Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File: OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier: WN6Va9dBs3C5b+LD+MhDyXe1a9eo4KHFwGwgNWNGDfw=
Subject key identifier: 0B:48:B1:D3:EC:91:E8:2E:66:5D:E2:A6:C2:AC:19:4E:07:47:C1:D2
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer: /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial: 019D39419DDE4AB6F585036AE8E2EDC1B0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 11:01:34 +0000
Manifest this update: Sun 29 Mar 2026 11:01:34 +0000
Manifest next update: Mon 30 Mar 2026 11:01:34 +0000
Files and hashes: 1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: iAnL470wzzf6G5s6ThpRtQSoyjDHAzAonWb8ma2v/ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:9d:de:4a:b6:f5:85:03:6a:e8:e2:ed:c1:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Validity
Not Before: Mar 29 11:01:34 2026 GMT
Not After : Mar 30 11:01:34 2026 GMT
Subject: CN=0b48b1d3ec91e82e665de2a6c2ac194e0747c1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dd:db:ae:b6:0c:c6:cb:a8:e2:65:7c:93:c0:
1c:9a:69:0b:d1:fc:b3:6b:f7:16:96:fa:1e:f5:07:
5b:e7:0d:6c:5d:9c:57:1d:aa:a5:a0:a4:a2:d1:cf:
36:ee:9b:85:be:08:fb:74:66:f6:49:09:59:35:6d:
a1:96:b9:98:92:c2:b0:0a:5a:32:cc:f9:eb:f0:57:
00:fa:a4:70:da:33:b0:fa:dd:a7:d2:dc:22:18:ea:
a4:68:bb:86:dc:17:27:95:ee:4d:d6:89:ef:b8:63:
4a:4b:27:f5:9a:4d:a4:1d:fd:4f:da:e1:3b:52:09:
f4:a7:5d:16:b3:a0:45:92:cd:1b:cf:9c:3f:6e:d8:
43:29:52:31:ec:25:d9:45:08:b8:6f:76:53:e5:73:
5f:2b:b5:73:af:c8:a7:42:7f:21:6b:2b:6c:ae:ce:
16:42:49:c1:43:64:ca:6e:e1:8a:47:42:93:b7:30:
78:c2:4d:92:ed:09:41:71:2a:4d:c5:90:e5:72:b2:
b5:cc:15:9e:8b:51:e6:fd:dc:9e:c7:0b:23:57:7d:
44:29:b9:db:cc:07:ec:d5:6e:df:bb:37:f4:95:af:
e1:66:9d:72:92:f0:bf:b8:d3:e0:69:06:58:25:fd:
5a:34:91:17:38:30:13:c3:2d:30:1f:f1:93:60:14:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:B1:D3:EC:91:E8:2E:66:5D:E2:A6:C2:AC:19:4E:07:47:C1:D2
X509v3 Authority Key Identifier:
keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:68:92:17:92:a9:af:01:68:ff:a5:20:44:4d:25:ef:b3:cb:
8f:c7:d1:33:b1:bd:51:d6:6b:1c:ca:ea:35:e0:d7:2f:fa:a1:
36:11:be:65:b4:7e:9a:69:1e:89:99:b4:fb:ce:a0:b5:df:95:
35:f5:38:1b:08:01:85:27:6f:ac:12:2f:a1:dc:2c:5f:c6:a8:
6e:3c:69:c4:82:da:84:31:f8:1e:e0:c4:58:73:fe:a6:9e:97:
3b:f3:21:42:16:28:4c:ed:18:16:fb:a0:44:4e:6f:69:0b:47:
4f:1e:21:8a:ca:08:10:5d:3c:60:47:8c:2f:10:bc:e1:7a:b8:
6b:54:6b:6e:b4:39:f2:55:18:cf:0b:bf:ad:5f:29:5f:cf:9d:
13:5b:ed:3e:5a:21:b5:da:e6:32:cc:19:19:bc:8f:7e:3e:7f:
7a:2e:e6:ca:64:02:b5:94:dc:b4:83:85:22:4e:87:90:85:65:
f8:57:27:27:99:f1:a5:e3:15:04:c6:87:8f:ff:71:77:ff:1e:
77:9b:3c:b9:3c:28:00:06:5f:19:46:74:e1:9f:d5:47:8c:a9:
16:aa:7b:9a:06:88:d7:db:4c:c1:73:cc:dd:5a:7d:f0:98:a9:
81:3d:ef:91:86:78:85:72:b9:f5:09:bb:02:2f:ed:55:04:fe:
14:ac:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:59 2026 by rpki-client