Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: BGr8hWlG02xPW4Gt3w4eCQxd8CbidmtWzw7R1w2oZnY=
Subject key identifier: CD:42:FD:46:57:F8:B2:CC:B3:A7:0D:A2:16:47:EF:42:D4:82:2F:4F
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019E3D527C7B1D5F4303003427E4BB3ADEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 0615
Signing time: Mon 18 May 2026 23:01:16 +0000
Manifest this update: Mon 18 May 2026 23:01:16 +0000
Manifest next update: Tue 19 May 2026 23:01:16 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: oDSBAKpgCpOCV1Xo7iPsitpII9FMOIJ3GaAjKWV5ZAo=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 19 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3d:52:7c:7b:1d:5f:43:03:00:34:27:e4:bb:3a:de:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: May 18 23:01:16 2026 GMT
Not After : May 19 23:01:16 2026 GMT
Subject: CN=cd42fd4657f8b2ccb3a70da21647ef42d4822f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:10:72:45:cf:7e:8c:d4:6e:50:84:02:da:
bd:71:bd:af:65:e9:99:8c:e9:a2:4b:48:d0:d3:99:
2e:4a:65:f3:0b:19:1e:b0:5b:93:56:4e:10:5b:b2:
00:d7:ab:07:60:bc:cb:22:5d:1f:6e:65:77:4b:0f:
64:5a:85:a2:4b:77:2d:e9:54:fd:f5:83:8c:09:ac:
9d:b8:e9:ac:b8:4d:b9:19:15:6c:01:4a:8c:65:75:
e9:55:33:88:d9:3f:36:05:e7:0c:42:82:88:87:74:
4e:be:a0:c3:e6:d5:cd:38:1c:69:49:25:fc:73:f2:
99:08:13:09:d2:c4:42:e6:3a:0f:d6:0e:28:cb:31:
05:50:65:73:14:67:cc:a7:f5:8e:a2:5e:51:24:eb:
23:75:97:d0:20:81:cb:1f:19:71:51:ee:71:a0:3b:
c6:02:8c:7f:70:75:d6:00:c0:98:b6:b0:43:cc:f9:
24:da:93:7f:48:d8:f6:50:7a:5a:22:92:9e:4f:46:
e4:a5:98:e3:7c:24:7a:5f:77:06:50:7f:ec:7d:da:
ca:f2:e8:09:90:c6:09:0a:17:4a:2c:c7:2a:2b:78:
36:74:4d:45:3c:cc:6d:5e:37:2f:09:45:1a:20:38:
2f:1e:86:2f:fb:f2:b4:7a:e7:64:3d:86:3a:4b:7a:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:42:FD:46:57:F8:B2:CC:B3:A7:0D:A2:16:47:EF:42:D4:82:2F:4F
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1b:10:71:16:b1:8f:ae:8d:ab:50:ad:55:34:ef:2b:1c:0a:
a1:b2:27:cb:90:d8:22:a1:78:01:4c:bc:4c:fc:7a:1f:ec:6c:
8d:57:5b:1a:80:a6:bb:d9:3d:91:b4:af:a9:ad:cb:07:1c:f1:
7d:5b:5b:da:05:d2:62:65:78:20:d4:ba:b6:3e:b3:26:f6:12:
af:1d:3f:8c:55:e0:8b:a8:57:7b:67:d0:a4:35:48:9a:eb:5c:
1f:27:fb:55:8d:23:bc:e9:92:b5:fe:3c:eb:b2:4c:59:f4:01:
61:94:08:07:16:05:90:b0:f0:90:33:0b:df:a6:2f:fa:32:42:
39:68:91:1d:8e:f9:c8:d1:a5:37:84:32:2f:48:3f:07:1c:7e:
9e:6f:a4:03:99:3f:f6:f7:9d:36:a4:0c:f9:80:40:96:33:03:
3f:68:6a:0b:ff:3b:fe:0e:05:f9:24:b7:5f:1a:f0:37:73:d5:
8c:9e:48:41:87:53:7f:79:e2:9e:f5:97:7a:c8:53:fa:9f:9f:
e1:47:04:da:9b:95:10:49:2f:91:25:b6:fa:42:14:34:07:af:
30:05:c1:4d:2e:fc:87:fc:08:60:b2:03:8d:ca:15:fa:66:9c:
89:51:95:b3:c5:fa:33:8f:22:a1:ba:a6:0c:a0:40:8d:cb:75:
78:b3:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 08:40:57 2026 by rpki-client