
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
File: OZ61MiamYLfJOBbGFrZtjHZVBgM.mft (raw, json)
Hash identifier: T0/ijomYpAevRO2vJI0Dv0ZZ6KK8wg4HPiHOkDEA/ps=
Subject key identifier: DC:F9:B2:94:B4:18:30:F6:AE:49:5D:4D:95:55:63:2D:D7:64:2C:D2
Authority key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
Certificate issuer: /CN=399eb53226a660b7c93816c616b66d8c76550603
Certificate serial: 01A1781647B8340D9AAC3DCEC9A7EE1BB2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
Manifest number: 084E
Signing time: Mon 26 Oct 2026 12:01:28 +0000
Manifest this update: Mon 26 Oct 2026 12:01:28 +0000
Manifest next update: Tue 27 Oct 2026 12:01:28 +0000
Files and hashes: 1: OZ61MiamYLfJOBbGFrZtjHZVBgM.crl (hash: RKvms3c5GMnjVaGpoEKcEvh/3dVqdwl1+gkeKV6oLA8=)
2: VSD1KAdlgGbgmB2_Rmw11CWucJM.roa (hash: IUX57Wc+4W1jlF03sar3zmckuSPcQbXFlSgjM7+Gk0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:47:b8:34:0d:9a:ac:3d:ce:c9:a7:ee:1b:b2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399eb53226a660b7c93816c616b66d8c76550603
Validity
Not Before: Oct 26 12:01:28 2026 GMT
Not After : Oct 27 12:01:28 2026 GMT
Subject: CN=dcf9b294b41830f6ae495d4d9555632dd7642cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:fe:59:67:e5:08:16:b5:10:5e:6c:a0:9e:
8e:97:60:e9:51:45:e3:45:02:bb:ae:7d:95:dd:9b:
81:e7:75:67:d8:99:67:10:e7:6d:39:a8:c8:26:c5:
32:9b:84:60:8d:08:be:fe:df:14:0b:90:2e:3b:e3:
aa:39:1a:0a:c2:3d:5a:7e:70:33:ec:22:7f:f0:93:
1f:3c:1c:1c:46:05:19:df:c5:6e:48:b5:36:c6:12:
51:51:b8:ee:cf:5d:3d:56:ea:fd:d0:9d:3a:e4:4d:
4d:16:fc:e9:9f:56:c4:2c:88:2d:5d:2b:62:10:62:
66:96:8f:81:65:19:18:e1:a2:8f:4c:48:6f:00:f8:
47:7a:14:22:fc:b9:75:38:f8:ae:5d:38:a4:b3:01:
ec:6c:a9:bd:86:0e:ba:4f:c0:df:ab:77:d9:0d:56:
43:24:c9:50:1e:25:86:a6:90:9b:f4:33:af:d8:ce:
d8:1a:c0:95:d3:0a:96:dc:3e:97:7f:89:a6:78:1b:
84:63:89:94:a7:1b:3e:6f:7f:0d:e2:cd:3d:fe:27:
9b:57:23:34:5b:e9:45:46:27:39:e4:e8:73:65:1d:
c3:d9:51:31:8d:57:49:dd:c8:a7:48:dc:3f:d7:58:
25:3f:57:4d:cc:54:0d:f4:26:fd:a4:59:58:3d:91:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F9:B2:94:B4:18:30:F6:AE:49:5D:4D:95:55:63:2D:D7:64:2C:D2
X509v3 Authority Key Identifier:
keyid:39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b1:70:74:c7:6b:37:68:6d:d1:fb:fa:df:a9:ff:07:32:4b:
4a:46:a5:b3:5b:cb:de:32:10:9d:a0:58:1d:7f:6e:85:34:ec:
31:95:32:7d:40:56:39:13:8e:a4:3f:11:6c:d9:b6:82:15:dc:
66:e7:a1:50:40:8e:36:2b:9a:4e:68:dd:f3:54:fe:ac:f8:22:
86:17:60:9e:53:e3:9d:4e:c8:bc:65:80:f1:ee:99:ce:62:e0:
b5:60:a5:2d:2e:dc:63:26:1b:d6:91:88:f6:f5:92:50:90:d8:
8a:b7:49:90:c7:df:1b:07:89:a1:fa:7a:fa:11:9d:dc:7b:28:
95:34:6d:91:6f:a8:07:bd:83:8f:75:0e:b5:3a:28:4a:d0:af:
f5:28:eb:20:6e:f3:4c:07:c1:9c:01:5a:34:04:26:71:2a:01:
3e:2c:c6:ef:d6:03:11:b6:3f:4d:18:59:ce:0a:82:72:07:88:
c1:42:ec:89:de:b8:09:b2:1e:de:7d:7a:eb:2f:b3:e6:e6:3c:
aa:c4:9a:ba:cb:57:b2:56:13:4b:6f:92:5e:54:bb:00:b6:05:
ce:cf:7e:13:46:ce:44:55:35:eb:6e:9b:54:4e:5a:36:2d:f1:
07:29:12:5d:33:7d:ba:c4:e1:19:f2:56:3a:65:80:98:54:b6:
b0:93:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:02:42 2026 by rpki-client