Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
File: ozMRTL_Gv2aDccVofumKRC_Y6jY.mft (raw, json)
Hash identifier: T/PtDskCANO5pIBHvOPKyPV62aFG9xnDPkzepvyJPqg=
Subject key identifier: C9:6B:5B:F6:7B:B3:E6:35:E7:34:AE:94:CC:FD:DA:56:EB:BD:19:FC
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Certificate issuer: /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial: 019D389C5D92807DCFE38AE79F73DD875CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
Manifest number: 189B
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: _of6XJCDa7IDRKvZCSxi-0j0JAQ.roa (hash: kgoplydOSvibwy5xwsCsSSzIjtviPAnX14Ip0WNTTtg=)
2: ozMRTL_Gv2aDccVofumKRC_Y6jY.crl (hash: 6U/G3FKHYzNQ4F1SEX+gqvZx2UhdHzqSJtlSrwiAFXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5d:92:80:7d:cf:e3:8a:e7:9f:73:dd:87:5c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=c96b5bf67bb3e635e734ae94ccfdda56ebbd19fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:c8:21:5f:28:f4:1a:32:b1:b7:fe:1e:b2:
2a:cd:ad:ab:0d:3b:a8:c6:87:54:61:9e:c7:59:e3:
0f:7a:b5:11:01:34:2c:b2:37:94:94:cb:3c:50:c8:
52:2f:7a:29:25:e6:6a:5c:8d:79:f2:6e:a5:7e:78:
dc:e0:73:d3:df:3e:09:1a:af:cb:5c:7b:23:58:bc:
02:b6:1b:17:ca:15:f1:65:0f:21:c0:24:e9:f1:e0:
d7:d1:b1:e4:3c:34:dd:e5:71:70:f1:10:f3:d6:25:
3f:24:ca:f2:f9:50:ce:17:ed:4b:9a:94:ce:d8:b7:
ac:4a:1d:45:99:f1:70:9d:91:0e:d1:c9:22:8f:d2:
53:03:99:af:04:66:f3:e0:15:2f:37:21:18:e6:17:
48:b8:7b:37:f3:e0:0c:2e:5c:d8:6a:41:2c:87:70:
b6:5a:ad:5f:5d:7f:31:04:39:cf:0b:4e:84:81:fc:
a2:49:3a:52:02:77:79:3e:25:cf:2c:ed:73:c0:04:
af:8b:b3:ae:86:b1:38:d9:32:f6:2a:35:57:c5:99:
a0:6e:85:a3:b4:9e:3e:53:ca:f0:08:0e:f0:7c:d8:
2f:8d:50:f5:7d:13:52:7c:aa:9e:6f:3e:ed:5d:68:
70:b7:f6:9b:2b:4b:9f:ff:64:44:88:0e:07:3b:26:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6B:5B:F6:7B:B3:E6:35:E7:34:AE:94:CC:FD:DA:56:EB:BD:19:FC
X509v3 Authority Key Identifier:
keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:98:a6:2f:f0:47:40:86:c3:8c:99:01:f5:45:51:75:98:8c:
d5:78:5c:12:fe:04:cd:51:e6:5a:57:fa:19:1d:4d:02:92:7a:
e7:66:b8:c6:a9:66:37:30:ea:ce:8d:be:e5:c5:ea:01:89:85:
18:0d:32:e8:64:91:31:ec:be:77:95:47:5d:3c:c2:41:68:65:
77:17:4e:e3:63:ea:4e:47:b6:69:cc:99:08:e0:8a:73:3a:06:
b8:1b:ef:57:50:da:8c:e1:cc:ca:b9:1b:09:cb:95:3e:69:2c:
88:b4:54:86:38:63:88:84:eb:08:fe:4a:23:69:cb:7b:f6:f5:
b8:ea:95:88:3c:c6:c3:63:51:94:23:4e:15:db:dd:ff:96:1d:
db:ac:1f:6f:4c:68:89:2b:73:a3:30:ac:d1:5b:aa:8f:cf:3b:
a4:45:5a:1c:5a:0b:ef:17:45:0d:f6:0b:97:4a:6b:12:02:8f:
2a:41:10:56:c5:48:c4:0e:06:8c:3f:8b:07:07:8d:84:11:1c:
ab:22:9b:ad:84:af:48:f4:68:6a:2c:19:35:80:62:b1:b0:f3:
ab:50:5f:39:a9:41:30:3b:d5:df:32:01:1c:b0:9e:82:3f:c4:
9b:40:75:7f:2b:94:57:44:bd:e8:63:ec:48:ed:2d:e9:29:b3:
85:e0:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:12 2026 by rpki-client