Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: JedE7XgXB8fVXEc4cshdRB0ncATlGzqAq4/Psy8T4Do=
Subject key identifier: 76:36:A5:F3:86:55:F7:A5:A3:68:9B:F4:E9:58:C4:85:E5:2F:88:88
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 019D371BFA5C36F582F8EAC54D2AE179D4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 0805
Signing time: Sun 29 Mar 2026 01:01:13 +0000
Manifest this update: Sun 29 Mar 2026 01:01:13 +0000
Manifest next update: Mon 30 Mar 2026 01:01:13 +0000
Files and hashes: 1: KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa (hash: Sr5K6ccTAcON+APYQXJhtPURh7qUu9XiFdatnlSg6xs=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: qNANSZZ/3VwgeIOZtcmE/Swp3bSCMzZGW2yrT9ubhDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fa:5c:36:f5:82:f8:ea:c5:4d:2a:e1:79:d4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Mar 29 01:01:13 2026 GMT
Not After : Mar 30 01:01:13 2026 GMT
Subject: CN=7636a5f38655f7a5a3689bf4e958c485e52f8888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:77:7c:f9:a4:37:10:dd:1b:8f:ab:e4:c8:
1e:39:c7:14:40:63:53:ab:7d:5a:2a:e4:88:2b:78:
d7:6b:9c:ac:7f:24:a0:70:2a:b2:d3:38:96:a6:c4:
42:44:c3:9c:d4:4d:f9:23:11:86:82:0f:c9:4f:62:
6d:a5:58:91:05:5f:77:e7:1a:e6:a4:80:cc:dd:7f:
f6:20:5a:bd:51:d0:33:8d:9e:75:57:9d:9a:5b:ba:
2f:86:f1:0b:18:3a:fd:3b:cf:43:51:4a:a9:1b:51:
15:12:3d:d7:65:0d:b2:e0:5a:3c:ef:e0:a6:8f:ea:
ee:5c:1c:b2:64:07:db:07:ce:2b:8c:81:59:80:5b:
d1:71:ac:96:a7:bd:d2:af:f3:fd:97:ea:ed:89:ce:
ad:85:98:85:ee:c2:7d:34:46:2c:cf:13:ca:ac:87:
9e:e6:6a:a9:12:2b:f6:37:82:4c:a6:dd:44:1b:e7:
40:eb:b6:bc:e1:59:27:7c:c9:0d:8e:f3:fe:60:fd:
97:01:ad:1f:fe:85:3a:a2:81:ed:d2:86:97:26:af:
8d:c1:9c:d0:e3:ad:55:a8:e9:0f:05:78:45:cd:f8:
e4:b6:34:d3:35:e8:22:9a:bb:3a:6f:04:20:b6:09:
44:95:75:17:5e:d8:77:68:e6:ee:43:ea:df:22:84:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:36:A5:F3:86:55:F7:A5:A3:68:9B:F4:E9:58:C4:85:E5:2F:88:88
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1c:8a:79:6d:4d:bf:12:4f:66:d1:ba:e4:e6:b0:db:9e:cc:
ac:28:03:87:50:36:13:dd:52:31:fb:95:b5:f5:72:da:50:c0:
db:b8:fd:db:19:b4:85:7f:52:7d:79:f1:73:0d:fc:e2:50:f8:
d7:ad:5e:7d:0a:03:be:a4:b7:08:e9:e7:2d:9e:a0:87:06:32:
2c:73:5c:1e:7c:27:ae:9c:c2:54:58:a0:6a:98:56:8a:b8:89:
05:9d:69:42:7d:39:ca:c1:5c:79:62:28:bd:2c:cd:e0:e5:49:
cb:d3:2d:d0:91:b2:f3:92:77:b8:96:5a:88:4f:a5:e1:f9:86:
97:76:4c:4d:ca:9e:4e:8b:58:e8:2e:9e:ef:3d:da:68:f8:77:
c6:be:2a:eb:d0:92:74:75:55:49:40:e5:4b:6a:dd:da:8a:e6:
b7:2b:25:4f:ef:ac:3b:0b:b5:8c:c2:81:50:06:70:92:f2:6c:
a7:80:2e:1a:3b:dd:0b:37:2f:e9:52:0c:b8:07:6c:c3:c8:75:
cd:a9:63:1e:65:dd:ca:12:ab:b6:1d:85:12:c5:12:68:19:46:
22:47:db:a6:e5:6e:b4:74:32:a7:aa:95:61:82:b1:8f:f2:11:
7f:7d:6e:fe:83:d5:f7:6b:7c:2e:09:50:8c:f5:c1:4a:5c:50:
3b:1e:3c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:54 2026 by rpki-client