Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: V2Y2yY8m4Ud/5KkavK3XrTqfA+IZj1vS+iQrY02UrTw=
Subject key identifier: 8D:25:1A:EE:DD:CE:4E:A7:69:2B:29:85:10:63:15:A0:4E:D4:6B:18
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 019D08F9E0FE8C3EF4DB885D250E032FD8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 1878
Signing time: Fri 20 Mar 2026 02:01:26 +0000
Manifest this update: Fri 20 Mar 2026 02:01:26 +0000
Manifest next update: Sat 21 Mar 2026 02:01:26 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: Dm7JRQXWh1kYhpx4QHUjGkzyPNpOrYvR0Mt8Sm62clE=)
2: 5P2AqR4dtygfqcMyJGY9YwMXZmo.roa (hash: plYfXtpKsLLxZP4A30RARMsnKevfGvWHOU+I9QD0I+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:f9:e0:fe:8c:3e:f4:db:88:5d:25:0e:03:2f:d8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Mar 20 02:01:26 2026 GMT
Not After : Mar 21 02:01:26 2026 GMT
Subject: CN=8d251aeeddce4ea7692b2985106315a04ed46b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:2f:00:55:b1:01:bf:9f:1e:00:f8:b5:4c:
7b:80:47:3c:bb:ae:bc:3d:03:73:50:30:5a:10:55:
9a:e8:5f:2c:8b:43:34:89:be:3a:ba:b4:b9:56:4e:
c5:e7:10:37:89:7d:3a:ca:a4:e3:bb:1c:43:10:a2:
49:77:2f:38:40:c6:54:09:b9:27:72:3e:9a:3c:9e:
4d:31:fc:23:a1:7f:a7:c4:16:6e:ef:8e:46:18:9e:
15:97:0a:eb:9c:9a:59:80:9e:e7:9f:5b:1e:79:4b:
6a:c4:44:e8:d6:ab:81:7e:82:2d:3f:76:46:a3:77:
fc:69:5e:d7:a9:59:21:28:1d:9b:54:2b:b4:97:e3:
33:24:c0:8c:c3:b9:0f:1b:9c:8b:2c:8b:13:0a:bf:
fd:04:ce:ae:59:18:14:a6:2e:e3:cf:7f:dd:1f:37:
85:6a:e4:ef:3a:f0:14:bc:6f:a6:b2:ba:f8:c5:a3:
74:dc:3c:35:17:5f:30:b6:9b:3e:04:ca:9d:92:87:
89:29:fb:8d:9a:8c:00:f5:67:9c:78:67:b9:41:f7:
c8:db:45:71:a5:85:54:c5:20:f4:df:77:cb:4b:73:
07:54:a1:97:78:95:64:5e:7a:51:22:c2:17:1e:09:
73:46:55:91:cd:a1:36:b0:f8:dc:fa:84:21:19:f6:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:1A:EE:DD:CE:4E:A7:69:2B:29:85:10:63:15:A0:4E:D4:6B:18
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:54:4f:57:b3:41:1e:58:9f:cf:5c:0a:2e:a6:93:11:19:44:
6c:35:fb:63:a3:44:24:79:53:33:43:ff:17:8a:00:91:c6:3e:
37:9f:2c:fb:21:48:3a:70:0d:22:03:a4:00:f0:12:1f:da:24:
92:12:af:ec:b6:9a:93:c7:e8:b5:91:7a:05:13:16:1c:6d:dd:
f3:a8:5d:7e:c1:4e:6d:0d:36:2f:8f:ec:ff:91:84:df:67:0f:
66:8a:20:75:ac:88:12:5f:7e:0b:bd:c3:30:33:6e:0c:79:7d:
90:a6:fc:47:c7:55:fb:15:92:13:d8:66:00:4e:b1:4a:1a:f1:
07:2d:60:b5:db:da:74:81:c6:b4:95:a6:54:0f:85:38:5c:01:
65:8c:5a:40:94:7e:ef:5a:25:46:03:5c:ac:fe:dd:e6:dc:46:
16:ed:c5:f6:30:8b:c6:35:fa:72:b3:5d:d4:57:bb:1b:b7:78:
ed:f2:d3:fe:2f:4a:d6:c3:2c:8e:94:f5:d7:c5:b5:8b:9b:39:
28:44:a6:87:6f:e1:41:36:26:0c:35:14:15:85:54:8c:93:2d:
77:37:25:13:a1:84:ab:f8:45:db:d3:b4:f7:f4:98:cb:b0:f0:
0f:39:61:56:54:3b:14:63:d9:2f:17:40:b9:5d:91:64:0f:82:
33:59:03:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0I+eD+jD7024hdJQ4DL9jpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDNhZWMyMmY4MTljZjAxZjJjNjM2MzAzNWQ5N2Y4ZTBl
MzgyMzMwHhcNMjYwMzIwMDIwMTI2WhcNMjYwMzIxMDIwMTI2WjAzMTEwLwYDVQQD
Eyg4ZDI1MWFlZWRkY2U0ZWE3NjkyYjI5ODUxMDYzMTVhMDRlZDQ2YjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7QvAFWxAb+fHgD4tUx7gEc8u668
PQNzUDBaEFWa6F8si0M0ib46urS5Vk7F5xA3iX06yqTjuxxDEKJJdy84QMZUCbkn
cj6aPJ5NMfwjoX+nxBZu745GGJ4VlwrrnJpZgJ7nn1seeUtqxETo1quBfoItP3ZG
o3f8aV7XqVkhKB2bVCu0l+MzJMCMw7kPG5yLLIsTCr/9BM6uWRgUpi7jz3/dHzeF
auTvOvAUvG+msrr4xaN03Dw1F18wtps+BMqdkoeJKfuNmowA9WeceGe5QffI20Vx
pYVUxSD033fLS3MHVKGXeJVkXnpRIsIXHglzRlWRzaE2sPjc+oQhGfZUFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0lGu7dzk6naSsphRBjFaBO1GsYMB8GA1UdIwQY
MBaAFNZDrsIvgZzwHyxjYwNdl/jg44IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYt
ZjZmMzIzZmQ5NmUwLzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYtZjZmMzIzZmQ5NmUw
LzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFRPV7NB
Hlifz1wKLqaTERlEbDX7Y6NEJHlTM0P/F4oAkcY+N58s+yFIOnANIgOkAPASH9ok
khKv7Laak8fotZF6BRMWHG3d86hdfsFObQ02L4/s/5GE32cPZoogdayIEl9+C73D
MDNuDHl9kKb8R8dV+xWSE9hmAE6xShrxBy1gtdvadIHGtJWmVA+FOFwBZYxaQJR+
71olRgNcrP7d5txGFu3F9jCLxjX6crNd1Fe7G7d47fLT/i9K1sMsjpT118W1i5s5
KESmh2/hQTYmDDUUFYVUjJMtdzclE6GEq/hF29O09/SYy7DwDzlhVlQ7FGPZLxdA
uV2RZA+CM1kDoQ==
-----END CERTIFICATE-----
Generated at Fri Mar 20 08:27:21 2026 by rpki-client