Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: /tkXQyjMW0qjfhXDuu+6Ij2DtwQ8cQy+ED4SOyofrmM=
Subject key identifier: 33:24:40:AF:20:23:DD:96:1B:CF:4F:96:27:D9:28:7F:6A:A4:06:5A
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 01A00EBD3F97B1982A7140DD46A554C3E2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 0706
Signing time: Mon 17 Aug 2026 08:01:18 +0000
Manifest this update: Mon 17 Aug 2026 08:01:18 +0000
Manifest next update: Tue 18 Aug 2026 08:01:18 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: bVKwnOxEaUN42PUyiQFujJqTcnoxWh8T7MJrTr9PTGQ=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:bd:3f:97:b1:98:2a:71:40:dd:46:a5:54:c3:e2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Aug 17 08:01:18 2026 GMT
Not After : Aug 18 08:01:18 2026 GMT
Subject: CN=332440af2023dd961bcf4f9627d9287f6aa4065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:e0:9b:fb:86:a5:f5:10:5a:dd:a7:e1:f2:
6d:68:2c:e4:63:c5:b6:2b:a5:9d:2a:96:fb:a3:af:
ee:71:1b:8b:72:d7:1a:3b:c5:b1:90:0a:5a:7e:2d:
03:d9:00:52:94:02:f2:b8:31:46:03:bf:e9:16:9d:
33:af:7f:5d:95:bc:e0:2d:ec:8b:c4:2c:84:95:d2:
d2:30:30:39:c4:19:f0:18:ac:c1:d4:80:c5:61:37:
5e:56:b9:84:e8:b0:12:6d:af:5c:4b:92:2b:1a:f9:
0b:b1:b1:64:29:53:fe:d7:a8:0f:00:d5:02:89:22:
70:62:fd:6a:11:3d:d0:ca:05:f0:fa:50:18:f8:81:
71:3d:80:77:2d:2b:2a:86:c2:4b:98:59:45:6b:5d:
a4:40:2d:da:15:6c:9a:76:01:68:b2:66:d4:5f:95:
98:b8:82:45:ee:49:d2:58:93:65:58:e5:ea:36:c0:
19:fc:61:d5:f5:bc:a0:7c:3a:2c:a4:d4:17:cd:96:
82:19:f2:6f:51:11:ab:3d:00:ed:b6:6a:d7:34:05:
84:50:7d:b3:5d:7c:74:60:46:36:53:76:f8:7e:eb:
e1:fc:73:1d:c7:1e:9b:d3:5a:db:0b:8b:dc:a4:99:
c9:3c:d4:2a:f0:c2:e0:8f:0b:84:05:75:5a:be:22:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:40:AF:20:23:DD:96:1B:CF:4F:96:27:D9:28:7F:6A:A4:06:5A
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:30:a6:ae:5b:3d:db:a2:9c:20:4b:77:2a:2b:32:b6:c2:4a:
88:18:12:c9:44:4c:d6:b4:c1:0d:f5:31:4f:9a:40:b2:70:8b:
77:7a:e0:99:87:1a:c6:48:ce:1d:51:78:43:27:96:77:96:82:
62:90:76:8b:78:ab:79:6e:9d:db:d6:3e:3e:d6:2c:d4:29:18:
5d:2a:88:bf:35:0c:5a:4d:87:f5:08:54:a2:9d:47:85:72:ff:
a1:1e:1f:fd:3b:e9:93:14:c6:82:91:ef:ac:b6:ba:f8:b0:a2:
b0:b2:b1:1e:bd:ed:07:5d:3b:89:3b:8e:36:dc:11:01:c4:74:
29:23:a8:3d:81:42:67:e9:46:a7:1f:f4:2b:49:5e:87:2d:f8:
98:06:52:f8:70:bf:25:2b:1e:2c:f6:02:83:cf:a2:d6:b4:1e:
52:57:21:9b:f3:8f:0f:b8:02:17:9b:29:7f:97:22:67:0a:98:
fe:e1:47:78:ac:b9:20:9e:e1:d0:a5:06:78:44:d3:a1:fe:6c:
2d:37:7f:b0:87:ba:b7:61:58:92:bb:5e:8c:db:2e:c7:dc:26:
a5:1c:96:fc:0d:f0:d8:54:65:5e:ac:dd:69:71:73:02:e0:77:
c8:34:8a:49:b5:fc:21:a4:c8:07:82:fe:9a:9a:8b:c6:1d:86:
69:b3:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 14:07:01 2026 by rpki-client