Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json)
Hash identifier: GxjRhEiMMeYRsapJJfQo8WXNtfxczOGbqimjGDSWLgw=
Subject key identifier: 6E:1F:D4:A6:2E:A2:31:30:26:B1:9B:AF:DA:8B:69:98:37:EC:FC:C1
Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Certificate serial: 019E8FEF48785E7F899300D3630A0D6EAA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
Manifest number: 1942
Signing time: Thu 04 Jun 2026 00:01:23 +0000
Manifest this update: Thu 04 Jun 2026 00:01:23 +0000
Manifest next update: Fri 05 Jun 2026 00:01:23 +0000
Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: YiHBV58/xmlwcVr2aY4KiCMIf6/hre9GuMxWEFPc9jM=)
2: j6GSjngp4zBMa0A6Up3-vP_HpYA.roa (hash: eFIS08YcHeuG7OXuLasqB4hIQnIZETYTn/VjLjZa0pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:ef:48:78:5e:7f:89:93:00:d3:63:0a:0d:6e:aa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922
Validity
Not Before: Jun 4 00:01:23 2026 GMT
Not After : Jun 5 00:01:23 2026 GMT
Subject: CN=6e1fd4a62ea2313026b19bafda8b699837ecfcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:11:9f:b0:2d:b7:ea:e7:87:b2:1a:2b:4d:
7f:0e:5a:30:2e:34:68:35:f1:cf:d0:ff:51:6a:ea:
00:3b:e0:6f:a9:d1:34:11:6b:eb:35:25:13:4e:03:
1b:10:cc:27:f1:e0:56:2e:78:13:71:7e:35:12:d0:
74:01:22:bc:a6:9d:04:3d:90:89:3a:ee:8c:47:fe:
22:34:29:2d:29:0b:51:ed:4d:62:df:aa:b2:c8:15:
1e:fc:1a:e4:b9:2d:8e:9e:54:19:92:14:0a:9c:0b:
06:67:1e:db:24:80:ed:5b:58:15:54:d0:1e:84:9e:
9f:10:50:6b:78:af:e4:82:42:4f:c5:1b:e9:41:d4:
fc:57:24:51:c4:5b:ce:0e:11:e2:c5:35:b4:e3:a7:
92:ea:24:89:71:8c:be:d6:95:42:16:02:9b:9b:3b:
8e:e1:47:7b:66:07:3f:da:2f:d2:80:4f:d7:93:74:
ce:5b:9b:a4:77:51:c0:55:a6:50:cb:74:e1:73:2c:
e6:f1:9b:bf:91:56:52:98:ac:c7:7d:c0:5e:0d:23:
d7:68:a1:06:13:04:2c:8f:9e:e4:32:bb:7a:de:e0:
83:f2:3f:1d:f3:a2:92:cc:21:13:df:b6:57:ab:71:
7a:57:ad:16:c5:58:19:b6:ee:0d:95:89:d6:d6:a8:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:D4:A6:2E:A2:31:30:26:B1:9B:AF:DA:8B:69:98:37:EC:FC:C1
X509v3 Authority Key Identifier:
keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7d:67:0d:d9:eb:8e:25:58:9f:4b:78:9f:f7:e0:5b:2b:83:
06:04:4a:34:e7:37:2d:79:c6:eb:2c:a6:ee:07:7b:f7:98:0b:
34:4b:5f:83:3c:e2:1a:96:35:4a:ad:11:ae:85:5f:45:f6:49:
e2:59:dd:c0:08:7a:10:36:36:47:ff:85:fd:1e:02:e5:62:59:
1e:b8:d9:c3:16:ec:66:67:1c:b0:46:da:ca:f3:d7:66:90:f5:
0e:85:9d:31:56:b0:88:cf:4d:ab:9f:3d:34:f0:d6:d8:cf:79:
b3:2d:ae:4a:33:16:49:18:d2:c9:f4:58:16:90:49:d6:99:ea:
a1:9d:eb:dc:8b:be:7f:a0:53:76:b0:5d:a9:80:5c:32:74:14:
42:4e:84:79:9b:8c:67:4a:ec:57:c2:7b:2a:c8:ab:80:1e:a6:
8f:ba:8a:00:40:42:4a:b7:f0:d7:5e:82:30:88:bb:f1:c9:69:
00:db:5e:a2:0b:b4:51:98:25:7f:e4:6f:0e:0a:e2:35:dd:e0:
fd:76:b3:aa:97:ed:ed:35:75:30:f9:f4:63:1e:fd:2a:ad:4c:
a7:f3:61:91:68:9e:67:84:8f:1c:e7:36:27:7f:87:6e:d0:76:
82:d6:7e:5c:0a:b6:3b:78:75:34:c3:74:66:a1:8b:4e:20:e8:
9d:5a:ba:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:19 2026 by rpki-client