Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: XTkD/u9YvZLurEzmZS7LsvWfEBE6ah4a3+HMoKiWTWE=
Subject key identifier: 41:5F:A2:9B:9B:29:99:DB:A1:CC:58:17:67:63:0E:A0:05:5D:86:93
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 01A13ECB95903CC9A51C760816EEE3C5897F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 09:01:31 +0000
Manifest this update: Thu 15 Oct 2026 09:01:31 +0000
Manifest next update: Fri 16 Oct 2026 09:01:31 +0000
Files and hashes: 1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: liC7Cq4fSYC70WS9fGL7ida5ZkXw3gHH9JKW9IuyFog=)
2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:95:90:3c:c9:a5:1c:76:08:16:ee:e3:c5:89:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Oct 15 09:01:31 2026 GMT
Not After : Oct 16 09:01:31 2026 GMT
Subject: CN=415fa29b9b2999dba1cc581767630ea0055d8693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:b8:82:36:a5:67:26:94:b1:87:9b:54:e4:
2a:46:a7:6b:da:93:91:87:1f:77:43:a8:78:64:97:
b0:c2:3d:1d:e3:f0:17:cd:ab:4a:11:c4:48:24:64:
91:42:71:14:cb:81:f4:ee:f1:51:2d:33:1d:2b:5d:
78:e6:80:f4:31:fd:05:78:6e:a4:be:c9:b6:31:dc:
08:2d:3f:72:de:57:33:18:bd:ab:ab:d3:b3:e1:4d:
26:77:e2:38:ac:30:3f:12:ae:e5:9f:91:7f:ed:d6:
fa:84:e6:a1:d7:90:84:b6:28:59:1a:16:92:f2:cf:
8f:cd:0d:f5:f8:5a:4d:46:b2:9f:0b:84:53:8a:fc:
02:44:ca:df:af:e8:3b:7a:3b:2a:59:07:58:4c:92:
b6:5b:37:c8:f7:74:32:0b:97:34:05:c7:a5:12:44:
b1:bb:93:33:3d:7b:1c:f8:e6:0f:d2:f6:37:6c:9d:
ec:ce:ed:55:57:a6:6d:f0:46:c9:18:34:d8:57:d9:
e5:8b:f0:14:bd:67:23:b8:e7:6e:5a:33:1b:0b:f2:
b2:c6:27:89:08:ef:64:7b:e8:e7:00:11:0c:8f:d5:
13:bd:96:a8:84:58:fa:29:af:b3:3e:e6:2b:20:1f:
a4:de:36:2b:c2:29:27:16:6e:15:00:8a:ff:a3:5f:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:A2:9B:9B:29:99:DB:A1:CC:58:17:67:63:0E:A0:05:5D:86:93
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:85:67:bf:83:7b:1d:85:d6:2d:76:21:5a:13:02:94:5c:70:
e9:36:a4:84:55:cf:aa:32:c2:7c:5d:8e:41:4f:63:27:c2:11:
89:02:4f:5b:e4:06:a5:f3:7c:d2:0a:9e:98:89:e6:82:d2:27:
b0:71:75:fb:22:eb:87:17:64:a3:8b:e0:30:e1:87:a0:44:e9:
c5:f5:c3:f3:9e:72:ba:69:79:92:a8:8d:68:a4:f5:6c:90:70:
8f:7d:ae:c3:09:96:17:be:5f:67:a6:2b:28:d5:7f:2d:2d:f2:
98:be:ff:ec:a2:97:b4:dc:bc:bf:cf:41:8f:01:5b:cb:eb:e2:
23:4a:cb:b6:75:08:3a:9d:e6:3d:a8:e7:3c:66:72:99:0b:e7:
e4:37:8e:f4:a2:54:b3:a0:73:e8:04:55:31:e0:e9:71:5e:d3:
12:c9:8e:5a:eb:39:f7:de:f3:c7:37:8b:15:30:ae:2f:1b:85:
3b:92:c1:8c:8d:b9:fa:e1:8a:a3:26:42:e0:62:c3:56:b2:c1:
52:6b:d9:ad:1b:0e:3b:93:26:01:b8:52:6f:22:6d:a9:8f:d8:
c2:eb:ab:86:d7:63:55:37:ca:ef:28:09:36:e3:29:0c:b9:46:
e6:f6:83:8e:82:7f:b1:3c:e5:f9:84:1f:ba:43:2d:72:93:1e:
45:35:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:30 2026 by rpki-client