Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: ekMmlT+pJ59V1FH9GiIVILOom24uSyvUNPHa6iC6Qug=
Subject key identifier: 32:17:8C:F3:AA:BC:F3:9B:B6:19:B1:97:6D:97:17:FB:CC:40:9E:F1
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019C6BE7086AA89ACCCFB7193A61CAFE97C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 0524
Signing time: Tue 17 Feb 2026 14:00:28 +0000
Manifest this update: Tue 17 Feb 2026 14:00:28 +0000
Manifest next update: Wed 18 Feb 2026 14:00:28 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: ORLvJqZE0aJJ1m7qwNqooWV2q4abauPXqXaWK8qk3Q8=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:e7:08:6a:a8:9a:cc:cf:b7:19:3a:61:ca:fe:97:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Feb 17 14:00:28 2026 GMT
Not After : Feb 18 14:00:28 2026 GMT
Subject: CN=32178cf3aabcf39bb619b1976d9717fbcc409ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:07:3e:c1:62:cd:9d:94:ce:15:40:14:ee:
b4:c6:d0:2f:4c:a5:30:b2:0c:70:ae:bf:cb:8b:aa:
fb:c5:bb:8a:55:06:61:15:8c:9b:ba:10:95:3b:76:
99:01:ad:27:61:e8:eb:bf:14:bd:a3:47:56:9d:66:
e8:7c:3d:92:da:6f:25:7c:28:d3:45:22:f2:4e:f3:
eb:7e:aa:ac:3f:3e:28:31:bd:78:7f:7b:5b:6f:04:
07:91:e4:24:08:ac:e8:ec:2e:bd:df:a3:8a:e2:95:
66:d3:f3:7d:eb:92:fb:58:3c:45:bd:4f:69:f6:26:
f1:8c:79:3e:16:f6:7d:d3:ee:d3:96:1a:8a:a8:7e:
46:55:19:06:60:33:2d:06:87:d2:81:30:0e:00:ae:
65:13:ca:5a:fe:12:c9:8b:f5:d9:d7:34:2b:60:2b:
79:33:e1:cc:43:c8:bc:ae:99:a6:c2:5f:c4:c1:34:
11:d1:ba:2c:36:d6:01:bf:d4:45:47:87:87:8e:e7:
05:b7:16:31:ce:cd:ec:d2:0e:5a:72:fe:a9:e1:c6:
24:10:c9:66:8d:2c:78:dc:7c:49:e0:15:0d:04:61:
fd:18:5e:d8:44:9f:47:f3:97:5e:69:59:eb:d6:67:
6b:ac:76:8c:71:51:25:43:44:7f:b6:e7:e7:44:e8:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:8C:F3:AA:BC:F3:9B:B6:19:B1:97:6D:97:17:FB:CC:40:9E:F1
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:16:90:d4:34:47:3c:4e:68:59:6c:0b:ef:21:f4:7c:fd:19:
be:df:b2:c4:3d:f7:29:52:29:4d:62:d8:2e:19:c1:04:81:28:
fb:25:c4:d8:57:17:cd:5a:64:4a:6e:4d:72:3c:ff:96:0a:59:
2f:51:21:01:8b:89:c4:90:73:1a:0c:22:55:99:09:85:1e:6c:
a8:63:b8:b0:ea:38:f8:fe:25:a5:3c:7d:12:27:c0:3e:a2:af:
56:91:67:ac:09:56:bd:7c:e3:19:eb:00:e1:83:93:ba:3c:4e:
e0:30:ae:f1:b2:a1:d4:b4:46:ec:ea:97:d3:6d:a1:77:58:50:
0e:3a:e4:59:fd:b3:21:d1:f6:8e:3a:67:aa:c5:16:00:fe:47:
51:ae:90:f5:c8:ca:50:f9:7e:c4:fb:9f:74:ac:ca:a7:d8:bf:
c2:2e:e6:04:b9:ea:f6:ac:49:8c:31:79:45:ab:be:d8:f6:9b:
f1:e1:4b:84:4b:2e:9a:e8:2a:21:16:6c:6c:25:65:40:e7:ac:
01:2c:cc:06:bb:9e:0f:42:ab:4d:e8:21:e2:50:45:42:22:63:
10:9a:6a:1f:a6:e1:6b:48:40:22:51:88:dd:69:71:fc:d3:9f:
5d:2d:20:6f:bd:dc:e9:5c:da:88:5c:23:3b:7b:6a:8f:ad:74:
58:04:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 15:18:04 2026 by rpki-client