Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json)
Hash identifier: ugAyP5aGYKA3G5IKlsFbdbzaxiWGW8ncprvSvMFTIGI=
Subject key identifier: 3E:FF:D0:27:AF:69:21:89:43:D3:78:6C:EF:28:C7:74:99:41:D4:E3
Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb
Certificate serial: 01A02769DBF8697B1E406E0ADC91D9FE6ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
Manifest number: 031D
Signing time: Sat 22 Aug 2026 03:00:44 +0000
Manifest this update: Sat 22 Aug 2026 03:00:44 +0000
Manifest next update: Sun 23 Aug 2026 03:00:44 +0000
Files and hashes: 1: LnYH5U1q89AlKFf8pYePsqhkNDM.roa (hash: bak5X79f+u1GMchJE1calrJjUWcVFh7MB2hqwVZ+QjA=)
2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: /BtrJG1KIYItqXWhg+AhqTX3NZwOItNnr2nxAa9LAAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:69:db:f8:69:7b:1e:40:6e:0a:dc:91:d9:fe:6e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb
Validity
Not Before: Aug 22 03:00:44 2026 GMT
Not After : Aug 23 03:00:44 2026 GMT
Subject: CN=3effd027af69218943d3786cef28c7749941d4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:0e:6e:2d:b3:4e:df:ea:66:fc:8b:cf:02:
03:51:ba:fb:4d:52:7d:5f:1c:a9:c8:04:57:da:8f:
7e:47:3a:bc:c2:54:23:cf:d0:0a:21:d6:f6:c1:ea:
54:52:63:a2:8b:23:67:56:d3:c0:f2:ed:54:91:3a:
74:6a:fa:15:12:8f:65:19:17:db:88:75:7e:d1:e7:
34:2c:4b:2d:45:51:2b:0d:21:8c:b6:a7:94:89:69:
f9:24:fc:09:4f:d5:36:56:89:97:3f:a2:02:75:0c:
99:71:4e:c7:ab:02:d0:35:a0:3d:84:4b:be:32:e9:
41:af:8b:6c:ec:4f:35:e9:fe:04:a7:b1:94:27:7f:
5b:51:31:51:31:7a:92:ab:12:8c:5e:ef:09:9b:a8:
34:d8:b2:df:22:ae:dd:67:cc:42:ab:96:ef:e6:cd:
5e:30:f3:28:a0:4b:18:50:df:2c:75:36:75:c8:77:
53:05:dc:2d:dd:8c:62:cf:db:b5:94:a0:be:02:b8:
ff:10:31:76:c5:5f:a2:5d:22:f1:6d:4c:e4:b1:69:
e3:f0:f3:19:f5:e3:20:72:09:e6:e2:b8:f0:3d:e8:
86:03:06:39:b5:b7:8e:82:f3:e5:dd:05:f6:e6:d2:
f4:c1:7a:35:16:2e:57:b8:7d:b2:dd:64:f0:5f:c0:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:D0:27:AF:69:21:89:43:D3:78:6C:EF:28:C7:74:99:41:D4:E3
X509v3 Authority Key Identifier:
keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5d:e4:22:58:9f:5a:1e:be:25:da:a4:2e:74:3a:40:c6:3f:
34:a4:2b:f2:04:ab:7f:a4:28:b4:6a:00:d4:f9:a5:f4:d6:7c:
09:c0:9f:b5:9a:bc:ea:06:ec:08:23:a9:3c:09:24:44:ce:2b:
40:60:b6:31:98:e2:5c:bd:5e:b4:56:f6:7d:81:74:5b:dc:9e:
79:b8:be:45:83:78:56:9a:85:d0:31:c6:2f:60:9d:f6:b7:83:
e2:f7:28:ed:03:d8:6a:d3:b0:08:37:76:32:b1:aa:00:36:a9:
fc:01:e0:7c:51:73:96:2f:4a:ce:b4:8a:6e:21:62:4b:a8:b3:
89:68:7e:33:f4:e8:23:ef:5b:de:a4:ff:4d:05:7c:5b:80:19:
dc:cf:b6:ed:8e:f8:c7:9b:96:24:c4:86:4a:97:48:99:fd:55:
06:12:4f:98:b3:5e:60:a5:9b:d0:01:68:76:3a:6b:a3:f0:ee:
1f:64:df:c3:84:10:05:d6:6f:cf:2f:f8:45:cc:9f:9c:d6:44:
98:25:84:ce:55:f3:61:90:fb:e6:5e:e0:a6:ec:4e:b1:15:0c:
1b:48:26:72:9c:25:e1:e0:00:aa:a8:28:fb:b2:17:1b:fd:d4:
9f:0e:9f:65:f7:96:2d:ed:39:7d:a0:2e:8a:8c:a5:5e:8b:d7:
a5:66:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:41 2026 by rpki-client