Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: df//ULi59psCQ9CFe7s515GiqOeQIBp9Z3pz2IyWJcI=
Subject key identifier: 30:CD:99:50:C0:44:9F:95:E6:D4:58:91:E5:24:88:B1:BF:9F:33:9D
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 01A08BD5B4995C0350C2C60C7DE38A2DA5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 0A29
Signing time: Thu 10 Sep 2026 15:00:33 +0000
Manifest this update: Thu 10 Sep 2026 15:00:33 +0000
Manifest next update: Fri 11 Sep 2026 15:00:33 +0000
Files and hashes: 1: 8StX0WxvVxL5fDtFqnpRuPragb8.roa (hash: KTc11CLRkDoDh2bPnpdqQKRTLCJiEbLK9vVpkNsL14o=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: pT9lAMWhbT50MXumKLpEj3JlNDm7DVDyNwWaDURXHPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:b4:99:5c:03:50:c2:c6:0c:7d:e3:8a:2d:a5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Sep 10 15:00:33 2026 GMT
Not After : Sep 11 15:00:33 2026 GMT
Subject: CN=30cd9950c0449f95e6d45891e52488b1bf9f339d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:82:b1:0f:18:c4:bc:67:d9:ad:42:81:a6:
1b:c7:99:e4:ae:47:72:74:de:1e:38:b5:30:c3:86:
37:22:f2:5e:47:0a:35:33:02:59:ce:b6:a3:9b:23:
92:37:4d:1f:fe:4b:af:4f:8d:17:25:5b:56:ad:4a:
6d:c2:51:ae:8a:50:68:ae:f7:29:5e:03:87:8e:32:
b9:2e:a3:81:bd:fc:b5:2d:7e:60:11:f1:99:2f:5e:
5c:5f:10:73:44:ac:56:db:79:49:14:5a:80:a2:9f:
32:bb:9c:c4:ed:3c:ab:8e:c0:65:57:2c:b5:22:12:
8b:22:54:7a:b6:fb:7e:e1:52:cf:3e:c9:9d:78:97:
a5:b3:75:fd:72:8b:07:98:3b:e7:cf:48:fd:5b:26:
c1:6a:57:c3:14:25:18:a4:01:16:f6:f3:a6:a9:2e:
59:41:3a:d1:d2:37:31:37:8b:5e:3d:b5:98:34:07:
43:a9:b9:4b:5a:82:2c:2f:de:92:a0:42:e2:39:66:
12:8e:bd:cd:cf:71:7f:d8:a9:ea:82:dc:b6:70:9c:
6b:d9:e9:4a:79:ae:8c:b0:22:1e:04:66:19:9f:ba:
e8:86:1a:77:90:bd:52:c6:9e:a7:3e:82:dd:82:33:
94:83:01:fd:82:38:78:9f:a7:05:40:da:74:c6:d7:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CD:99:50:C0:44:9F:95:E6:D4:58:91:E5:24:88:B1:BF:9F:33:9D
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e1:a5:bc:c2:df:a4:7c:34:1d:e1:05:a4:d8:76:5b:6c:48:
ec:86:f0:3b:49:cc:94:b7:c9:94:3f:05:f5:a8:61:56:71:f7:
f1:10:74:e1:6f:33:f8:12:cb:cd:f7:47:12:15:3d:a1:41:2c:
18:40:5f:3e:88:9c:78:7d:73:d8:6b:7b:f2:e6:a7:73:d8:20:
1d:c7:4e:ef:44:63:17:72:5c:82:0d:20:de:81:84:bb:48:19:
e9:3b:0a:9e:3f:82:ee:1f:25:f5:cc:23:3b:80:d2:17:ad:b0:
8f:f4:ed:c1:f3:ee:52:3f:2a:3d:71:ea:be:50:3a:35:7d:5f:
a2:b8:c1:0f:35:23:d9:89:6c:98:a4:c8:89:34:2c:56:36:37:
a7:fb:74:94:19:89:d5:2d:76:91:ea:7c:7a:d5:b1:42:2c:b4:
54:00:f6:c2:5b:4f:fd:ba:76:23:da:a8:04:be:3b:81:0a:d4:
23:db:71:81:01:5e:b9:b8:9f:cf:d0:80:8d:75:40:41:bf:e0:
c8:24:d8:5d:15:e1:68:ed:e1:3b:7c:f3:dc:33:12:9d:a1:f6:
2f:d3:d3:2d:c3:1e:0b:38:26:1b:70:68:01:c9:e4:c7:41:43:
95:18:36:f7:24:f4:6d:3f:0e:96:35:a4:4f:9f:48:c2:10:82:
8f:42:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:13 2026 by rpki-client