Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: 6ssOaENSHhQqrryXx3AOlEAxx9+byNypbGr+J4D7rTQ=
Subject key identifier: 3F:B0:3F:1E:6E:1D:2F:6C:FA:D1:3F:CD:F2:AF:BB:4A:A8:79:25:BB
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 019FFA246D6A821CE07B8C6148EC59EA01AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 19FC
Signing time: Thu 13 Aug 2026 08:01:58 +0000
Manifest this update: Thu 13 Aug 2026 08:01:58 +0000
Manifest next update: Fri 14 Aug 2026 08:01:58 +0000
Files and hashes: 1: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: SSECoVyu2/M9Vi7WftGnOB3rKWmFvx98KAwgzgj0uJE=)
2: ugHbkmXdGua5f0y0Vs2Xemi0uH0.roa (hash: pZtYRYjW92Xkn2YfI/y6vsMVwr2lyxUOL1/g29RbFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 08:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:24:6d:6a:82:1c:e0:7b:8c:61:48:ec:59:ea:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: Aug 13 08:01:58 2026 GMT
Not After : Aug 14 08:01:58 2026 GMT
Subject: CN=3fb03f1e6e1d2f6cfad13fcdf2afbb4aa87925bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:3e:b2:db:78:26:fb:90:5d:3a:b1:24:0e:
06:05:db:8e:83:92:a0:8f:9b:25:5c:ac:08:40:8c:
a1:39:b3:13:49:39:bb:71:fd:29:d1:ad:3f:7e:a1:
7c:11:46:b9:52:eb:0b:f0:4f:0e:a5:73:6f:4f:23:
e9:52:5a:54:5f:b5:c2:7f:e8:38:7d:3a:01:45:b8:
c1:0e:61:c5:7c:4f:58:5f:4b:fd:ae:cc:73:d5:b0:
07:f3:e0:63:d7:82:3d:d0:35:cf:47:24:90:ba:05:
ac:5c:17:a0:c7:10:2f:3d:53:b9:47:75:c8:78:5d:
f8:b4:25:cb:46:8c:93:4e:5d:10:6c:65:3e:db:8d:
6c:94:98:28:bf:36:c5:a1:d6:d7:17:ef:c2:f9:7a:
11:01:ba:d7:cf:19:b3:1d:77:85:31:9e:5c:4a:3a:
55:0b:08:1f:4b:27:92:59:61:57:f7:c9:ea:5f:6a:
64:17:c9:1e:17:7f:d1:bb:99:c3:14:34:a6:5f:a0:
e6:6d:a3:b8:59:f5:b0:48:70:76:d7:d9:83:57:48:
97:40:ef:7c:39:f2:db:a0:f7:04:11:0a:11:b8:e1:
9f:13:94:2b:d9:22:ca:24:39:da:d8:3d:a0:e9:cd:
9a:2c:34:17:d5:5b:a0:f3:d6:03:0e:26:fc:72:fb:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:3F:1E:6E:1D:2F:6C:FA:D1:3F:CD:F2:AF:BB:4A:A8:79:25:BB
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f1:1b:96:e3:64:d3:90:3c:d8:2e:3f:be:4c:75:84:ea:70:
b1:26:45:c1:28:35:ea:b3:1a:cd:23:d5:62:a2:86:f4:4d:8d:
6a:5b:25:1b:25:bc:3b:b7:ff:60:3f:79:f3:8f:f9:ca:45:03:
db:d9:0b:94:6d:58:0e:57:ea:3b:b2:7e:b2:07:93:dc:72:e3:
65:f5:ef:2b:f9:8e:e8:4d:34:68:b9:3d:55:32:39:86:c8:86:
ab:c7:67:26:16:a4:74:7e:4d:a9:85:0a:2c:b1:04:97:7f:cc:
23:80:95:44:6d:84:4c:5c:3d:39:c5:54:d2:a4:72:3b:88:3a:
1b:57:30:72:81:64:ea:53:c6:f0:b6:90:d5:2c:bc:f4:2d:bb:
21:4e:1c:1e:a3:35:c2:6b:90:31:13:16:50:b9:5c:7a:97:01:
5d:d8:e5:36:23:b9:05:f5:a8:39:47:8e:2c:27:b5:d3:9f:ca:
0e:3e:c3:bb:54:3a:7d:eb:bc:fb:dd:cc:09:d2:43:d9:82:d1:
e8:fb:c7:54:d9:3f:f4:bb:96:50:17:b2:b1:76:b0:0d:bd:90:
7b:20:e6:f1:fa:a5:c7:c1:e9:e3:d1:4f:1d:e3:16:5b:7e:0e:
8e:10:0c:38:50:a4:c2:21:e3:60:91:fe:2f:28:48:55:51:fd:
91:92:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 16:17:33 2026 by rpki-client