Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: C/LSCI3m7cg+NhZ02Sa8ikuRxapx9grW+OuNKPEbjVw=
Subject key identifier: 0C:86:D3:E9:3C:15:06:77:51:4D:B9:AA:4B:49:FA:3A:62:87:59:9C
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 019F8531FCD8A106A41CBCDE678AC4B5DA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 15:01:13 +0000
Manifest this update: Tue 21 Jul 2026 15:01:13 +0000
Manifest next update: Wed 22 Jul 2026 15:01:13 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: 16ivQrk4NwG1kL/VJcs4vQGKK/MI24XCOjmGNI8qsnE=)
2: j6GSjngp4zBMa0A6Up3-vP_HpYA.roa (hash: eFIS08YcHeuG7OXuLasqB4hIQnIZETYTn/VjLjZa0pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:fc:d8:a1:06:a4:1c:bc:de:67:8a:c4:b5:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Jul 21 15:01:13 2026 GMT
Not After : Jul 22 15:01:13 2026 GMT
Subject: CN=0c86d3e93c150677514db9aa4b49fa3a6287599c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:41:1a:99:86:81:ee:66:7c:e1:de:9f:f2:
5c:f7:47:ec:9c:90:6d:22:5a:18:f6:7a:b7:ba:7f:
39:6f:dd:de:cb:6a:67:4e:d8:54:1c:47:e1:07:7f:
bc:99:52:37:d7:93:72:55:9a:52:22:da:9f:bc:2e:
e6:50:3b:63:1d:44:96:10:fc:8d:18:75:63:c0:e2:
5a:c6:9e:70:d6:39:dc:9d:63:2d:bc:d0:21:83:aa:
cc:96:79:a8:e0:a3:a6:ef:54:ca:27:3b:8d:46:42:
d1:b2:59:13:21:62:b5:38:39:da:d4:16:84:05:7e:
ea:f4:b5:cf:04:c0:a3:fe:db:c0:66:de:7e:45:4d:
df:0a:77:bb:7e:fb:09:6c:80:b2:4b:77:fb:73:36:
4b:9b:b5:a2:d4:20:5e:e1:5d:90:f4:22:9a:01:47:
2e:be:ae:7b:f0:f3:4a:e1:ae:e3:56:53:83:82:af:
2b:ec:8d:8c:a9:e4:f7:2d:f2:fb:b5:e1:b9:d9:88:
3a:73:46:68:f3:52:a6:b9:16:86:4d:2e:18:5c:36:
bd:31:51:e6:98:39:87:71:57:02:97:71:72:bc:1e:
85:87:7e:4f:eb:6f:cd:90:66:cc:9a:aa:1d:c3:40:
70:47:e5:f3:eb:b9:e8:68:11:80:e1:cf:c7:a9:08:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:86:D3:E9:3C:15:06:77:51:4D:B9:AA:4B:49:FA:3A:62:87:59:9C
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5e:3b:21:5b:c6:c0:f8:4f:bb:a4:9f:8b:3e:2f:0a:9e:50:
c5:17:43:ae:a1:a4:67:f3:84:4d:49:f4:12:52:3a:39:2e:20:
96:39:e3:ea:e8:ab:f6:b3:ee:85:30:b7:fb:91:85:dc:db:28:
49:50:3a:4c:8c:8b:3d:e7:de:ca:bb:6c:58:af:c0:57:bf:65:
c7:f1:26:28:ec:a3:7c:58:3c:43:e5:1a:8f:8b:33:f3:06:e7:
2a:44:15:5b:c2:e3:dd:3c:79:6f:ef:c6:34:48:ac:ca:7b:0f:
27:8b:00:47:b5:a7:49:08:08:be:74:9f:a2:f9:ee:f4:50:a3:
e4:ee:32:26:a0:5e:da:c8:2f:4b:95:bf:51:75:06:3b:40:b2:
68:05:81:ae:9a:d8:0a:67:b5:f0:da:22:e3:13:e1:4a:07:72:
de:59:da:21:4c:60:14:d9:ca:86:5a:76:ad:31:3d:bd:79:55:
21:49:d0:4f:61:a6:9b:b8:da:91:b1:44:2f:de:73:88:e8:6f:
ed:c3:bc:d5:7e:fa:31:19:cb:e8:89:d0:c4:d5:d4:ac:98:e8:
a2:63:6e:fe:a5:bd:99:42:d3:d3:3e:29:56:c3:1b:03:f8:0c:
b1:90:f5:66:63:4c:b1:0d:73:d7:a2:70:83:7f:4d:b5:e5:1e:
40:bb:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:33:19 2026 by rpki-client