Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: KNWcPhoBymD8j0+jQKdzR914p0vcKmplzZnRA6E1yDs=
Subject key identifier: F5:9E:DB:A0:83:AA:70:DA:4E:10:93:D9:F3:16:B2:C2:51:95:BE:E6
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 01A137B646AF75F7F0391B86BA3048607925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 03AA
Signing time: Wed 14 Oct 2026 00:00:54 +0000
Manifest this update: Wed 14 Oct 2026 00:00:54 +0000
Manifest next update: Thu 15 Oct 2026 00:00:54 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: xEPF34pcJB66PMYA6ndHINJ7VtTQTS9hFFhunQts7ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:b6:46:af:75:f7:f0:39:1b:86:ba:30:48:60:79:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Oct 14 00:00:54 2026 GMT
Not After : Oct 15 00:00:54 2026 GMT
Subject: CN=f59edba083aa70da4e1093d9f316b2c25195bee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:91:1d:5e:86:68:09:8b:87:0b:6d:f7:87:
e0:dc:05:7e:89:75:be:5b:ae:39:92:65:bc:5b:ee:
18:a0:84:a6:cd:a2:44:4a:7c:50:13:2c:21:ae:1e:
40:a3:ff:fd:cd:8a:52:d8:42:60:ed:72:79:2a:ab:
1a:61:17:3b:3a:ef:f1:71:56:f5:df:87:b4:79:3f:
dc:cd:9d:26:dc:3f:c9:1e:b5:5b:80:2c:0a:96:e3:
83:e7:0e:5a:90:ed:71:3b:fd:0f:00:e0:ad:48:0f:
40:62:1f:2a:a9:9c:15:14:7c:cd:9a:e1:cb:1f:71:
e1:18:6d:a6:84:b1:85:59:09:e7:46:d4:47:64:3b:
e4:d2:a5:7d:6e:19:79:e2:0a:72:a1:ad:ed:1a:4c:
85:4d:90:0f:96:9a:55:84:2c:9d:be:0f:9c:93:0e:
6b:a9:11:41:7d:bc:2c:d2:fc:4a:b9:48:09:43:65:
00:5f:10:b6:a3:df:11:ec:0e:b6:55:ad:d3:74:64:
48:ae:81:25:ee:32:ac:56:84:9d:c9:38:0a:e8:54:
47:07:83:b3:f7:70:eb:b0:96:0e:8a:64:50:60:d9:
ae:d0:f9:b1:e2:9a:55:54:6a:c3:2e:96:03:ed:fe:
36:99:85:d0:0f:15:dc:76:e6:6b:37:12:cc:7b:6c:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9E:DB:A0:83:AA:70:DA:4E:10:93:D9:F3:16:B2:C2:51:95:BE:E6
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:78:34:4c:46:d7:ee:bc:6a:8c:47:ca:e0:9c:6a:28:09:64:
98:7f:90:96:06:b0:26:fa:d1:5d:d6:60:34:93:e7:0f:b9:a5:
3c:b9:5f:8b:f9:dc:5a:94:f6:81:da:72:47:65:90:ef:e2:b0:
62:91:94:24:0c:d6:3e:95:a2:34:2d:84:74:a4:e6:3c:65:e5:
3c:97:e4:6b:dc:b7:07:6d:5f:09:fe:2e:81:28:ab:67:05:87:
d9:0e:0b:a6:20:68:30:c2:cb:4e:2a:7a:15:bd:62:e5:1b:09:
1a:6c:25:4e:32:2e:f4:e7:d7:00:b6:21:8a:46:73:ba:77:3f:
15:d2:7b:bc:47:81:75:1a:fb:76:18:c3:b3:64:35:e8:a9:44:
2b:e7:88:3a:e7:e4:15:11:ce:50:52:d2:e4:eb:4d:ab:78:2e:
f3:ad:14:29:ad:22:77:c3:c5:68:c3:57:6f:7b:13:c2:fd:16:
ea:aa:06:20:71:c3:12:75:32:d6:b6:e5:67:75:ed:33:f5:82:
51:5c:05:be:dd:12:af:e8:26:8a:cd:90:fa:f3:e5:70:75:78:
d5:00:5d:05:c5:7a:22:06:d1:29:20:53:3b:f5:30:fe:0d:b1:
34:e2:aa:9a:5b:74:5f:a6:d2:04:c0:50:91:23:55:89:09:fb:
27:8f:c1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:03:42 2026 by rpki-client