Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: Mju/3WsFEzmofUHbAJz7g9Pyhy72IYGgl1MKb6ZF52Y=
Subject key identifier: 40:C5:C4:3F:55:0D:82:9F:D7:78:BB:9F:F9:B9:0E:8C:20:23:1F:D7
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 01A14014D743AA04FA0FA8C81D2FE3024B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 15:01:09 +0000
Manifest this update: Thu 15 Oct 2026 15:01:09 +0000
Manifest next update: Fri 16 Oct 2026 15:01:09 +0000
Files and hashes: 1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: meu8EIIbEqIJja6cg/0q/ssRp3oSXraWoNv6J6eZjTU=)
2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:d7:43:aa:04:fa:0f:a8:c8:1d:2f:e3:02:4b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Oct 15 15:01:09 2026 GMT
Not After : Oct 16 15:01:09 2026 GMT
Subject: CN=40c5c43f550d829fd778bb9ff9b90e8c20231fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:f8:cc:27:78:8c:53:4e:c5:2f:65:81:4e:
ad:2d:5d:18:fd:46:69:f3:98:74:a9:ef:56:d3:98:
a9:9b:cd:2d:fa:12:d5:68:4c:c5:e4:81:74:d1:11:
97:8b:a5:69:e8:79:d3:e5:44:b1:50:c7:4c:ae:dd:
89:c8:38:ad:2b:b6:dc:05:c2:f8:91:3e:96:25:d9:
a8:de:af:93:11:bd:40:0d:da:b3:2c:3f:ce:7e:78:
7a:53:b5:d3:05:10:ba:a8:53:45:2d:fd:19:7c:fa:
d9:a2:3b:00:65:01:10:c4:d0:9f:46:47:e5:ba:6b:
6c:49:1c:60:f8:c2:2c:09:17:f6:8c:c9:a7:ee:fd:
67:b9:a4:8a:ae:5f:0d:72:24:a2:41:5e:7a:4c:ad:
33:55:ae:77:5c:7c:2f:35:cb:c1:45:8d:3d:2a:d6:
b6:37:35:c2:6c:da:14:61:0f:58:2d:78:cb:13:cc:
f3:86:72:d5:ea:c1:64:e0:9c:c2:a3:b3:55:8f:cf:
fd:c7:66:23:a4:32:0b:1e:85:7f:16:4f:13:e0:81:
bd:e5:42:fa:55:c6:c3:16:8b:e6:f7:11:26:16:45:
40:37:25:87:85:f6:c5:94:9e:86:21:57:b1:47:a2:
a7:90:03:90:26:37:06:73:14:37:b8:b5:60:0a:98:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C5:C4:3F:55:0D:82:9F:D7:78:BB:9F:F9:B9:0E:8C:20:23:1F:D7
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fe:cc:67:60:7c:86:80:aa:12:5c:d6:08:78:65:c9:64:22:
de:00:d8:b7:8a:0e:9a:f3:6c:63:e4:fd:e3:18:fe:a1:dd:c9:
b1:ef:58:7c:a3:2b:6e:3f:00:79:64:05:06:58:96:45:72:04:
aa:5d:e4:79:c2:7a:2e:b5:68:75:11:27:d5:2f:0c:fe:91:47:
83:26:c3:ed:09:7a:3c:1f:15:c4:b7:29:50:b3:10:4f:f8:3c:
8d:80:7a:bb:5b:7f:03:c9:0a:9d:09:02:ee:53:b9:53:68:54:
55:e8:31:cb:37:a6:7f:8a:54:d9:4d:6a:fc:9f:af:6c:4d:02:
ac:c0:1d:01:e0:e5:50:80:a7:82:2f:82:52:d0:2c:25:d6:b5:
da:fb:c6:91:c1:56:4f:69:ec:7f:ba:fc:56:dc:51:09:bb:2a:
64:86:ae:ed:14:0c:99:80:88:e5:72:77:bc:1a:4a:b6:95:9e:
59:81:83:24:a5:08:fb:66:7a:1f:f3:9d:f9:8f:24:86:ca:22:
89:6c:61:8d:96:20:e0:96:e9:e8:26:3f:7a:de:99:5a:f3:21:
d9:01:a7:4f:06:11:9a:65:79:7d:20:00:56:81:c6:14:99:36:
17:f1:e6:50:ff:2b:b3:fe:0b:6a:f6:9f:8b:b9:68:07:3d:ca:
8b:70:ba:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFNdDqgT6D6jIHS/jAksbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGNkNDRlYmJlM2QwZDZhMDcyZTc1MTAzZjIzMTYwNjk5
NWY2YWIwHhcNMjYxMDE1MTUwMTA5WhcNMjYxMDE2MTUwMTA5WjAzMTEwLwYDVQQD
Eyg0MGM1YzQzZjU1MGQ4MjlmZDc3OGJiOWZmOWI5MGU4YzIwMjMxZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z/4zCd4jFNOxS9lgU6tLV0Y/UZp
85h0qe9W05ipm80t+hLVaEzF5IF00RGXi6Vp6HnT5USxUMdMrt2JyDitK7bcBcL4
kT6WJdmo3q+TEb1ADdqzLD/Ofnh6U7XTBRC6qFNFLf0ZfPrZojsAZQEQxNCfRkfl
umtsSRxg+MIsCRf2jMmn7v1nuaSKrl8NciSiQV56TK0zVa53XHwvNcvBRY09Kta2
NzXCbNoUYQ9YLXjLE8zzhnLV6sFk4JzCo7NVj8/9x2YjpDILHoV/Fk8T4IG95UL6
VcbDFovm9xEmFkVANyWHhfbFlJ6GIVexR6KnkAOQJjcGcxQ3uLVgCphz7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDFxD9VDYKf13i7n/m5DowgIx/XMB8GA1UdIwQY
MBaAFDsM1E6749DWoHLnUQPyMWBplfarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYt
ZjdkYTNiODczMmJmLzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYtZjdkYTNiODczMmJm
LzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/7MZ2B8
hoCqElzWCHhlyWQi3gDYt4oOmvNsY+T94xj+od3Jse9YfKMrbj8AeWQFBliWRXIE
ql3kecJ6LrVodREn1S8M/pFHgybD7Ql6PB8VxLcpULMQT/g8jYB6u1t/A8kKnQkC
7lO5U2hUVegxyzemf4pU2U1q/J+vbE0CrMAdAeDlUICngi+CUtAsJda12vvGkcFW
T2nsf7r8VtxRCbsqZIau7RQMmYCI5XJ3vBpKtpWeWYGDJKUI+2Z6H/Od+Y8khsoi
iWxhjZYg4Jbp6CY/et6ZWvMh2QGnTwYRmmV5fSAAVoHGFJk2F/HmUP8rs/4Lavaf
i7loBz3Ki3C6aA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:10:00 2026 by rpki-client