Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
File: ozLbxf62AFijLIBWJhQdT9gOW9Q.mft (raw, json)
Hash identifier: Ema+8MKd6pcVpWxEAqQXAmLMtQ1WRDiCLF3NcD1kHCE=
Subject key identifier: F5:28:8A:D4:F1:AD:6A:BE:82:61:0D:6D:99:0E:FD:4D:1E:07:88:98
Authority key identifier: A3:32:DB:C5:FE:B6:00:58:A3:2C:80:56:26:14:1D:4F:D8:0E:5B:D4
Certificate issuer: /CN=a332dbc5feb60058a32c805626141d4fd80e5bd4
Certificate serial: 019F85D77CB2E92028CC2689070C77DA196D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:59 +0000
Manifest this update: Tue 21 Jul 2026 18:01:59 +0000
Manifest next update: Wed 22 Jul 2026 18:01:59 +0000
Files and hashes: 1: 1-o0oBAgqjbEtsKujdEf_t825kA4.roa (hash: SwOkcVx10T9YlM/ZZvY4xDb4IxE8gvR4HljVlu3CooU=)
2: ozLbxf62AFijLIBWJhQdT9gOW9Q.crl (hash: vy44Psu4hH00s/TaIqtAZOQL9srrpayHBvFg5eVkP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:7c:b2:e9:20:28:cc:26:89:07:0c:77:da:19:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a332dbc5feb60058a32c805626141d4fd80e5bd4
Validity
Not Before: Jul 21 18:01:59 2026 GMT
Not After : Jul 22 18:01:59 2026 GMT
Subject: CN=f5288ad4f1ad6abe82610d6d990efd4d1e078898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:4a:45:c6:65:5f:2c:19:44:38:bd:45:cf:
69:19:58:76:fb:1f:d7:54:5f:52:df:02:58:00:0b:
b4:87:a3:df:88:e2:8b:8b:52:bf:51:08:b7:eb:ce:
d5:51:7d:9e:f1:e6:49:4c:3a:dd:2f:b2:b1:f2:f7:
d3:c1:1c:a9:30:44:e2:f8:b1:d4:95:e1:b3:64:6b:
6c:9d:81:af:c1:c6:d1:8b:aa:e5:fa:7a:68:9b:a7:
d1:9f:fc:12:ea:94:83:d6:96:bb:d3:55:97:62:97:
62:32:d6:38:1d:af:6a:14:b6:4d:05:6c:26:1c:ba:
07:b2:c0:15:b1:0e:c6:ea:03:6c:f3:d3:6d:a2:d2:
d5:fd:80:dc:a6:bd:f6:70:25:38:74:9f:a7:f6:d3:
9c:2f:4e:91:61:43:13:0d:5c:64:95:43:43:ef:a3:
59:a5:5c:f6:11:82:9a:3c:3b:b8:73:84:25:4b:ec:
80:f8:9d:b6:eb:87:d2:77:0a:2c:c0:93:31:f4:71:
c5:4d:8f:8f:06:57:09:69:ca:d3:43:5b:bc:bf:ee:
3e:95:fe:ab:1b:7c:dc:fb:17:d2:d2:da:45:23:33:
f8:d6:80:ec:2c:7b:31:b1:a7:84:97:bb:7b:c3:2d:
da:0a:ed:0f:44:91:d7:0a:b2:90:25:b4:ad:9e:d0:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:8A:D4:F1:AD:6A:BE:82:61:0D:6D:99:0E:FD:4D:1E:07:88:98
X509v3 Authority Key Identifier:
keyid:A3:32:DB:C5:FE:B6:00:58:A3:2C:80:56:26:14:1D:4F:D8:0E:5B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:95:5b:d8:cf:45:8a:61:de:91:f3:89:82:37:cd:0e:1d:53:
49:e4:0b:dd:a8:bd:8e:3e:49:ea:5a:23:bd:12:8f:27:1a:99:
b7:dd:25:ef:7e:0b:e8:7f:f1:58:3a:06:c5:f0:ec:e8:ba:72:
30:3b:04:03:a1:fa:ed:7f:f0:50:41:81:76:2d:6f:f0:a5:09:
82:67:45:c0:ec:68:89:b6:0d:de:dc:94:a6:e2:08:4d:f2:d0:
eb:77:ed:8f:ad:8b:69:c3:40:ee:c9:3e:f6:dc:24:fa:19:3e:
5f:09:8e:d0:16:4e:cd:e5:0b:fa:02:09:1b:da:e0:29:24:f9:
44:e2:ad:8d:1d:cb:3f:98:74:f2:b2:25:ea:32:cf:c3:62:92:
80:c5:7b:36:38:78:53:ee:b4:b4:ef:7e:ff:7c:32:11:7c:12:
0d:a1:d5:e7:2f:bd:d7:c0:aa:ee:0d:1b:32:e2:41:25:2d:12:
cb:da:09:1e:c7:b1:61:3b:ef:c6:8e:4d:72:a2:f4:da:2c:20:
46:fe:ab:c3:fb:0e:e6:3b:c4:0a:58:b5:6a:54:2e:71:7d:eb:
be:61:fa:6e:56:25:cf:d2:d4:40:34:28:97:8b:e8:35:68:7a:
c5:83:cd:60:fb:cc:88:45:d6:0d:b2:22:fc:77:10:05:a7:39:
45:31:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:24 2026 by rpki-client