Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: 4ypujP9coqGWN9ICVCX2auKIbj9FLkW1HuWZnJg/na0=
Subject key identifier: 86:15:6A:DD:A3:A5:27:0D:35:4B:F8:16:7D:04:E2:01:B6:AA:83:97
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 019D38D3721D9395F1410F1F590A6F0AD0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: mC5lli/Y/cTvEinKxmd4PwdxtD0n/WuWpcIe5yhK/Ls=)
2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:72:1d:93:95:f1:41:0f:1f:59:0a:6f:0a:d0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=86156adda3a5270d354bf8167d04e201b6aa8397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9f:a8:af:2d:42:65:96:7d:7b:b2:eb:67:70:
be:a3:1f:ea:da:31:2e:99:b7:96:2c:21:e9:b2:d0:
de:8e:0e:d1:69:0f:72:29:34:73:dc:50:67:33:d9:
9c:53:23:c8:fd:89:7a:36:a3:59:02:a2:ed:d2:10:
99:72:e2:6e:11:33:59:a4:26:1d:8f:0c:43:72:bf:
d0:01:67:b3:d8:58:fb:5a:aa:b0:84:b5:99:9b:5b:
73:21:82:b6:f7:af:96:99:02:a0:1b:a6:8d:ae:46:
91:85:5a:3a:16:7e:0e:65:7b:cb:2a:f6:3c:c7:b4:
03:72:de:32:0d:7b:d3:6e:0c:e2:50:03:ac:cf:21:
18:dd:f8:b0:dc:9e:84:ac:4a:71:d4:63:b5:b8:e4:
62:9d:02:ed:c6:99:0b:9d:ed:e3:ec:f4:b5:a8:5a:
9c:ae:b3:5b:dd:f0:5d:7e:4c:d0:ec:5c:5e:bc:57:
14:c6:50:12:9e:0b:6e:aa:88:5e:8e:62:1b:90:67:
9f:58:ae:ca:68:ec:0c:ab:23:cd:ef:81:86:7f:ef:
05:35:6c:14:ca:71:c0:f4:46:4d:41:64:88:06:9b:
a4:18:d4:e9:78:92:28:06:c6:62:3c:c3:bf:2d:62:
22:cf:7c:73:8c:c8:47:17:aa:25:e5:aa:a3:77:19:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:6A:DD:A3:A5:27:0D:35:4B:F8:16:7D:04:E2:01:B6:AA:83:97
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:86:42:b0:59:fe:5d:d7:68:9b:9c:4f:4e:67:c3:0f:1f:1b:
d2:db:59:79:a8:a3:7b:4f:54:de:8b:82:b7:97:fe:6a:24:af:
e5:72:e4:ae:e3:4e:00:27:dc:99:fa:24:2e:e8:15:7b:ce:6e:
8d:0d:53:3f:13:71:51:db:24:9a:c7:e1:4a:63:4f:92:96:a4:
af:3b:07:b4:f1:61:a1:1c:00:f9:02:9d:22:13:96:57:1a:e0:
39:39:11:42:45:ee:59:03:f6:74:1c:79:94:ed:5a:49:16:2b:
1e:32:db:e8:9d:fa:7a:69:c0:41:20:b6:8a:66:c7:3c:94:fd:
29:97:1f:09:3f:69:d2:a2:4a:45:88:50:10:aa:d3:02:34:71:
0d:c8:98:75:7c:7e:e1:af:40:fb:05:32:de:2a:30:12:b3:0a:
65:f0:86:05:27:72:d5:3a:02:08:ca:27:d9:2c:07:52:fb:cb:
25:01:19:bf:c2:96:d9:47:c9:be:61:38:a3:64:29:38:0a:2b:
f2:ce:d1:95:33:17:e1:ef:06:19:9d:0f:68:cf:c5:91:9e:91:
39:c9:b8:3a:8a:88:35:95:0a:c1:08:35:41:2e:ce:56:86:2f:
93:cb:3b:b7:cd:8b:b5:e3:ff:d7:3f:4f:26:44:7e:db:d7:e4:
43:e6:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:28 2026 by rpki-client