Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier: ecD/44aMp8/WvPqY5bDL71Bt1M82QCk770hAGYCkdC4=
Subject key identifier: F9:49:9C:08:0E:96:F1:FB:01:0E:39:FE:3B:44:E6:88:A7:54:76:2B
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 019E31BC3E9FB466772A3EB667F1542D9FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number: 0AAC
Signing time: Sat 16 May 2026 17:01:20 +0000
Manifest this update: Sat 16 May 2026 17:01:20 +0000
Manifest next update: Sun 17 May 2026 17:01:20 +0000
Files and hashes: 1: 8mrRFShZe3jIWPC5rjWtkIF86Ow.roa (hash: 1eDONGdvpbePJA/RAEZxIbFZz7jJ9+He5LHXPoKLTvk=)
2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: oVEHdx+Xj6ZVWSBgcXSMJur9daIZgoQppZDks41ADHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:3e:9f:b4:66:77:2a:3e:b6:67:f1:54:2d:9f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: May 16 17:01:20 2026 GMT
Not After : May 17 17:01:20 2026 GMT
Subject: CN=f9499c080e96f1fb010e39fe3b44e688a754762b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:7b:ff:bd:91:b5:c0:63:37:82:0b:46:a5:
e7:ad:97:62:62:63:30:64:47:52:8e:e9:a3:de:ed:
ff:8e:eb:6f:d2:e4:30:ed:d9:78:14:1f:c0:b6:5d:
71:67:03:02:eb:cb:ee:58:8d:e0:3f:b8:56:2a:81:
5c:7c:db:70:0e:8c:db:88:55:c5:9d:09:70:22:42:
95:e2:19:7c:fb:02:d2:4b:3a:7d:eb:a1:eb:fa:26:
49:33:ce:50:5f:24:76:87:fa:d7:ad:ae:56:ef:dc:
25:bd:4c:45:a4:b0:31:26:9e:32:96:b3:6c:7c:5e:
09:83:86:4a:fc:21:d0:53:52:41:7c:c2:1a:b1:74:
c7:9a:01:83:d7:1c:58:5b:45:1c:5e:30:16:24:54:
21:2f:f0:7f:e1:7a:af:c1:4b:ea:e7:14:df:62:92:
83:7e:f5:2e:ca:37:04:b1:79:66:ac:83:ae:02:58:
40:b4:ac:c0:91:6f:6b:41:80:1c:e5:ed:7c:e4:9d:
a6:51:fe:58:bf:56:1a:bb:3c:78:bb:ab:00:24:78:
ee:d2:64:c3:2e:c7:33:97:7f:4d:5f:40:58:fb:0f:
ac:69:52:d9:8e:11:84:f7:5d:0b:41:40:74:e0:72:
23:fd:fc:36:70:23:e3:4c:aa:97:39:25:d2:15:fa:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:49:9C:08:0E:96:F1:FB:01:0E:39:FE:3B:44:E6:88:A7:54:76:2B
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:01:9b:61:4b:8e:36:f9:fe:57:68:c2:4f:d3:9d:89:cd:bd:
9b:f0:22:f0:cc:d2:35:f0:50:c2:54:07:4a:26:d4:5a:ce:02:
e4:f6:02:11:f8:9d:e5:c6:69:ef:da:9b:19:91:b8:c6:74:92:
de:22:0b:ee:2c:29:39:27:78:ed:61:53:e8:bd:74:4d:4d:29:
17:b6:6f:5b:0b:82:d6:65:83:89:80:8f:51:94:82:3a:83:77:
1e:44:8c:33:9f:db:29:ef:8b:0c:12:87:7d:f9:b7:49:88:7b:
9a:50:2a:60:78:7d:a8:55:20:ea:6a:b7:9b:f1:60:a5:71:fe:
4c:a8:55:57:5a:3d:50:8e:d8:29:4f:48:67:8f:1a:93:5a:64:
6d:54:6b:da:e8:4e:7b:8b:b3:14:01:61:0f:7e:cc:d1:24:f7:
02:d7:4c:2e:89:69:f2:08:2c:f4:92:3b:d0:8d:26:7a:b3:24:
bc:51:4d:5f:58:4c:6e:44:df:0d:c2:69:48:a3:7f:73:c0:e7:
b8:06:de:49:ae:bb:b9:7c:66:80:11:8b:83:87:0a:da:4d:54:
60:1d:f3:b5:59:7c:47:34:4c:e8:b3:cb:f7:32:0e:6d:ea:21:
8c:d6:6a:09:fb:24:f0:78:cf:dd:49:6c:5c:b3:f7:60:8a:95:
b6:49:7c:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xvD6ftGZ3Kj62Z/FULZ+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMDIwYWU5NmI1ZjBjNWI3MzM5ZTYxNTRkY2VjNmYxNmNi
NjNmNWEwHhcNMjYwNTE2MTcwMTIwWhcNMjYwNTE3MTcwMTIwWjAzMTEwLwYDVQQD
EyhmOTQ5OWMwODBlOTZmMWZiMDEwZTM5ZmUzYjQ0ZTY4OGE3NTQ3NjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3p7/72RtcBjN4ILRqXnrZdiYmMw
ZEdSjumj3u3/jutv0uQw7dl4FB/Atl1xZwMC68vuWI3gP7hWKoFcfNtwDozbiFXF
nQlwIkKV4hl8+wLSSzp966Hr+iZJM85QXyR2h/rXra5W79wlvUxFpLAxJp4ylrNs
fF4Jg4ZK/CHQU1JBfMIasXTHmgGD1xxYW0UcXjAWJFQhL/B/4XqvwUvq5xTfYpKD
fvUuyjcEsXlmrIOuAlhAtKzAkW9rQYAc5e185J2mUf5Yv1Yauzx4u6sAJHju0mTD
Lsczl39NX0BY+w+saVLZjhGE910LQUB04HIj/fw2cCPjTKqXOSXSFfqGiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlJnAgOlvH7AQ45/jtE5oinVHYrMB8GA1UdIwQY
MBaAFKMCCulrXwxbcznmFU3OxvFstj9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAt
M2I3YzEyNjcyNWQ1LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAtM2I3YzEyNjcyNWQ1
LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQGbYUuO
Nvn+V2jCT9Odic29m/Ai8MzSNfBQwlQHSibUWs4C5PYCEfid5cZp79qbGZG4xnSS
3iIL7iwpOSd47WFT6L10TU0pF7ZvWwuC1mWDiYCPUZSCOoN3HkSMM5/bKe+LDBKH
ffm3SYh7mlAqYHh9qFUg6mq3m/FgpXH+TKhVV1o9UI7YKU9IZ48ak1pkbVRr2uhO
e4uzFAFhD37M0ST3AtdMLolp8ggs9JI70I0merMkvFFNX1hMbkTfDcJpSKN/c8Dn
uAbeSa67uXxmgBGLg4cK2k1UYB3ztVl8RzRM6LPL9zIObeohjNZqCfsk8HjP3Uls
XLP3YIqVtkl8gQ==
-----END CERTIFICATE-----
Generated at Sat May 16 22:02:26 2026 by rpki-client