Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: v/JRRdAeOKbfz69aYhjLGBgD7m1YdKeJjNdorZd92QM=
Subject key identifier: EC:22:F9:6B:B7:1D:FB:88:55:4F:17:D7:1D:2B:69:93:25:03:82:93
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 019DCD876281F3309C07F2EBB9215AD69134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 04FF
Signing time: Mon 27 Apr 2026 06:01:34 +0000
Manifest this update: Mon 27 Apr 2026 06:01:34 +0000
Manifest next update: Tue 28 Apr 2026 06:01:34 +0000
Files and hashes: 1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: CPqaPyYKDVMIuyYoebwnaZcPtMP40MPBzeZBIx/yMzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:62:81:f3:30:9c:07:f2:eb:b9:21:5a:d6:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Apr 27 06:01:34 2026 GMT
Not After : Apr 28 06:01:34 2026 GMT
Subject: CN=ec22f96bb71dfb88554f17d71d2b699325038293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:fa:87:b7:d8:d9:10:63:5a:f4:73:06:68:
ee:f0:a3:bd:ac:20:23:13:fc:b2:09:92:f2:23:87:
4b:1e:79:f6:cf:c3:78:4f:e1:ca:ad:d3:d2:c5:48:
dd:45:7d:68:c6:d6:8f:06:88:98:d2:68:c2:6b:9b:
fb:6c:e6:6b:4a:41:a0:bb:a2:82:5f:4c:d0:74:59:
09:fb:05:f8:ad:2f:8b:b6:f9:73:41:f7:41:15:49:
45:a2:82:08:52:34:f7:cf:7e:5b:55:06:37:9e:3c:
03:44:fb:ad:5d:ac:38:34:79:8f:ed:1e:23:37:d8:
33:3b:ad:9d:c1:4c:38:80:fa:07:ed:45:ff:e4:c5:
bb:1b:b6:47:30:07:3d:97:14:ab:18:e6:7c:fc:a8:
eb:10:53:78:57:17:ef:ee:f1:1f:ff:34:9c:0c:58:
c3:03:66:6f:c5:24:cf:53:22:d6:78:c7:cc:3e:7b:
e0:ea:ed:ac:b5:c5:d5:25:cb:3b:1f:f9:bb:7d:1c:
f0:f4:7a:ba:f0:48:15:2f:f3:df:e8:e5:f8:84:99:
47:65:30:93:b9:46:b5:2a:f1:e9:a7:8f:45:39:42:
15:c8:15:1b:2c:db:42:09:8a:2e:56:12:d0:29:c0:
c8:ea:27:92:4e:2a:c5:d0:ce:19:42:12:dd:75:54:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:F9:6B:B7:1D:FB:88:55:4F:17:D7:1D:2B:69:93:25:03:82:93
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f0:59:69:29:4a:ef:52:f6:0e:c8:47:dd:51:5f:92:ce:b8:
f9:93:15:39:6b:f0:ee:15:9f:dc:3f:97:c3:47:f2:32:c0:bc:
fd:ea:2f:c8:c4:8b:e8:e7:c4:1c:45:db:ca:81:7a:43:a8:f6:
80:aa:08:71:65:36:89:6c:4f:b9:93:2f:7a:b4:7e:94:c1:24:
c2:a9:e0:84:9d:3b:be:8e:45:91:f0:5f:77:2b:13:c3:85:b0:
b0:fa:25:ef:bc:1e:0b:90:8f:b8:ab:77:e5:27:85:9a:21:93:
3f:8e:54:b3:73:0f:a9:cc:bc:5c:75:75:01:cd:60:46:e6:7c:
5d:e4:24:ff:3a:0f:33:2e:90:f3:98:30:bb:65:0d:9d:aa:e2:
d4:af:04:0f:df:f3:d9:5e:cc:a5:93:7a:09:2c:27:33:72:a9:
f6:a8:99:71:9e:c5:57:aa:db:50:32:8e:d6:dd:ea:13:49:25:
9a:1f:95:d4:8a:9c:3f:ce:bd:3a:8f:00:d1:09:96:e6:74:4d:
42:b5:4a:32:4d:ba:c0:31:f5:8d:b3:ff:f8:db:1f:fe:cd:62:
3f:ee:81:5b:35:4c:b1:7a:a8:89:29:a6:90:b7:e7:08:42:28:
74:c2:2c:93:bc:fc:86:05:93:c8:32:d8:9e:d0:83:96:59:3a:
6c:36:85:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:50 2026 by rpki-client