Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: ETyKWrVs7scJoPkXMClITTCofltFFcqV/R0vKNUPSek=
Subject key identifier: A5:09:E8:FA:20:64:51:51:99:D6:BB:C7:31:C8:08:BC:38:DC:07:0F
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 019D3A1CFAB0814BFA99AC9911A19560C583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 0199
Signing time: Sun 29 Mar 2026 15:01:10 +0000
Manifest this update: Sun 29 Mar 2026 15:01:10 +0000
Manifest next update: Mon 30 Mar 2026 15:01:10 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: zAsjbd840CzQVPZauauVY/HvX7OO+LnyXOfjOviuK/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:fa:b0:81:4b:fa:99:ac:99:11:a1:95:60:c5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Mar 29 15:01:10 2026 GMT
Not After : Mar 30 15:01:10 2026 GMT
Subject: CN=a509e8fa2064515199d6bbc731c808bc38dc070f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:b8:0f:90:97:e5:e8:50:b1:0a:cc:d1:ba:
af:0e:ed:f6:7e:53:7c:99:8e:31:f0:94:a3:1f:4a:
73:b4:04:5e:8a:95:f3:d9:ab:80:6c:ad:cf:b4:a2:
a6:46:a3:1a:cf:f2:35:96:0f:cd:66:d0:a0:55:3a:
1b:dc:ab:03:b5:b8:b2:fa:99:40:1d:eb:66:c2:04:
60:06:f3:5e:ad:00:cd:51:fa:86:8a:62:b9:b1:7f:
64:a2:da:21:07:63:14:36:37:31:94:e7:6d:57:03:
4d:19:65:e2:30:73:17:6f:e3:7f:8f:1a:91:3d:d4:
ad:d8:6f:28:4a:98:87:c6:9c:95:88:c5:2d:d4:06:
4e:ef:92:71:2b:15:99:8b:51:f3:fe:7a:d0:5f:60:
d1:2b:ee:62:e5:56:48:e7:74:9b:7e:84:a7:ff:48:
aa:6b:25:bc:43:7d:c1:d4:b7:fd:80:5a:38:3c:a5:
d8:cc:80:13:ab:2d:96:2f:f8:e9:3f:6f:34:12:ca:
84:ee:37:50:88:91:d8:1c:17:95:44:5c:ca:8d:27:
15:68:e0:e6:a4:6d:5c:54:d2:45:ba:41:5c:fa:26:
9e:6c:e5:fb:a8:2e:84:52:6d:2e:63:78:4a:55:91:
93:e4:a4:af:7f:fc:6f:0b:10:c3:88:b7:72:69:07:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:E8:FA:20:64:51:51:99:D6:BB:C7:31:C8:08:BC:38:DC:07:0F
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ae:39:0d:93:1c:13:87:3a:a0:d0:73:c7:70:d5:3c:5d:22:
6e:9b:4a:7a:a9:ab:31:f9:fe:3f:99:11:32:25:0d:91:15:e5:
aa:12:57:d5:40:ad:2e:94:33:b1:22:68:fc:f6:25:8c:cc:11:
e8:03:b8:38:2a:62:ea:69:5b:89:02:2a:75:56:ad:d4:95:31:
e0:3a:17:c6:f3:e3:f3:8f:87:be:d6:da:a8:19:17:9a:e6:6a:
ff:96:f4:80:63:1e:e2:9b:96:3a:c9:67:24:5a:4a:2f:0d:07:
eb:07:58:cc:af:51:75:a3:c1:00:57:fa:8d:fa:f0:40:ab:19:
47:e6:5f:54:3f:b1:46:36:e6:67:de:f8:4c:a4:97:34:7d:a6:
31:2b:81:67:d0:2f:6b:01:ff:f7:d6:2d:8a:6f:9b:a0:a9:98:
76:25:8a:d6:dd:e4:f4:f4:35:3c:0b:c8:e4:09:27:e6:09:2e:
c8:42:af:1f:d8:65:95:1e:38:44:a5:55:2d:b3:48:c2:ba:8e:
0f:03:98:0c:a3:eb:73:5a:6e:d7:70:db:af:e1:d5:b5:44:b5:
36:d1:ee:3b:77:a8:c2:d6:48:cc:11:b5:7f:0e:ed:15:dc:33:
9b:29:f7:43:aa:b7:69:01:5e:3c:80:f7:5f:84:0c:d0:50:ba:
56:6c:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:57 2026 by rpki-client