Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: pR8LcLhg2VL7cn51Wa+cK0J3v9UIivM0eTHB97GBY3c=
Subject key identifier: E5:87:62:63:F0:C3:84:FD:99:6F:33:7C:54:5E:EB:B7:3E:48:4C:9A
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 019FA03B344295604C09FB71FAAB69BEC274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 09AF
Signing time: Sun 26 Jul 2026 21:01:02 +0000
Manifest this update: Sun 26 Jul 2026 21:01:02 +0000
Manifest next update: Mon 27 Jul 2026 21:01:02 +0000
Files and hashes: 1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: UFXArIedOnwBpfWwF56jKl9qYCAgn54zgJmgw5kYrK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:34:42:95:60:4c:09:fb:71:fa:ab:69:be:c2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Jul 26 21:01:02 2026 GMT
Not After : Jul 27 21:01:02 2026 GMT
Subject: CN=e5876263f0c384fd996f337c545eebb73e484c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:ff:ce:14:cf:10:9a:17:2b:af:c3:21:69:
5f:6b:85:81:d6:6b:da:20:0f:4d:6b:14:00:3a:37:
2e:8e:1b:7d:e0:59:9a:08:71:3f:cc:9e:24:d8:7c:
56:e4:25:ba:1c:66:53:40:64:72:95:75:82:e7:09:
23:86:12:2f:d9:1c:f3:2f:6e:86:87:93:62:df:06:
a5:35:90:ca:0b:e9:aa:3b:f0:9b:0a:4a:34:7e:42:
0b:14:15:6b:3e:7d:e2:43:e7:df:fd:51:05:37:ac:
c2:43:21:1c:f9:02:59:01:81:20:01:a9:27:c0:2f:
77:25:9e:b6:ef:ef:bd:15:05:af:d8:e1:f4:22:0f:
fc:3d:e2:25:ef:b5:ff:4f:b9:a0:0b:88:ee:bd:5b:
07:93:62:f0:cb:15:29:45:b2:69:5a:2e:d2:bf:0b:
5b:9f:d3:04:43:f4:2e:fc:e9:9f:7a:c4:59:ba:3e:
d8:de:f3:ef:e1:97:fe:99:6c:c2:48:8c:11:2d:cd:
bb:d4:f7:41:d6:88:0b:56:fd:6d:f5:c2:28:d0:03:
40:7d:8f:03:e1:45:19:19:79:4c:dd:a6:05:35:86:
ec:db:25:a2:e4:ff:a3:10:36:e9:b3:d1:5d:52:9f:
5f:f3:18:d3:d3:cc:50:41:08:0f:e5:2b:ed:02:84:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:87:62:63:F0:C3:84:FD:99:6F:33:7C:54:5E:EB:B7:3E:48:4C:9A
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c8:28:52:6b:50:c5:9a:47:dd:55:ee:c1:c0:81:12:2e:d2:
fb:da:04:00:ee:39:34:a6:e1:40:28:8c:ff:1a:5a:e4:42:81:
c9:b9:9b:a8:41:a9:82:45:0e:92:be:52:cb:b3:48:71:03:03:
8a:ac:7f:36:84:7f:68:98:af:62:b7:ae:66:7d:09:16:f0:c5:
fb:4d:4c:05:bb:3b:43:8c:16:57:b7:b6:d7:5a:67:0d:04:43:
51:f1:a1:01:2c:c0:29:0b:50:2b:10:81:76:e2:c9:ec:f5:ad:
92:4c:a5:8c:6f:38:0a:43:2f:d2:8e:06:ed:74:d7:f0:48:d9:
b0:af:6c:f7:95:15:33:ea:48:70:50:ee:58:0c:fb:bd:22:61:
8c:a5:e0:d2:fe:45:e2:35:48:00:31:ff:c0:6c:f3:13:3a:de:
65:90:2a:9f:21:fb:9a:e4:84:f9:83:85:a5:3e:65:24:d2:b7:
9b:98:75:72:67:79:1b:fb:25:91:6d:62:25:ca:e3:ca:78:5f:
91:b5:cd:c2:fd:39:bf:fd:16:43:03:62:d1:65:67:23:14:66:
7d:13:51:6c:8d:1c:93:94:7c:e0:07:d9:61:25:07:48:3d:28:
90:59:7f:a0:7d:43:d5:5a:79:1b:74:0b:b0:ec:5e:95:6a:4a:
2a:90:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:14 2026 by rpki-client