Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: CTKvy29KAAcRmgb4rHLCmNOGqFYEe9FhEGGo1iopkf0=
Subject key identifier: 52:C8:62:61:56:68:AB:D4:EA:D4:E4:A6:D4:07:78:17:72:6A:5A:D1
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 019F288009B432809A2FCDC48CABA1FE6E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 0299
Signing time: Fri 03 Jul 2026 15:01:47 +0000
Manifest this update: Fri 03 Jul 2026 15:01:47 +0000
Manifest next update: Sat 04 Jul 2026 15:01:47 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: PC+ZD6Ku8BOnDLZu+PWVcCNw7/3ysQgy2eyKPAZ1B+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 15:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:80:09:b4:32:80:9a:2f:cd:c4:8c:ab:a1:fe:6e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Jul 3 15:01:47 2026 GMT
Not After : Jul 4 15:01:47 2026 GMT
Subject: CN=52c862615668abd4ead4e4a6d4077817726a5ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:69:15:5b:dc:9e:66:61:ea:b0:ce:58:81:
c2:b4:e6:b2:1a:2a:f2:9e:b5:1a:e5:64:91:a7:ec:
4e:55:cd:bb:59:f4:a5:16:57:4a:e4:1e:4f:70:c7:
2f:7a:36:da:f8:ac:81:1a:1a:25:50:09:32:b9:94:
81:a3:59:ac:b1:e9:a1:4a:1d:a7:d4:a2:f9:7e:1c:
00:e1:80:98:a4:8a:0c:eb:f8:2e:bb:a8:5b:92:af:
0b:16:de:53:c9:ab:3c:13:89:be:f3:21:49:ca:b4:
c3:66:8d:31:3c:c7:5d:60:dc:a4:4d:d2:f3:90:f5:
7c:05:20:27:65:bf:d5:2a:a7:27:a9:d8:2f:07:d0:
71:ee:08:0d:1c:13:1b:82:26:2b:b4:4a:ad:08:d7:
74:38:c5:0a:30:6e:09:56:6e:72:7e:c4:55:ea:b0:
b1:5b:a0:19:43:d7:b5:cb:0b:d8:7c:f0:fe:fd:96:
77:c8:d0:8f:25:9b:8a:3e:24:3f:62:32:24:e8:11:
c8:53:cf:72:73:f6:73:1c:01:93:a6:33:27:6a:a1:
aa:ee:79:9b:fe:03:17:96:7c:b2:bd:f7:89:24:84:
23:8e:92:76:e5:41:2b:31:f5:bc:e8:e6:72:bf:10:
91:6c:1f:08:be:9b:29:68:fe:d2:89:8f:c5:71:4d:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C8:62:61:56:68:AB:D4:EA:D4:E4:A6:D4:07:78:17:72:6A:5A:D1
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:29:8c:48:a5:dd:90:4a:0b:41:64:0a:e1:0d:11:9d:6f:e8:
8b:82:a5:c2:c4:1d:04:15:4b:c0:16:82:c1:ec:a6:44:de:a8:
e6:30:05:0e:64:3b:ea:a2:f8:06:fe:03:a2:2e:d5:5a:26:7a:
e0:cd:44:31:65:85:5e:16:ba:08:d0:47:d3:03:11:3c:2e:63:
e4:79:3d:9b:e8:d3:10:e8:b0:9a:bc:61:ee:da:4c:d3:b8:0c:
3a:05:d8:3e:ed:28:64:e2:54:05:2d:58:b1:eb:e6:e6:71:09:
7b:cd:03:49:ed:9b:b0:a8:14:2a:f7:4c:a7:4b:e9:f5:cb:dd:
64:79:04:73:05:92:20:83:90:5f:c7:a4:22:ed:fd:01:63:09:
6a:ec:d4:55:0d:81:43:5f:f5:76:04:d3:df:b8:7a:71:f8:64:
21:10:c8:9b:5e:50:99:dc:dd:07:57:ec:34:98:cb:60:39:e5:
c8:4e:f6:59:7b:07:0b:69:e9:f3:51:d1:c5:ed:73:c1:1c:71:
5f:d3:1a:82:c9:05:33:20:e8:54:67:c3:af:d8:86:86:b6:cb:
6d:55:c5:11:fb:91:b7:48:10:ed:cb:2f:bc:63:34:87:f6:ca:
87:2d:f8:35:3b:ac:49:b8:dc:07:ec:b3:1d:9c:a6:1a:f8:d7:
74:20:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:46:40 2026 by rpki-client