Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: kw/mQNv+f5/YVpqMRg8Zwm/m5909m4wBaW28sNoDug4=
Subject key identifier: 7A:A3:F6:C6:9F:BB:DC:B2:61:5F:BD:5D:C5:82:99:66:A4:CB:3A:9A
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 01A1795EC72890829B268106BC4980C38A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 0AA4
Signing time: Mon 26 Oct 2026 18:00:16 +0000
Manifest this update: Mon 26 Oct 2026 18:00:16 +0000
Manifest next update: Tue 27 Oct 2026 18:00:16 +0000
Files and hashes: 1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: H2hzV+g3eVdjBTgtL1uLN6eJELAs+Z3ripsRGYp6yCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5e:c7:28:90:82:9b:26:81:06:bc:49:80:c3:8a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Oct 26 18:00:16 2026 GMT
Not After : Oct 27 18:00:16 2026 GMT
Subject: CN=7aa3f6c69fbbdcb2615fbd5dc5829966a4cb3a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:75:1f:05:d5:ec:23:b2:a5:be:88:4a:df:
15:c4:10:bd:ae:f4:28:85:93:65:2a:0f:04:40:99:
fa:91:04:30:32:2a:2a:e4:16:8f:8b:54:a9:dc:df:
83:ff:47:29:f7:87:81:93:cd:f5:15:5e:d1:df:9d:
98:62:ef:24:5f:3a:fc:0e:70:0e:8f:53:03:a9:da:
6b:00:e2:84:b5:18:19:87:9a:87:3d:73:24:a8:2d:
ad:ae:83:e6:0b:3e:d4:0b:16:8d:43:c1:bc:17:4e:
af:74:30:ae:a3:40:73:ff:5e:37:1f:a4:9b:45:02:
7f:38:19:73:f5:09:2a:10:8f:e7:df:90:1a:c4:3b:
37:b4:46:7b:53:4c:1e:5b:68:fc:33:46:d6:aa:a4:
df:6d:8f:e7:70:6d:2f:36:2e:83:3d:65:03:1d:eb:
b1:1f:7e:af:ed:78:b4:90:f6:d9:89:38:69:38:5c:
62:0a:b2:1f:55:ec:1c:4f:15:2f:06:9b:10:cc:dd:
fa:c0:d6:0b:9a:44:75:65:8d:d1:88:64:10:3d:36:
03:d6:b0:cf:aa:40:17:aa:37:ae:c0:c3:ec:87:a1:
ad:7f:bc:f4:10:7f:92:6d:e2:3b:e7:78:4c:13:f4:
3b:00:9e:1b:48:90:01:c0:14:d2:ff:60:06:2e:bd:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:F6:C6:9F:BB:DC:B2:61:5F:BD:5D:C5:82:99:66:A4:CB:3A:9A
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3e:59:87:8b:65:9e:2d:7a:41:5f:77:30:f9:89:bb:9d:6f:
8f:9f:19:c4:46:cc:ac:e9:26:71:fc:26:d4:b1:09:9b:45:1c:
ab:47:46:1c:5f:93:12:08:9d:65:cf:16:da:d5:e4:ca:90:22:
ca:03:33:bf:12:9a:b4:fe:6b:75:3c:c2:64:3f:5f:5a:4f:b3:
7e:04:cf:ab:47:10:4f:d8:91:ba:e4:60:7c:13:f7:15:88:2a:
32:cc:d9:c0:02:91:2c:0f:56:5d:42:c5:fd:b9:2d:15:9a:ce:
4e:d9:7f:d8:ad:aa:f8:5d:74:3d:f6:e3:d9:13:7b:d8:ad:08:
fb:b3:20:56:90:cd:a3:da:42:af:9e:b7:b5:a9:4d:2e:24:3e:
86:5a:73:61:a3:45:08:da:27:26:18:24:3d:b9:95:36:b8:99:
e5:c0:32:10:c4:69:07:bd:84:43:40:ad:78:34:bd:37:3b:dd:
58:94:c5:7e:25:22:b3:31:27:e9:df:79:d0:55:2b:1b:dd:06:
db:c0:7d:24:2c:77:ed:20:72:52:4f:74:4e:35:2b:ed:e1:09:
28:82:5c:8a:d1:30:d0:fa:d5:73:f2:60:fb:91:44:25:49:f7:
21:be:b8:f9:a5:a8:03:71:9f:06:4f:6c:5e:7f:6a:ab:59:ca:
f6:9e:45:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5XscokIKbJoEGvEmAw4oZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiM2EwNWRiYjljNzdmYTE2ZWQxMDQ2OTc0N2E1YzZlNmVh
Yjg4ZGUwHhcNMjYxMDI2MTgwMDE2WhcNMjYxMDI3MTgwMDE2WjAzMTEwLwYDVQQD
Eyg3YWEzZjZjNjlmYmJkY2IyNjE1ZmJkNWRjNTgyOTk2NmE0Y2IzYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIl1HwXV7COypb6ISt8VxBC9rvQo
hZNlKg8EQJn6kQQwMioq5BaPi1Sp3N+D/0cp94eBk831FV7R352YYu8kXzr8DnAO
j1MDqdprAOKEtRgZh5qHPXMkqC2troPmCz7UCxaNQ8G8F06vdDCuo0Bz/143H6Sb
RQJ/OBlz9QkqEI/n35AaxDs3tEZ7U0weW2j8M0bWqqTfbY/ncG0vNi6DPWUDHeux
H36v7Xi0kPbZiThpOFxiCrIfVewcTxUvBpsQzN36wNYLmkR1ZY3RiGQQPTYD1rDP
qkAXqjeuwMPsh6Gtf7z0EH+SbeI753hME/Q7AJ4bSJABwBTS/2AGLr21KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqj9safu9yyYV+9XcWCmWakyzqaMB8GA1UdIwQY
MBaAFDs6Bdu5x3+hbtEEaXR6XG5uq4jeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgt
YTAxYzM3Yjg4NzI4LzEvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgtYTAxYzM3Yjg4NzI4
LzEvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET5Zh4tl
ni16QV93MPmJu51vj58ZxEbMrOkmcfwm1LEJm0Ucq0dGHF+TEgidZc8W2tXkypAi
ygMzvxKatP5rdTzCZD9fWk+zfgTPq0cQT9iRuuRgfBP3FYgqMszZwAKRLA9WXULF
/bktFZrOTtl/2K2q+F10Pfbj2RN72K0I+7MgVpDNo9pCr563talNLiQ+hlpzYaNF
CNonJhgkPbmVNriZ5cAyEMRpB72EQ0CteDS9NzvdWJTFfiUiszEn6d950FUrG90G
28B9JCx37SByUk90TjUr7eEJKIJcitEw0PrVc/Jg+5FEJUn3Ib64+aWoA3GfBk9s
Xn9qq1nK9p5FOg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:55:35 2026 by rpki-client