Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: fl+sCCDUUjttgP4r62T8E1lvbWh6rtm7qxbRvXo0kOI=
Subject key identifier: D2:6F:E3:55:13:85:A7:DB:DE:69:EF:5B:3D:D3:A1:14:70:92:AF:8E
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 01A16E6D73C9013DE6F26CBA86AA527D5AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 1ABD
Signing time: Sat 24 Oct 2026 15:00:29 +0000
Manifest this update: Sat 24 Oct 2026 15:00:29 +0000
Manifest next update: Sun 25 Oct 2026 15:00:29 +0000
Files and hashes: 1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: gPPe6dFd6qEKn/Bh2G11LX3PUiG/U4eFSo0a1IvYhms=)
2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:6d:73:c9:01:3d:e6:f2:6c:ba:86:aa:52:7d:5a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Oct 24 15:00:29 2026 GMT
Not After : Oct 25 15:00:29 2026 GMT
Subject: CN=d26fe3551385a7dbde69ef5b3dd3a1147092af8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:83:ff:9f:c5:5e:25:34:50:ab:c9:6d:75:
d5:14:8c:51:75:e0:e7:60:7e:06:2e:60:c6:07:4d:
7c:6c:d2:56:65:41:da:47:58:7f:00:4a:21:42:57:
d5:45:ca:55:bd:bf:93:cf:75:e3:b8:60:3f:83:5f:
98:9a:82:0d:6a:9f:54:80:34:8d:76:fa:03:72:ff:
f8:54:b4:c6:ef:61:5e:b7:af:be:bf:cb:8e:b3:89:
3a:32:fe:09:88:ea:fe:13:d8:8b:41:26:92:d5:10:
18:c5:97:bf:fd:42:53:6c:00:55:bb:9e:d9:dd:0d:
e4:89:7d:20:b5:80:2c:07:5b:9b:7d:52:a6:5a:21:
0c:6a:a2:c4:a5:49:b3:ed:f8:f7:92:73:a9:a3:97:
72:ce:13:2b:5b:0b:f2:e5:b7:b6:bd:f9:37:79:36:
72:dd:87:97:41:c7:c6:fc:95:ef:d4:9e:0e:ca:30:
db:39:fd:5a:fb:69:83:3e:2b:69:82:af:9b:03:2e:
a9:23:8a:3a:41:6b:fa:ed:d7:8e:4f:7e:d5:45:21:
f1:b3:39:9e:c3:55:54:60:cb:77:52:45:37:47:80:
ac:4f:40:18:a7:7d:a8:e1:76:1b:26:1c:6c:5f:bf:
8c:c1:7e:04:52:52:06:85:e5:26:ce:fa:db:d5:39:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:E3:55:13:85:A7:DB:DE:69:EF:5B:3D:D3:A1:14:70:92:AF:8E
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f1:82:10:4d:65:23:01:6a:7a:70:35:d9:38:95:74:52:04:
ac:ef:ce:a1:4b:d7:c8:fa:ff:42:ef:55:f9:84:d0:b9:6d:d4:
b5:65:1f:26:f5:84:40:75:96:95:31:da:cc:f4:6c:ac:ea:e9:
b0:70:5d:aa:22:6d:bb:ad:e2:ab:ad:d1:80:66:ee:ca:2b:af:
14:42:db:93:96:8c:dc:c8:5b:f1:03:a3:7f:8b:20:b0:b0:1b:
ce:a4:47:ce:9f:55:ac:49:f0:06:4e:6a:13:c8:93:72:d4:61:
72:61:48:f7:4c:b4:83:44:6e:5e:c5:00:04:38:ba:4e:3a:7d:
9e:7b:4d:1a:a4:18:e6:3e:19:97:9a:71:70:21:e4:0b:cb:51:
d7:0c:17:e5:32:c8:f8:e3:2a:56:ae:9e:ac:17:e0:ef:09:c2:
50:a3:4b:0b:04:d3:c8:96:36:1f:d5:85:22:c1:f2:a6:9e:03:
10:51:32:32:1b:d7:0d:a1:99:04:3e:f4:e3:bf:be:1c:b3:b6:
0d:f4:40:5d:90:5a:e4:1f:72:51:3a:f7:ef:31:ab:6e:0d:ed:
d2:e7:aa:2c:79:a6:c4:ed:9f:77:44:a7:56:df:12:40:e9:78:
a7:3a:25:c7:49:1d:7b:d2:a6:3f:52:01:6d:86:e4:6c:a2:2c:
70:77:a8:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFubXPJAT3m8my6hqpSfVr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGNkNDRlYmJlM2QwZDZhMDcyZTc1MTAzZjIzMTYwNjk5
NWY2YWIwHhcNMjYxMDI0MTUwMDI5WhcNMjYxMDI1MTUwMDI5WjAzMTEwLwYDVQQD
EyhkMjZmZTM1NTEzODVhN2RiZGU2OWVmNWIzZGQzYTExNDcwOTJhZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6KD/5/FXiU0UKvJbXXVFIxRdeDn
YH4GLmDGB018bNJWZUHaR1h/AEohQlfVRcpVvb+Tz3XjuGA/g1+YmoINap9UgDSN
dvoDcv/4VLTG72Fet6++v8uOs4k6Mv4JiOr+E9iLQSaS1RAYxZe//UJTbABVu57Z
3Q3kiX0gtYAsB1ubfVKmWiEMaqLEpUmz7fj3knOpo5dyzhMrWwvy5be2vfk3eTZy
3YeXQcfG/JXv1J4OyjDbOf1a+2mDPitpgq+bAy6pI4o6QWv67deOT37VRSHxszme
w1VUYMt3UkU3R4CsT0AYp32o4XYbJhxsX7+MwX4EUlIGheUmzvrb1TniYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJv41UThafb3mnvWz3ToRRwkq+OMB8GA1UdIwQY
MBaAFDsM1E6749DWoHLnUQPyMWBplfarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYt
ZjdkYTNiODczMmJmLzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYtZjdkYTNiODczMmJm
LzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPGCEE1l
IwFqenA12TiVdFIErO/OoUvXyPr/Qu9V+YTQuW3UtWUfJvWEQHWWlTHazPRsrOrp
sHBdqiJtu63iq63RgGbuyiuvFELbk5aM3Mhb8QOjf4sgsLAbzqRHzp9VrEnwBk5q
E8iTctRhcmFI90y0g0RuXsUABDi6Tjp9nntNGqQY5j4Zl5pxcCHkC8tR1wwX5TLI
+OMqVq6erBfg7wnCUKNLCwTTyJY2H9WFIsHypp4DEFEyMhvXDaGZBD7047++HLO2
DfRAXZBa5B9yUTr37zGrbg3t0ueqLHmmxO2fd0SnVt8SQOl4pzolx0kde9KmP1IB
bYbkbKIscHeomA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:01:26 2026 by rpki-client