Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: Q+5U2doiKATKAbpwoJbl+gcLyR72fMttoAI03l0GC5Y=
Subject key identifier: 61:3A:D8:A5:68:B1:F6:D0:DF:66:F0:29:5E:9A:CB:8C:CF:B1:56:FB
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019D5594402C8C28DAF30E3EB065F4FD7159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 059D
Signing time: Fri 03 Apr 2026 23:01:12 +0000
Manifest this update: Fri 03 Apr 2026 23:01:12 +0000
Manifest next update: Sat 04 Apr 2026 23:01:12 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: nbxV/iq9AO2WV0PHF131KSwQk7n8/bQ10+7nvdTUmWo=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Apr 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:55:94:40:2c:8c:28:da:f3:0e:3e:b0:65:f4:fd:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Apr 3 23:01:12 2026 GMT
Not After : Apr 4 23:01:12 2026 GMT
Subject: CN=613ad8a568b1f6d0df66f0295e9acb8ccfb156fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:5e:43:b8:b2:76:bd:80:62:cd:d5:95:a9:
bb:e6:bd:26:5f:ff:13:0a:b8:9b:51:21:d9:11:6b:
b6:90:c1:fb:dd:ef:f3:23:5d:17:23:36:ef:2d:5a:
3f:90:25:25:ba:f1:c1:29:e1:76:22:fa:52:4d:21:
de:98:1a:cd:fb:24:3e:7d:05:77:ca:bc:47:6b:cd:
a7:c5:15:5c:f0:3f:28:42:33:d0:bc:3f:b1:d3:4c:
46:73:a3:d3:0c:cd:ad:cf:87:ab:8a:de:d6:5c:97:
42:81:ed:a0:bf:a9:35:37:4a:bd:9c:1c:fe:eb:37:
90:3d:e3:d3:ad:88:fd:0d:1f:7f:83:6b:28:e3:d4:
a3:04:bd:52:d9:d2:43:2b:5f:60:6e:c5:99:ba:bb:
0b:3a:69:15:b0:c8:18:83:07:50:dc:19:64:c1:92:
41:90:a8:7b:1d:3e:1c:73:75:90:31:11:3b:07:09:
26:62:87:73:3c:4a:d9:d4:9d:8f:45:14:e6:11:3d:
78:d6:71:3d:f0:35:60:c7:5e:eb:07:43:7c:86:40:
fc:09:ea:ee:de:57:2e:92:52:2e:95:78:3a:6f:55:
75:58:20:5d:a9:da:54:55:0f:8f:62:e8:e5:36:3a:
5b:ad:2e:69:86:e4:ef:1e:66:2b:68:32:2d:21:63:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3A:D8:A5:68:B1:F6:D0:DF:66:F0:29:5E:9A:CB:8C:CF:B1:56:FB
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cf:23:95:02:f8:97:9b:f4:ea:da:f0:1d:6b:a4:ec:25:a6:
75:23:59:03:ad:f8:62:9f:ce:00:db:81:18:59:87:63:63:4d:
c2:45:fd:16:80:70:5b:e6:38:8f:80:88:bb:86:3c:a4:b1:60:
31:4e:73:4f:96:e1:4f:5e:8e:02:77:2f:5a:b1:0e:d0:c3:7c:
70:75:aa:24:19:3f:e8:16:99:24:7d:52:86:4d:8a:1e:46:26:
1d:c2:b4:e4:38:42:dd:6e:56:cc:d3:d2:aa:5e:3e:72:09:a6:
07:f1:19:73:42:d3:c3:08:fa:53:92:ae:4d:af:47:3a:8c:14:
a4:3c:47:23:ad:01:53:32:94:fa:9b:e1:b2:b1:a1:b2:df:7f:
f5:b1:b8:ea:2c:90:d4:6a:8b:c7:6d:6e:48:e4:bb:10:47:04:
67:29:d6:19:5c:59:7f:a3:50:4d:df:c7:5e:6e:0d:65:0c:2b:
19:e7:a7:34:2a:91:60:08:9e:1e:57:16:1b:3b:65:49:09:6f:
c2:69:58:f7:80:42:df:60:2e:42:f2:1c:c8:f1:91:af:14:79:
94:28:72:3b:ee:d0:0b:29:72:a1:00:3f:e4:d4:48:7a:d8:73:
48:d5:e7:16:75:6e:27:e5:d9:21:55:8f:91:e8:7d:c0:cb:66:
57:59:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 01:54:57 2026 by rpki-client