Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
File: ozLbxf62AFijLIBWJhQdT9gOW9Q.mft (raw, json)
Hash identifier: DR7LaJojOBRFSAW6EA+KvjHI2AaGu69Q/xtJDzxXXe0=
Subject key identifier: B3:DF:C9:9F:A7:3A:56:76:D3:62:58:63:34:00:3C:09:9A:3C:F4:A5
Authority key identifier: A3:32:DB:C5:FE:B6:00:58:A3:2C:80:56:26:14:1D:4F:D8:0E:5B:D4
Certificate issuer: /CN=a332dbc5feb60058a32c805626141d4fd80e5bd4
Certificate serial: 01A16C7F1E5FE7EB9BFA2BB69D5C16B91C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
Manifest number: 0136
Signing time: Sat 24 Oct 2026 06:00:32 +0000
Manifest this update: Sat 24 Oct 2026 06:00:32 +0000
Manifest next update: Sun 25 Oct 2026 06:00:32 +0000
Files and hashes: 1: 1-o0oBAgqjbEtsKujdEf_t825kA4.roa (hash: SwOkcVx10T9YlM/ZZvY4xDb4IxE8gvR4HljVlu3CooU=)
2: ozLbxf62AFijLIBWJhQdT9gOW9Q.crl (hash: oMpUVwEuqIAQVILFU6hwhI8lVLXlRlM2t45EbK3Ce+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:1e:5f:e7:eb:9b:fa:2b:b6:9d:5c:16:b9:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a332dbc5feb60058a32c805626141d4fd80e5bd4
Validity
Not Before: Oct 24 06:00:32 2026 GMT
Not After : Oct 25 06:00:32 2026 GMT
Subject: CN=b3dfc99fa73a5676d362586334003c099a3cf4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:7c:87:57:7f:dd:a9:cf:6e:27:35:29:30:
4f:8a:84:6a:b6:34:81:6f:85:bd:6f:8e:d2:3c:76:
eb:a9:89:2f:15:2e:e0:49:f5:32:00:96:ba:47:81:
30:37:15:66:7a:27:a0:28:a7:ea:6c:a4:3f:41:1b:
6a:d4:cc:f7:61:a9:11:38:ae:09:3b:24:c2:16:3e:
9c:0f:f8:b6:b8:84:56:c3:a1:c2:fb:15:14:30:a8:
f6:57:95:d2:b1:1e:11:82:87:b9:6e:32:11:f9:35:
7a:48:f6:aa:77:d6:2e:a5:5f:f8:a2:33:cf:c0:f3:
f4:9e:03:35:dc:ea:ee:39:d9:08:43:c2:c2:59:99:
e9:5b:61:a0:02:74:ba:c5:61:11:0e:41:7f:79:d1:
77:83:70:96:32:b6:d8:d4:ad:92:74:41:5d:dd:51:
33:1e:22:17:be:ed:46:50:36:11:df:01:8b:f5:d4:
70:18:32:75:70:48:d2:9e:53:1d:25:15:44:e1:db:
3c:9b:18:03:ad:2e:4c:bc:d0:20:d9:7b:24:f1:13:
7d:24:ec:ab:7d:50:af:56:4c:98:33:56:7d:75:87:
d5:95:1c:a0:f9:36:51:67:42:4b:ac:64:8b:fb:d3:
a0:de:65:85:e3:71:59:58:96:d2:ab:a3:48:bf:cb:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DF:C9:9F:A7:3A:56:76:D3:62:58:63:34:00:3C:09:9A:3C:F4:A5
X509v3 Authority Key Identifier:
keyid:A3:32:DB:C5:FE:B6:00:58:A3:2C:80:56:26:14:1D:4F:D8:0E:5B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:70:01:41:03:5c:0d:de:d0:ae:a2:24:f9:7c:8e:c0:b7:99:
35:c5:50:b0:3e:b9:67:7d:b7:06:8f:de:92:52:a5:1a:f3:b9:
e5:91:34:e9:bd:3a:3d:7f:5a:f3:07:20:01:c3:23:a7:b6:30:
99:fe:c8:d7:23:59:32:e8:05:b8:08:60:49:78:df:06:30:b6:
13:5b:79:13:9d:15:0a:ff:21:6f:3a:a6:56:1b:a2:6b:f3:c2:
7f:1c:d3:be:64:a8:74:ea:5b:ed:47:9d:c0:3d:f2:1f:b3:68:
d6:43:4d:75:f6:f6:cd:c2:24:80:dc:06:6f:09:82:e5:4c:06:
91:49:4d:83:7c:06:8e:c3:81:54:67:cd:f7:3d:23:be:a1:ce:
44:1c:4e:c6:07:f2:48:3b:c1:86:10:32:d1:6f:bc:01:39:d7:
cc:28:31:ac:c0:f7:7c:03:2f:09:5a:21:7c:80:43:af:53:e9:
b3:0e:25:7d:49:7b:e2:35:24:8a:5a:30:84:c3:53:eb:e2:6b:
ff:81:3d:40:56:e2:ce:35:aa:e2:87:a1:9a:53:cd:db:01:54:
98:eb:20:9d:33:a0:75:43:78:61:ff:1c:02:1b:3e:45:d0:23:
80:24:00:21:ef:3a:b7:5b:c2:95:47:39:8e:fd:3a:02:1e:b2:
5c:19:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:41:03 2026 by rpki-client