Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
File: ozLbxf62AFijLIBWJhQdT9gOW9Q.mft (raw, json)
Hash identifier: EIuHdCBJ6EFoEbp3XobRvUcY7vHCfgsi5qcAs2i++i8=
Subject key identifier: F0:24:9F:2E:18:AD:08:28:C3:D8:D9:ED:0F:29:D9:8E:2A:34:21:B7
Authority key identifier: A3:32:DB:C5:FE:B6:00:58:A3:2C:80:56:26:14:1D:4F:D8:0E:5B:D4
Certificate issuer: /CN=a332dbc5feb60058a32c805626141d4fd80e5bd4
Certificate serial: 01A1724A6AB937DDBA675FC5B6492A637243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
Manifest number: 0139
Signing time: Sun 25 Oct 2026 09:00:41 +0000
Manifest this update: Sun 25 Oct 2026 09:00:41 +0000
Manifest next update: Mon 26 Oct 2026 09:00:41 +0000
Files and hashes: 1: 1-o0oBAgqjbEtsKujdEf_t825kA4.roa (hash: SwOkcVx10T9YlM/ZZvY4xDb4IxE8gvR4HljVlu3CooU=)
2: ozLbxf62AFijLIBWJhQdT9gOW9Q.crl (hash: 467snXR6/10TQB9O7gD+pS5r073Kdto1adstRr2nGdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4a:6a:b9:37:dd:ba:67:5f:c5:b6:49:2a:63:72:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a332dbc5feb60058a32c805626141d4fd80e5bd4
Validity
Not Before: Oct 25 09:00:41 2026 GMT
Not After : Oct 26 09:00:41 2026 GMT
Subject: CN=f0249f2e18ad0828c3d8d9ed0f29d98e2a3421b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:f6:1d:be:09:8f:f9:24:76:ee:f8:0c:54:
6f:7a:16:23:5b:ad:72:07:56:0f:34:30:9b:13:90:
f8:40:76:12:5b:30:fa:7b:af:5e:db:90:7f:f2:7b:
0a:bc:67:b4:08:8f:b0:44:1a:31:df:25:9c:b1:03:
03:d0:12:ab:5d:ea:3a:c7:3c:0e:8d:7a:1f:64:3f:
26:34:0c:e0:52:b6:67:87:c2:1c:87:7e:a7:44:28:
24:27:74:58:75:91:79:f0:41:1d:bb:f9:46:49:24:
f9:07:5d:3a:c4:74:9c:43:24:61:9f:ef:9e:f5:37:
bd:a7:f4:30:48:ca:e5:90:9a:59:8e:08:2f:98:4b:
87:c1:9e:d2:0e:30:fc:a8:af:76:61:1c:a2:9c:91:
99:64:28:bb:fd:07:1f:bf:b3:fd:8d:c2:82:4a:30:
2c:d8:9d:fd:3c:e5:01:77:15:09:df:9d:66:c8:c4:
60:4f:44:75:16:f8:00:88:f6:46:f2:dc:57:33:da:
d8:15:7f:fb:dd:cd:73:a8:3c:84:d1:33:9c:da:ae:
c7:5f:25:0b:4d:84:3b:0f:dd:38:a9:1a:3f:bb:8b:
72:0a:54:5c:af:c0:d3:48:c8:04:4e:37:b4:2f:c4:
f7:96:c1:c9:b7:ba:1f:70:1c:27:34:86:69:ab:9b:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:24:9F:2E:18:AD:08:28:C3:D8:D9:ED:0F:29:D9:8E:2A:34:21:B7
X509v3 Authority Key Identifier:
keyid:A3:32:DB:C5:FE:B6:00:58:A3:2C:80:56:26:14:1D:4F:D8:0E:5B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ef:68:81:da:e5:a6:84:f0:7a:a9:27:15:8f:a7:04:c0:28:
b3:59:6c:29:19:4f:13:43:f6:79:1f:7b:bf:ae:bc:77:1d:c2:
65:3d:08:6f:5a:34:bd:d5:2b:90:7f:d0:93:80:ef:99:0e:b3:
5b:b1:53:99:d5:de:db:2c:8f:1d:78:0c:e4:e4:f8:a3:a6:53:
d4:25:f7:0c:73:fb:4a:c3:66:fc:e3:63:d9:f0:81:ea:97:7d:
32:c8:99:b7:71:df:a1:7d:d5:f1:d4:6b:15:87:61:a5:10:1e:
66:17:63:1c:44:fa:0f:06:e2:ad:84:f6:36:cd:b1:d3:72:eb:
13:f5:3b:eb:77:05:2e:33:86:f8:f9:41:a8:08:99:ff:23:60:
df:67:6b:4d:d0:83:02:e4:cf:93:a7:6d:79:46:4f:e5:bf:83:
f0:55:a9:ef:5a:60:06:68:f5:7f:69:11:eb:5e:c8:69:52:0c:
34:a7:e8:65:f6:7e:9f:45:46:50:53:a5:84:ad:f2:41:1b:db:
48:48:fb:95:18:f8:25:21:c4:b5:8c:8e:21:16:4a:92:41:b2:
27:b3:ae:5f:27:b3:66:f6:ed:80:7f:63:da:cf:ce:d1:05:e1:
d0:24:af:62:df:6c:6b:f4:32:b4:6d:21:2f:c2:f9:6e:72:21:
dc:49:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:35:56 2026 by rpki-client