Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: KkLBXZM7H+mBdE7LmCuoi9qomrK6N3g98bmZSFwQ6xY=
Subject key identifier: 6D:FA:A3:25:1E:C5:9A:0B:20:F3:5A:EE:22:40:9F:44:D2:C7:D5:93
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 01A001DD60F19F94E808CE0E1DCE5AFF2902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 20:01:20 +0000
Manifest this update: Fri 14 Aug 2026 20:01:20 +0000
Manifest next update: Sat 15 Aug 2026 20:01:20 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: 7gpeoA7w4iyNvTKlyTWhIX65WD0BqTlcvFlYj35naig=)
2: 5P2AqR4dtygfqcMyJGY9YwMXZmo.roa (hash: plYfXtpKsLLxZP4A30RARMsnKevfGvWHOU+I9QD0I+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:60:f1:9f:94:e8:08:ce:0e:1d:ce:5a:ff:29:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Aug 14 20:01:20 2026 GMT
Not After : Aug 15 20:01:20 2026 GMT
Subject: CN=6dfaa3251ec59a0b20f35aee22409f44d2c7d593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:e7:25:c8:00:1b:2d:d3:45:c0:7b:83:4e:
fb:8c:14:26:a3:e1:43:46:d7:de:35:86:f5:a6:26:
93:d6:4f:79:87:15:8f:8a:c1:2a:52:bb:83:c0:84:
96:d1:30:aa:ab:8d:c1:42:7b:e5:1a:11:ef:01:c1:
e7:f2:e4:92:99:cd:36:7c:0a:35:eb:5e:4d:39:27:
6d:b4:bf:e4:4c:62:c4:7b:03:7e:4a:f1:6b:74:4f:
a4:9d:3c:7c:61:e5:ef:1b:6a:cb:9e:de:7d:d9:b5:
c8:5b:33:39:6c:a2:9e:0b:3f:e3:4b:25:b6:30:16:
5e:74:b5:cb:ad:c1:45:b8:37:c0:8c:d9:f6:d7:d0:
e9:e2:92:fe:4b:e3:50:0e:b0:17:eb:92:48:d5:08:
33:54:2d:a7:3d:4d:f1:ff:98:ec:cc:2e:58:a6:98:
91:5b:ca:b9:13:b5:18:cc:53:3e:8d:56:20:e9:8d:
54:6b:2d:f7:9e:93:3f:df:a6:e0:dc:b6:f3:7c:09:
62:7b:e9:44:d3:74:88:08:6e:66:a6:c5:05:07:32:
52:e9:7f:37:87:80:e0:e5:ba:82:da:ae:00:d0:5b:
ce:2b:73:e5:50:b7:2b:b4:fa:26:01:9a:97:ff:bc:
7f:f7:9c:14:0e:d8:2c:7f:c2:47:18:31:7f:bb:0b:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FA:A3:25:1E:C5:9A:0B:20:F3:5A:EE:22:40:9F:44:D2:C7:D5:93
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b7:21:52:20:61:79:63:d4:71:38:10:38:c3:97:a1:f9:b2:
ad:4a:39:19:e4:4d:d6:15:ed:bc:75:49:fc:e8:b5:d8:59:19:
d9:52:09:2a:ec:a6:6e:9b:e4:af:07:65:71:62:f9:45:59:d7:
2f:79:db:5a:45:7a:55:93:4c:60:48:f1:0e:af:a9:73:16:56:
b9:9e:92:bb:0e:82:1a:fa:b6:f3:d3:ac:cb:27:fa:31:be:fe:
c2:ad:c2:a7:06:0a:4b:47:da:e8:8d:52:79:dd:48:df:e9:1a:
d8:bf:07:02:5a:11:7b:20:c8:a1:03:a9:04:e7:88:e8:c1:f5:
0d:cd:1a:22:df:45:39:d5:d2:f2:4b:fc:d5:f1:6e:bd:c1:8e:
f8:47:01:15:b1:2d:66:fd:90:cf:bc:a4:70:b3:8d:dd:74:50:
3a:87:5a:95:46:c1:21:fb:be:96:43:7b:0b:57:76:c9:21:c8:
82:25:ad:02:97:ac:c3:aa:f9:7c:75:a1:a1:54:76:7a:02:30:
29:81:08:3b:7c:c8:cd:90:f2:d1:bd:70:37:32:f3:6b:2b:fd:
ef:3a:37:cf:04:45:5d:26:72:da:8e:39:c5:61:54:1b:dc:72:
2b:8a:bd:cd:a6:79:30:8c:bf:c0:b8:ef:c2:1b:2d:ff:41:4d:
ac:1b:e0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:43 2026 by rpki-client