Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: maP8RHep4+kaYexeG0ui9z1pyUkZNBxN5BrYVNd8LFs=
Subject key identifier: 6F:48:6A:14:59:45:E4:72:63:D7:23:A4:9D:E5:91:45:FC:BC:94:B5
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 019FA2299B07639672CF12E87A9DA145552B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 09B0
Signing time: Mon 27 Jul 2026 06:01:03 +0000
Manifest this update: Mon 27 Jul 2026 06:01:03 +0000
Manifest next update: Tue 28 Jul 2026 06:01:03 +0000
Files and hashes: 1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: kaJwsLRpV/Ecz4uGyEPDIFAO9R2D27jevW4EvbZaJdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:9b:07:63:96:72:cf:12:e8:7a:9d:a1:45:55:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Jul 27 06:01:03 2026 GMT
Not After : Jul 28 06:01:03 2026 GMT
Subject: CN=6f486a145945e47263d723a49de59145fcbc94b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:f1:c3:98:8a:05:c2:e5:1b:01:c6:f5:b5:
34:2b:9e:68:2d:57:e0:1f:81:8c:6c:c7:39:f7:37:
4a:d3:70:4f:08:34:18:3d:fb:19:88:d7:4a:04:3e:
ac:1a:e7:4f:a3:98:cd:89:11:a3:64:de:b6:ea:ec:
db:cd:d2:bc:46:1e:e1:e9:5f:ae:b1:fa:85:53:62:
30:ab:c0:93:34:f4:e4:d4:fa:f0:48:21:57:57:82:
47:4c:8c:ef:0a:a2:06:a8:db:20:1e:22:4e:5f:25:
8c:91:e0:3e:6b:e0:35:63:bd:93:27:a9:4c:ca:99:
97:7a:47:c3:67:29:36:81:2f:c4:d6:0c:c7:f8:ce:
d1:1c:5e:b9:00:2c:7f:9e:23:b7:5d:26:6d:61:8a:
d3:7d:37:16:a9:a3:5d:58:94:41:e8:2e:d6:08:34:
ce:f7:9d:73:70:93:b3:65:70:0c:5c:47:57:3f:6f:
9f:7f:e4:65:07:49:53:2e:10:c5:63:b5:ab:bc:d6:
ab:26:51:c1:cb:7c:82:da:09:e1:42:9b:49:4c:f8:
a7:f8:6c:d7:59:86:57:d1:be:3a:38:fa:28:b1:75:
4b:68:38:00:eb:8e:f8:ae:28:e6:a0:47:54:ed:d1:
3c:08:ae:c0:6e:6c:17:06:36:17:81:2f:5b:a6:67:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:6A:14:59:45:E4:72:63:D7:23:A4:9D:E5:91:45:FC:BC:94:B5
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f6:49:d2:e1:36:1f:ce:24:c0:22:20:ff:db:35:a4:9d:92:
65:35:f5:2b:ba:af:9a:72:38:fb:43:3e:2a:5a:20:76:f1:d4:
7c:e8:31:0b:55:08:d6:64:6d:20:86:77:d4:fd:31:22:55:71:
f0:a7:e3:15:48:89:f4:4b:7c:fc:14:bf:ef:4e:4f:4c:41:30:
85:56:8a:47:76:9e:76:c5:92:c8:43:82:1e:3d:19:dd:ac:cc:
65:98:af:8e:50:eb:27:bb:ce:95:49:e1:5d:2a:8a:ee:ea:63:
bf:89:67:9a:5e:eb:f5:59:a6:8e:54:0b:d9:fd:72:cd:eb:1e:
3e:7c:e0:5f:9d:0d:1a:9e:b2:7e:01:2f:7f:cd:0c:b8:d5:b8:
53:5e:83:c7:a0:dd:6d:64:0b:55:3e:6e:c9:32:f2:68:72:c5:
ca:74:6b:7b:0e:d8:bc:d1:55:75:df:35:51:7b:c6:83:12:30:
87:cd:af:a9:c7:8d:e8:47:f2:de:94:96:cb:bf:73:3c:47:7a:
ee:81:34:63:63:23:26:f0:73:ff:61:09:72:5b:44:66:9e:b7:
25:e9:39:7e:e6:ca:54:ab:a4:d1:ea:13:cf:1f:b9:fc:40:ab:
34:67:fe:28:20:b3:e6:20:e1:29:99:fc:a3:6a:42:42:19:be:
96:c4:aa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:09 2026 by rpki-client