Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: rHzCLavP6BMDfwSa2j/q4kQ3bBY3nX1eZqv7RvtGfXc=
Subject key identifier: 21:5E:E7:8D:D1:54:40:1A:B6:66:2D:3A:A8:33:B4:2C:BE:F4:C5:C5
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019D37F75D2152AD31BB234D142A38DE0FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: 1-B9Lbj4pKvZfeBlVCluXyZACLgE.roa (hash: dl5qiVx2ohz/ydT7WDU0tUmGSb6dlLqmyduAUAaYC4s=)
2: jSutCugEdF2rS6QxHHGZRxPxhsI.asa (hash: zjJ0AX5FLYwkWoWkgoUko8ALZitnQgcsownFmhLIYFw=)
3: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: ZBXMXjR8W6DoK0LO9Gc22/fV+oB6Xxq2zNnH7rEXr3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5d:21:52:ad:31:bb:23:4d:14:2a:38:de:0f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=215ee78dd154401ab6662d3aa833b42cbef4c5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:4e:a4:2d:07:24:ac:4f:3d:fa:ef:9b:40:
fa:83:12:a2:eb:d6:75:19:6d:31:96:57:1c:07:fd:
28:3e:ea:0a:48:72:2c:4a:3d:96:92:07:c7:f9:a4:
e9:75:d1:d5:80:5d:ce:36:c0:40:c3:fc:a6:c3:ad:
68:98:6b:56:96:59:51:3a:65:9a:85:ac:b4:13:f4:
51:f8:b0:2c:2e:cf:7e:8a:ec:87:7a:2b:d0:38:c2:
6b:9c:cb:17:9f:18:91:5d:49:7e:50:81:7c:fb:cc:
d6:e5:9a:01:92:3b:06:f5:1c:14:c1:fe:b8:17:f2:
f7:b2:dc:37:a0:37:55:8f:af:00:7a:2d:9b:d2:6a:
7a:2e:5c:0c:45:4c:51:92:38:ca:e0:b9:43:22:85:
e4:3e:70:7f:42:a9:5f:fa:86:3b:5b:23:75:0c:bf:
c1:5d:a6:2a:a8:d9:9a:0d:75:0f:04:a9:4d:28:05:
69:b4:ee:32:53:d7:98:5d:bc:0d:77:e3:c0:2d:24:
d3:d1:b3:60:e9:e2:43:08:cb:d0:ee:2a:cd:48:99:
2c:26:7f:c3:60:4f:95:94:c1:30:be:5a:d6:c2:88:
67:3d:9a:58:23:d5:a7:9d:b8:18:bb:71:de:46:cb:
e6:41:1d:a9:95:4c:af:a8:35:51:88:59:62:dc:c9:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5E:E7:8D:D1:54:40:1A:B6:66:2D:3A:A8:33:B4:2C:BE:F4:C5:C5
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a0:78:a4:e7:f7:e8:6b:4b:ef:b2:90:44:c7:30:dc:c5:20:
ad:9d:1e:6f:b9:41:de:7f:98:44:6d:e2:42:80:80:29:38:43:
74:d7:94:1d:c9:c0:b4:67:93:ee:1c:96:c7:f9:39:ca:2f:2c:
86:6d:53:3d:4f:3f:df:e7:fb:b7:0e:fa:d1:df:6f:4f:b5:28:
1c:c0:3e:60:e0:9b:32:2a:94:4c:69:52:00:c6:b8:c1:11:f5:
e7:80:5c:99:e6:42:1d:3f:e3:ad:f1:29:f8:c7:e9:e0:02:e9:
d4:ef:fd:5b:a8:d4:36:09:b1:a2:38:50:6c:63:f4:d0:c8:22:
bc:76:cd:2a:9b:28:6e:28:2d:3c:3f:e7:94:03:23:f4:c2:7b:
6e:bc:75:da:e4:3d:7d:77:14:87:c8:4e:be:f0:4b:6f:fc:23:
b4:04:3f:45:08:e7:a1:ad:dc:84:b2:e0:0c:f8:c3:28:46:9b:
ca:8a:0d:ca:29:f4:d6:38:85:0f:2f:75:c7:5a:b1:00:24:ae:
9a:fb:a6:da:6c:90:cc:f5:84:6c:cc:f0:b2:21:98:a0:3e:74:
cb:67:71:d4:f4:a9:ab:fa:89:75:82:a0:ad:10:72:11:03:95:
45:4b:71:c3:bd:cc:34:76:46:d3:4f:33:5c:a4:51:8b:af:b6:
93:64:63:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03910hUq0xuyNNFCo43g+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGRkYWE3NDk0ZDY5YmExY2FjYjQ1N2VmOTFiNmRjZDIy
ZThkZDkwHhcNMjYwMzI5MDUwMDUxWhcNMjYwMzMwMDUwMDUxWjAzMTEwLwYDVQQD
EygyMTVlZTc4ZGQxNTQ0MDFhYjY2NjJkM2FhODMzYjQyY2JlZjRjNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyohOpC0HJKxPPfrvm0D6gxKi69Z1
GW0xllccB/0oPuoKSHIsSj2WkgfH+aTpddHVgF3ONsBAw/ymw61omGtWlllROmWa
hay0E/RR+LAsLs9+iuyHeivQOMJrnMsXnxiRXUl+UIF8+8zW5ZoBkjsG9RwUwf64
F/L3stw3oDdVj68Aei2b0mp6LlwMRUxRkjjK4LlDIoXkPnB/Qqlf+oY7WyN1DL/B
XaYqqNmaDXUPBKlNKAVptO4yU9eYXbwNd+PALSTT0bNg6eJDCMvQ7irNSJksJn/D
YE+VlMEwvlrWwohnPZpYI9WnnbgYu3HeRsvmQR2plUyvqDVRiFli3MkwnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFe543RVEAatmYtOqgztCy+9MXFMB8GA1UdIwQY
MBaAFKMN2qdJTWm6HKy0V++RttzSLo3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTIt
NjU0NGEyYjk5ODE3LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTItNjU0NGEyYjk5ODE3
LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6B4pOf3
6GtL77KQRMcw3MUgrZ0eb7lB3n+YRG3iQoCAKThDdNeUHcnAtGeT7hyWx/k5yi8s
hm1TPU8/3+f7tw760d9vT7UoHMA+YOCbMiqUTGlSAMa4wRH154BcmeZCHT/jrfEp
+Mfp4ALp1O/9W6jUNgmxojhQbGP00MgivHbNKpsobigtPD/nlAMj9MJ7brx12uQ9
fXcUh8hOvvBLb/wjtAQ/RQjnoa3chLLgDPjDKEabyooNyin01jiFDy91x1qxACSu
mvum2myQzPWEbMzwsiGYoD50y2dx1PSpq/qJdYKgrRByEQOVRUtxw73MNHZG008z
XKRRi6+2k2RjvQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:27 2026 by rpki-client