Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: Gnqj6sA/UxZpNExI6pApwhc1VXDk3d2Q/ngPzH/TIG4=
Subject key identifier: 79:54:2E:85:FA:D8:37:D2:E2:F9:D5:AB:9A:D1:7C:45:30:C2:46:2F
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 01A167FDE72E6D3F11D6A0BCF479B96D2A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 1ABB
Signing time: Fri 23 Oct 2026 09:00:55 +0000
Manifest this update: Fri 23 Oct 2026 09:00:55 +0000
Manifest next update: Sat 24 Oct 2026 09:00:55 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: dzEh4E2sG+jv+6cFJEGyCSTA0I1SEk+4as84gC5ylCc=)
2: j6GSjngp4zBMa0A6Up3-vP_HpYA.roa (hash: eFIS08YcHeuG7OXuLasqB4hIQnIZETYTn/VjLjZa0pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:fd:e7:2e:6d:3f:11:d6:a0:bc:f4:79:b9:6d:2a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Oct 23 09:00:55 2026 GMT
Not After : Oct 24 09:00:55 2026 GMT
Subject: CN=79542e85fad837d2e2f9d5ab9ad17c4530c2462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:28:5d:27:95:29:86:9d:5e:d3:12:c0:07:bf:
33:d3:6b:61:c3:75:8f:5a:aa:21:0e:71:e8:e5:3d:
9f:61:ea:4f:3f:5d:1b:59:e1:75:8f:ef:96:7e:dd:
ad:90:65:3f:2b:be:b1:87:7a:70:3d:4b:84:cc:d4:
c0:6c:32:5e:23:66:d0:e1:80:57:b9:7f:e6:c1:3e:
b5:33:d2:23:c1:65:85:d2:c9:3f:a7:bb:4f:98:7f:
ee:47:6a:59:36:4c:1e:7f:f7:0f:90:a6:34:02:ff:
a9:77:88:db:e1:c0:55:2c:e5:68:22:b3:06:e5:60:
10:77:5b:b6:6e:03:20:f2:43:8d:88:a2:74:6a:51:
2f:0a:a0:0b:72:64:cd:cd:ee:4d:01:1a:41:8e:d6:
b6:be:dd:c4:c0:f8:43:f9:dd:7d:bd:1e:41:45:24:
15:7e:f7:48:3d:59:02:4b:d9:f8:3d:76:d7:a1:4f:
ca:53:83:5a:95:56:0a:02:00:30:a1:d9:47:cc:67:
69:75:b9:28:35:a3:8c:c9:a0:40:24:3b:62:e7:e9:
1e:30:a4:77:1e:9b:f1:4f:0b:07:2a:65:10:a4:c0:
71:7a:49:56:a3:57:ec:9e:88:41:09:97:f4:53:5c:
c1:24:b4:0f:09:62:c1:43:f4:d9:aa:3f:1d:63:b9:
ff:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:2E:85:FA:D8:37:D2:E2:F9:D5:AB:9A:D1:7C:45:30:C2:46:2F
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b1:18:8f:1a:87:47:3c:c3:34:61:28:fe:12:41:77:4c:06:
b9:e2:26:94:5a:1a:17:8e:d1:45:43:96:81:79:c9:80:50:a1:
bf:37:a3:4f:4c:d8:7b:58:a5:85:fb:83:f2:ab:dc:21:d6:22:
64:0b:a2:ad:d2:d7:66:e1:65:f8:58:22:ee:e1:c2:09:3a:40:
39:5e:d5:e0:1a:b4:34:a9:ae:78:64:2f:de:bb:38:43:f3:cf:
9b:bd:0a:2e:22:14:1d:d7:b0:40:2a:97:e3:f8:c3:fb:88:cd:
89:61:05:8f:10:0b:20:11:9a:07:e6:03:de:1c:59:0f:6d:06:
bd:f0:82:40:d8:6e:c3:9e:38:bd:5d:48:5d:f4:40:91:44:08:
59:58:a9:9f:d9:3b:f2:fc:ea:1f:bb:2c:9e:ae:28:80:8c:ac:
5a:b9:b7:3e:b5:d5:e0:8d:5b:b3:ef:00:fe:bf:c5:6e:82:5a:
ff:26:45:7c:9f:05:f3:94:d9:e8:5f:57:49:04:b0:85:b1:af:
47:5a:cf:50:2d:ff:4f:e6:7d:af:92:85:9b:98:b4:12:51:11:
60:65:7b:4c:fe:09:36:81:83:8e:1f:e0:e6:de:d3:08:26:e3:
08:cd:3e:a3:8a:9c:94:5a:ca:f1:13:e0:b1:16:ca:ec:12:24:
9f:68:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 21:41:20 2026 by rpki-client