Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: aflVTz6OuHmeeHtyzR65EuhurzaFT1Hi6PByn8UJl8w=
Subject key identifier: 83:47:59:46:61:CC:4B:9B:C8:3F:7E:1B:F5:A2:1E:17:38:FF:C3:2D
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019F111BC9160CDE9A673B5166FFA753920A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 198B
Signing time: Mon 29 Jun 2026 02:01:01 +0000
Manifest this update: Mon 29 Jun 2026 02:01:01 +0000
Manifest next update: Tue 30 Jun 2026 02:01:01 +0000
Files and hashes: 1: 1-B9Lbj4pKvZfeBlVCluXyZACLgE.roa (hash: dl5qiVx2ohz/ydT7WDU0tUmGSb6dlLqmyduAUAaYC4s=)
2: jSutCugEdF2rS6QxHHGZRxPxhsI.asa (hash: zjJ0AX5FLYwkWoWkgoUko8ALZitnQgcsownFmhLIYFw=)
3: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: oUaQtarPm7/ymYnSUfwtLuERkqVwEzz3+moGB6T0Jzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:c9:16:0c:de:9a:67:3b:51:66:ff:a7:53:92:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Jun 29 02:01:01 2026 GMT
Not After : Jun 30 02:01:01 2026 GMT
Subject: CN=8347594661cc4b9bc83f7e1bf5a21e1738ffc32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bd:50:af:3d:d4:ae:c9:06:b7:f3:16:75:85:
39:3f:35:48:07:1d:c8:77:4a:83:f3:f3:3e:15:a6:
18:d0:7b:72:09:ac:48:88:73:4a:d0:a5:00:46:a0:
30:f0:19:80:ef:31:92:09:9b:0a:54:89:a9:44:cd:
4a:f9:92:c4:67:f4:e6:87:ed:e1:c0:69:00:d6:25:
f8:55:9e:7b:f7:0d:bb:67:8e:d4:52:26:0f:88:55:
b6:00:54:2c:7c:0c:77:d8:b9:11:b7:5b:de:56:d2:
20:6f:96:db:03:27:df:90:96:25:35:5d:6f:13:f5:
81:5d:20:bc:0f:36:4e:59:6e:fe:76:88:c3:5c:39:
72:97:3e:31:6a:f4:3f:75:2d:36:36:82:65:61:8d:
9d:7a:fc:a0:a7:f6:c6:f3:e4:d2:fe:df:49:07:21:
60:81:9f:eb:a3:16:18:48:51:72:1d:65:48:ba:a0:
f4:5d:da:11:08:c6:4b:72:97:60:0c:70:66:e7:7f:
db:b9:d8:0d:c6:80:00:34:bd:20:4f:ec:9d:ec:9e:
99:6f:bd:70:8b:00:00:3b:eb:d2:c7:73:e0:2c:be:
3f:d3:90:7e:c2:a8:3f:2e:43:32:67:6e:a1:16:2d:
dd:ed:bc:83:2e:4e:a8:d3:25:46:f7:bc:60:66:10:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:59:46:61:CC:4B:9B:C8:3F:7E:1B:F5:A2:1E:17:38:FF:C3:2D
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:52:fa:56:58:d9:d5:de:09:f0:09:7b:3a:33:87:59:c5:f6:
6e:a7:75:f4:cf:64:54:55:ac:a5:32:0f:78:4b:20:03:93:fd:
56:1c:9e:38:f0:48:92:87:68:c0:8e:6b:87:30:6a:f6:c7:ef:
48:0a:d4:9f:cd:66:75:6a:ce:77:36:7c:99:16:6d:7d:95:f0:
d7:0d:3c:23:5d:77:ca:21:9e:41:42:03:13:e1:97:83:f6:20:
1f:92:eb:54:67:c0:a9:e1:eb:bc:5b:9f:6c:8c:ae:32:72:9d:
25:c6:55:9c:f4:85:a7:3c:65:86:5c:80:c5:0c:a1:38:94:9c:
5a:50:3b:d6:4d:d8:65:3c:de:f3:40:63:b9:97:c4:a3:4d:95:
98:65:91:4a:b4:a0:76:9f:92:de:ef:f5:99:95:12:0f:d6:43:
5c:4b:07:25:ce:0c:85:f9:34:62:8f:27:e0:a3:9a:f3:ca:5a:
7f:68:65:38:54:2e:48:ce:be:67:b0:89:65:35:9c:2e:a3:3b:
7f:97:4b:0e:ba:68:ed:77:11:85:11:e3:34:c1:1b:84:5e:fe:
24:86:c7:2e:54:de:b7:bb:da:a3:de:0c:c6:ca:90:1e:b3:ff:
5e:2f:26:b2:9c:1d:96:25:b8:00:1d:72:da:88:92:71:e4:3c:
32:95:98:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:29 2026 by rpki-client