Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier: a1lgmDfHbD4oUsAE4KMxW2JA2zy9aEJtyHKxCCX2Q5A=
Subject key identifier: 2E:A6:8E:A0:E6:23:E1:97:0F:66:60:F3:63:B7:F7:81:64:4A:1E:82
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 019D389C509390EBCA90BADC4798C447952B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number: 0A2B
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: 8mrRFShZe3jIWPC5rjWtkIF86Ow.roa (hash: 1eDONGdvpbePJA/RAEZxIbFZz7jJ9+He5LHXPoKLTvk=)
2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: p37a2FZrzZaHGmgC9dkX/NwoJUKcITl05zrEYO7sUkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:50:93:90:eb:ca:90:ba:dc:47:98:c4:47:95:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=2ea68ea0e623e1970f6660f363b7f781644a1e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:bb:00:5c:8e:14:fb:c2:63:cb:ce:c3:68:
db:43:2b:0c:41:58:4d:c0:b1:6f:7f:be:70:cb:94:
a3:1b:b5:ae:18:1c:dc:d6:0e:21:ff:33:cd:74:94:
ca:63:6c:c6:af:6d:a3:47:77:0b:5f:81:05:53:7f:
36:a6:6f:59:08:97:dd:36:33:52:da:65:cc:3e:d6:
d5:ca:1c:1c:72:83:39:47:ed:5a:e1:01:7c:b6:0b:
27:8e:dc:32:fe:7a:c6:cd:7c:08:b1:8a:a5:2c:bd:
4a:05:2c:ee:66:3b:0f:88:9a:4e:d0:c9:5e:59:62:
ad:7a:4f:25:13:f4:f2:60:42:75:ac:76:5b:08:30:
7c:2c:4b:80:9a:48:4b:8a:bd:56:6b:5d:fd:36:ce:
c0:60:84:fd:dc:d7:06:92:a5:16:87:ba:6d:03:d2:
10:1b:87:c1:1d:ab:04:ff:d1:74:4d:99:c8:92:0c:
1a:97:df:a7:a9:8c:42:f5:f1:70:78:67:35:33:38:
bc:c0:aa:95:17:0d:d2:e5:74:2f:95:d2:db:c3:4c:
94:18:d8:14:2a:f1:5a:41:cf:62:6b:b5:0f:ac:09:
7c:89:59:2d:e2:c4:2d:d0:11:01:da:b4:6f:3a:c4:
29:89:38:41:aa:35:31:61:a4:8b:68:fe:3c:d0:17:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A6:8E:A0:E6:23:E1:97:0F:66:60:F3:63:B7:F7:81:64:4A:1E:82
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ea:6a:87:40:05:d9:23:40:af:2b:e2:5e:bf:1e:36:31:e4:
36:77:21:44:62:fc:1d:2d:0b:0f:f8:33:fb:bb:43:2b:80:fd:
f8:7a:b2:47:50:b0:1f:43:3d:11:9a:36:7a:6b:66:2e:54:43:
73:64:fd:be:75:dd:4a:ea:1f:5b:22:92:66:ef:63:dd:36:a6:
95:23:ca:76:38:ec:38:74:70:45:d4:3d:9e:1f:3b:6d:89:c9:
ba:28:81:11:f4:0d:02:27:72:d5:21:43:4c:6c:d6:65:86:1e:
58:c6:41:d5:15:a9:05:8d:81:9b:94:8c:e5:7f:ee:3f:04:80:
89:4e:be:3d:ff:0b:b5:ea:55:a3:bb:5e:11:cc:ce:4f:51:5f:
80:73:e9:f3:60:85:6f:e6:45:b1:08:68:33:cf:27:7c:5f:2a:
03:52:db:45:f9:3b:5a:44:fa:c4:c0:ef:d7:c4:31:42:6f:e1:
ab:5a:cb:20:db:dc:50:28:52:b4:d1:77:94:ec:6c:e1:74:9e:
39:0a:5b:dd:a9:ab:9c:e1:8a:b1:31:d0:cb:c2:20:e8:20:d8:
44:f0:7e:f0:68:8d:a2:e6:ac:b5:ac:17:9a:9a:b8:ea:23:3d:
ed:6a:6c:1a:b5:c9:9c:29:b8:1d:f1:40:d6:fb:19:f3:71:2e:
35:74:eb:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nFCTkOvKkLrcR5jER5UrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMDIwYWU5NmI1ZjBjNWI3MzM5ZTYxNTRkY2VjNmYxNmNi
NjNmNWEwHhcNMjYwMzI5MDgwMTAxWhcNMjYwMzMwMDgwMTAxWjAzMTEwLwYDVQQD
EygyZWE2OGVhMGU2MjNlMTk3MGY2NjYwZjM2M2I3Zjc4MTY0NGExZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdC7AFyOFPvCY8vOw2jbQysMQVhN
wLFvf75wy5SjG7WuGBzc1g4h/zPNdJTKY2zGr22jR3cLX4EFU382pm9ZCJfdNjNS
2mXMPtbVyhwccoM5R+1a4QF8tgsnjtwy/nrGzXwIsYqlLL1KBSzuZjsPiJpO0Mle
WWKtek8lE/TyYEJ1rHZbCDB8LEuAmkhLir1Wa139Ns7AYIT93NcGkqUWh7ptA9IQ
G4fBHasE/9F0TZnIkgwal9+nqYxC9fFweGc1Mzi8wKqVFw3S5XQvldLbw0yUGNgU
KvFaQc9ia7UPrAl8iVkt4sQt0BEB2rRvOsQpiThBqjUxYaSLaP480BeQvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6mjqDmI+GXD2Zg82O394FkSh6CMB8GA1UdIwQY
MBaAFKMCCulrXwxbcznmFU3OxvFstj9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAt
M2I3YzEyNjcyNWQ1LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAtM2I3YzEyNjcyNWQ1
LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOpqh0AF
2SNAryviXr8eNjHkNnchRGL8HS0LD/gz+7tDK4D9+HqyR1CwH0M9EZo2emtmLlRD
c2T9vnXdSuofWyKSZu9j3TamlSPKdjjsOHRwRdQ9nh87bYnJuiiBEfQNAidy1SFD
TGzWZYYeWMZB1RWpBY2Bm5SM5X/uPwSAiU6+Pf8LtepVo7teEczOT1FfgHPp82CF
b+ZFsQhoM88nfF8qA1LbRfk7WkT6xMDv18QxQm/hq1rLINvcUChStNF3lOxs4XSe
OQpb3amrnOGKsTHQy8Ig6CDYRPB+8GiNouastawXmpq46iM97WpsGrXJnCm4HfFA
1vsZ83EuNXTrbA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:20 2026 by rpki-client