sep 2026 09:00:48 +0000
Manifest this update: Thu 10 Sep 2026 09:00:48 +0000
Manifest next update: Fri 11 Sep 2026 09:00:48 +0000
Files and hashes: 1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: B8pWI+nMihtptWBUfptaNJriE1aq1raU32sJ8Hxnktc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:59:c1:42:af:70:fb:da:07:bf:84:84:89:d6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Sep 10 09:00:48 2026 GMT
Not After : Sep 11 09:00:48 2026 GMT
Subject: CN=9d7e3447e343c85aa9ed0727ec4c3cc7ff075740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:dd:3d:a7:3e:8d:7d:51:54:21:bd:ad:cd:
30:ac:c5:78:5a:1b:83:83:53:4e:92:8e:bf:3b:e5:
40:8a:90:75:f3:dd:11:d3:1d:39:5b:61:81:0e:ea:
e6:92:ce:a0:1c:02:35:83:99:a4:b1:01:18:d4:ff:
1d:61:e1:dd:b9:a6:c7:01:54:55:2a:64:26:e3:5b:
30:3a:5f:aa:d3:1d:f8:88:e8:b7:48:46:bf:cb:ba:
0f:88:a0:12:63:42:db:eb:7f:1f:c0:90:47:f8:3f:
dd:d3:6b:c1:f3:8d:c9:ba:1a:c4:85:85:4f:af:92:
28:59:a7:20:1d:1d:d9:80:0a:ca:d2:d6:f3:b7:df:
c8:e8:df:1f:9b:4d:c4:22:36:c6:50:15:ce:95:1f:
a0:35:47:89:c7:0a:0b:a6:a6:d7:f3:f0:34:92:41:
d0:2d:5f:c9:5b:46:4c:2f:e5:03:39:c3:56:5a:27:
77:ee:6d:8d:87:b8:81:4d:aa:cf:08:bb:02:78:0b:
c8:b0:c9:18:9f:52:66:81:f3:bd:e1:4d:20:c7:af:
a1:d9:a5:ea:52:3b:10:8d:19:3f:d2:ed:67:67:76:
d7:b1:7a:1e:fa:e8:df:e2:f5:ff:7c:10:4f:be:66:
1e:53:2c:ce:45:a1:97:4a:fc:80:08:f4:77:41:e8:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7E:34:47:E3:43:C8:5A:A9:ED:07:27:EC:4C:3C:C7:FF:07:57:40
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:cc:d8:b3:35:0e:52:a8:28:a6:7e:31:29:da:98:d4:b5:
d7:54:65:26:aa:22:7e:c2:0a:4c:ca:ab:5a:f7:8c:68:22:c7:
83:6e:7b:76:7a:1d:37:43:0b:18:1c:94:ea:c1:e6:d5:3e:95:
fc:de:9f:02:16:5d:b3:a5:f7:53:d5:3a:95:71:f4:b6:ed:c2:
27:a4:24:83:d3:33:8b:a4:ee:d4:a7:c7:37:0b:10:95:69:9a:
b2:f1:d9:e1:e5:44:8f:d8:a4:72:b5:73:d1:09:aa:22:74:d9:
96:16:a2:7e:54:fe:32:80:ff:52:37:fb:e0:0a:5f:6f:b0:52:
9a:0b:49:c3:79:53:e7:5a:42:14:8b:0f:cf:05:68:c0:39:95:
4d:d7:0a:36:54:35:74:2b:53:9a:22:69:a4:82:d5:fe:c5:90:
af:00:00:3a:f4:9d:a8:7a:49:9d:06:fb:bd:f8:1c:cf:b5:98:
d7:66:5d:7f:b0:16:5c:09:7a:d7:d8:14:34:31:24:ae:37:ee:
5f:bb:57:c4:b5:27:a1:a0:49:97:73:ad:4b:b6:1f:7f:b7:e4:
e7:b7:3e:46:8b:ff:a5:1a:21:4c:ab:d1:72:43:72:76:e5:df:
ad:d9:68:50:ce:28:29:7b:ba:53:34:24:bd:7d:a2:90:90:78:
36:32:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:28:12 2026 by rpki-client