Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: 7pdMkO3Shsj2IHVKldnJmetDm/Emxiih5SBlEB4Alm0=
Subject key identifier: 28:6A:FB:A9:C6:5B:4D:23:7E:1E:00:CA:4C:DF:6E:B3:70:C6:08:8B
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 019F148A5ACA4C31B06E9048547F4D77B87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 18:00:39 +0000
Manifest this update: Mon 29 Jun 2026 18:00:39 +0000
Manifest next update: Tue 30 Jun 2026 18:00:39 +0000
Files and hashes: 1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: FKI5x1yHRfPg80NOU3eI87RD4Zzh39ix93uqikqr2/c=)
2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:8a:5a:ca:4c:31:b0:6e:90:48:54:7f:4d:77:b8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Jun 29 18:00:39 2026 GMT
Not After : Jun 30 18:00:39 2026 GMT
Subject: CN=286afba9c65b4d237e1e00ca4cdf6eb370c6088b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:d4:fe:2f:bb:f5:b0:06:52:f6:10:d4:07:
88:c3:ca:1c:40:93:d7:f9:88:7d:6f:25:a0:1a:af:
b8:bd:27:5c:e5:aa:9b:48:23:01:a4:43:82:83:2d:
82:cc:68:85:40:ef:33:d2:e0:75:1c:13:06:f6:9b:
73:70:14:b5:a7:1e:65:8d:78:f4:9d:d2:54:fe:60:
47:d0:4f:a6:53:ff:5f:cc:7b:40:a0:0c:e4:d5:b4:
13:4a:7d:8b:67:f0:7e:3d:73:99:cf:3f:a0:53:76:
ca:6b:ed:9c:46:09:eb:e2:50:27:3e:5d:a6:1c:ea:
0a:30:c8:e7:0d:f5:ae:0f:e1:6a:83:91:c0:35:d3:
c3:ac:64:22:a6:b0:fe:53:d1:d3:b8:b8:a0:80:28:
e1:8c:72:20:ca:ed:e4:72:17:35:e1:65:2f:3b:bd:
41:7a:c0:94:b2:03:81:f5:84:3d:3d:43:2e:d9:45:
f3:de:1a:c5:83:6b:6d:7d:41:5d:0c:01:28:1c:fb:
63:49:0e:c0:43:7e:c4:64:b1:a1:1d:a8:23:c2:47:
38:5d:f9:94:89:e1:94:9a:4d:4b:33:79:46:d9:4a:
10:83:16:b2:34:69:76:6d:f4:ec:64:08:56:92:6c:
b1:2a:ad:35:ea:5d:a1:6b:79:06:b7:ac:3e:fe:20:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:FB:A9:C6:5B:4D:23:7E:1E:00:CA:4C:DF:6E:B3:70:C6:08:8B
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:bd:55:38:44:a4:37:cb:d7:a4:76:e1:89:bf:77:f1:16:
6f:cb:99:47:53:fc:8f:1e:bb:44:ed:a2:95:44:f9:12:97:30:
cd:85:a8:35:1b:86:5f:ff:6f:69:1d:39:27:64:77:c3:ba:64:
b5:a5:c1:2f:d9:4e:2d:71:35:e8:5e:ac:08:9e:ae:0f:d9:11:
e0:14:6d:02:8c:04:46:cb:dc:95:ba:89:16:ad:75:a1:8e:7e:
a1:3c:8d:4c:b7:eb:80:67:42:89:80:ca:5c:89:a1:f6:e5:43:
c8:09:c9:ca:31:64:62:04:70:3d:05:69:69:a9:aa:27:63:63:
f1:9d:a5:19:0e:8d:48:cc:ca:8e:78:07:05:fe:ea:dd:a6:5b:
4f:58:04:ba:84:ac:cd:d6:7a:57:a9:fb:ce:4e:46:d4:9c:7e:
50:b7:5c:94:1a:2c:5d:f3:17:c7:49:3d:2e:c0:d1:d5:95:70:
55:91:b8:ec:f1:8f:83:f8:63:17:9b:4c:f6:3c:68:7c:8f:65:
7c:3a:9e:1f:cf:c3:ea:12:17:18:e5:b7:df:39:14:12:9b:75:
a0:7f:a0:2a:e3:c3:8e:4b:8a:f1:bc:d7:39:68:a2:21:20:18:
94:39:cb:49:7e:0d:a6:cf:68:3d:9c:9f:05:7a:43:1f:ba:4a:
2a:9d:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 02:18:56 2026 by rpki-client