Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: cyTQq0DYWg0d4RRYqMo9/gY2NkZKTzmXsaAAaesXv7Y=
Subject key identifier: 5B:70:5E:BA:D0:0E:14:3F:E2:C2:1E:86:46:48:65:8C:B0:CD:11:88
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 01A01C416B054610CAB182EA789B1E2FDE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 1A0F
Signing time: Wed 19 Aug 2026 23:00:44 +0000
Manifest this update: Wed 19 Aug 2026 23:00:44 +0000
Manifest next update: Thu 20 Aug 2026 23:00:44 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: ZzMHMKO3X6GcMnH1pUgK5zhFpBuYZZ4nOFRrYhY4nJM=)
2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1c:41:6b:05:46:10:ca:b1:82:ea:78:9b:1e:2f:de:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Aug 19 23:00:44 2026 GMT
Not After : Aug 20 23:00:44 2026 GMT
Subject: CN=5b705ebad00e143fe2c21e864648658cb0cd1188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:c9:41:2c:ac:ad:44:28:00:cd:e0:f4:74:
32:71:88:c6:1d:6a:52:4a:83:46:d2:8a:ba:80:84:
cf:fb:f8:34:7d:75:ef:95:e4:97:bb:fd:c4:8a:7c:
c0:a6:e7:7b:19:c3:39:20:b8:b8:8b:c0:db:cb:65:
44:78:29:c5:38:61:d1:e7:3e:34:c1:a1:80:44:04:
53:81:4b:65:f6:5b:22:69:9e:5f:73:f1:cf:e6:e7:
b0:e9:e9:eb:8e:19:25:07:ae:d4:c7:93:73:5a:6d:
1f:86:d0:a6:f7:d9:24:ad:ca:8c:de:45:49:3e:e7:
0c:a6:fd:5a:20:cf:8c:aa:5d:c5:1f:90:ae:cd:e5:
c0:1f:f4:4e:21:0f:fd:19:fc:f7:b6:c9:7e:7f:d4:
df:14:6e:ea:38:a4:0f:54:dd:a4:e9:2e:aa:f0:7d:
af:9a:43:b2:97:4e:d5:94:6c:ef:c4:ec:01:36:14:
ab:d2:76:46:ea:c1:d2:41:46:8e:19:a1:f1:ce:fb:
14:cb:1d:ef:04:0b:ca:6d:a1:fd:d0:a5:93:e9:11:
fd:7e:63:e1:46:9f:88:7d:68:ed:f9:c7:83:8b:c9:
f8:55:fb:ca:c7:f4:23:d7:4b:90:4d:96:ef:0c:80:
a0:3e:c6:d5:49:87:59:6d:95:89:29:7a:4f:b4:ea:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:5E:BA:D0:0E:14:3F:E2:C2:1E:86:46:48:65:8C:B0:CD:11:88
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ae:46:67:c9:b8:7d:87:90:b4:1c:10:7c:f2:37:66:b4:15:
6e:ae:54:d7:37:93:c8:c2:18:f6:66:15:9f:41:53:6b:fd:0e:
19:3a:8d:75:81:eb:72:60:56:a3:38:92:eb:bc:61:1f:9c:87:
f6:31:77:03:4f:6e:41:3a:1a:e2:a9:55:e3:c0:ef:49:a5:84:
09:a8:ca:9e:65:c6:bd:9c:72:53:f9:71:51:e3:ff:cd:6f:8c:
44:b9:d6:04:40:ba:22:72:b1:d9:51:59:2a:84:80:f5:04:44:
f7:7d:9f:e5:4f:fc:4f:25:45:29:7d:c9:9b:9e:db:e7:7a:1a:
b0:43:77:ba:52:3a:dc:d2:8f:0d:52:ac:91:28:6d:00:6d:ab:
f3:b1:91:2a:dc:7b:19:e2:8d:70:a4:13:e9:e6:71:7b:e9:40:
2c:af:71:8c:dd:e5:ce:3f:c7:62:e9:20:30:cd:a5:84:2f:34:
54:e3:21:fd:ef:15:4c:98:ae:8e:5f:bc:1b:3e:05:16:fa:7e:
ef:6b:39:60:50:fe:e9:bc:f6:9c:b2:03:94:64:85:f0:c7:03:
73:71:49:f3:cc:89:40:c3:d3:73:e6:6d:d6:42:55:43:5b:10:
61:91:86:84:c3:50:84:6b:7f:96:37:35:00:90:2e:d4:ae:9b:
6e:a6:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 05:56:09 2026 by rpki-client