Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: ENIcDc99kP3faR1rhK/319muftHJo04MgdSdExWP300=
Subject key identifier: A4:71:30:72:B7:3C:00:22:99:B9:CE:70:D4:A9:13:2E:3B:E3:0E:D9
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 01A140F107AC79738BABA3764D7917625CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1AAD
Signing time: Thu 15 Oct 2026 19:01:40 +0000
Manifest this update: Thu 15 Oct 2026 19:01:40 +0000
Manifest next update: Fri 16 Oct 2026 19:01:40 +0000
Files and hashes: 1: MJmEGSwkNgc6tWAjFHwsQalK-pc.roa (hash: zGylhLzO0uiWa1ShFqQYwTVVj/623FBQDk35JT6LjUg=)
2: jSutCugEdF2rS6QxHHGZRxPxhsI.asa (hash: zjJ0AX5FLYwkWoWkgoUko8ALZitnQgcsownFmhLIYFw=)
3: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: PfhD2zQUEu/ug3exbRMvoDIE6Oe//DuZLRGbgbIrxu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f1:07:ac:79:73:8b:ab:a3:76:4d:79:17:62:5c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Oct 15 19:01:40 2026 GMT
Not After : Oct 16 19:01:40 2026 GMT
Subject: CN=a4713072b73c002299b9ce70d4a9132e3be30ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:0d:9f:31:72:61:7b:ab:74:35:f8:c3:f1:
71:6f:99:22:83:41:39:07:e7:16:08:78:bb:e0:a6:
50:2b:cb:b5:33:2b:33:ee:6e:93:6c:e6:40:b0:9e:
b4:b2:ac:d7:cd:45:bd:c0:04:0d:3e:0c:fe:67:be:
37:e3:c5:aa:ce:3d:22:a5:ee:d2:92:67:0d:96:79:
9f:b8:c3:07:78:06:79:2b:00:f2:ae:04:e7:ab:d4:
ed:7f:59:f9:da:d9:d0:66:3e:38:d6:f0:d9:22:a5:
b4:9f:f2:f9:a9:96:69:de:0c:a8:88:41:9c:26:c4:
dd:59:9f:4c:ae:26:25:d8:d7:9c:0b:c3:ec:f1:20:
f7:4f:c9:24:5d:97:0d:68:1c:bd:6f:1b:8a:0d:5a:
4c:0a:c2:ad:e9:95:e8:35:47:f0:b3:78:78:8d:a9:
36:30:5a:67:7f:9d:f5:d0:30:44:d0:69:81:fe:c6:
c2:a4:0a:81:af:3e:ea:03:c9:94:78:41:92:a6:a1:
e9:ff:fb:90:59:6e:84:72:5f:43:08:ec:a3:b3:94:
aa:9a:53:c0:d8:96:bb:72:1a:5c:f5:e6:99:b8:f0:
e9:8e:17:a0:f2:33:07:a6:cc:60:2c:f7:5d:ed:f2:
d7:be:c4:ef:68:30:0e:33:2d:25:48:c5:10:dd:cd:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:71:30:72:B7:3C:00:22:99:B9:CE:70:D4:A9:13:2E:3B:E3:0E:D9
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a6:98:a4:91:5c:2c:f7:ed:8e:58:03:4c:2b:b6:18:32:be:
93:13:a6:7b:b3:8e:d3:55:af:ec:9a:15:e0:5a:72:79:4a:c7:
ff:f6:cd:be:34:18:b8:84:c1:55:9a:7c:9d:83:ce:5d:29:4c:
d1:6a:d5:60:0d:6b:e1:09:cf:90:27:67:22:76:39:fb:2a:f4:
4a:d9:14:f9:d4:52:3b:cf:38:8b:90:de:e7:77:fe:8f:40:3f:
46:48:54:30:2b:63:34:dc:34:ac:4b:70:63:d3:c5:5e:2b:60:
80:7c:3f:eb:a5:61:d8:cc:bc:7a:b0:43:57:7b:b6:09:8e:26:
56:d1:7e:c8:ae:2d:2b:9b:a3:75:d5:00:db:79:3e:ff:7c:61:
7a:54:cd:a7:7c:98:b8:94:5f:57:6e:f4:3a:20:e3:6f:21:0c:
74:8e:71:b7:cb:a1:2c:39:f3:d0:7a:83:03:36:d9:52:40:94:
48:84:b2:da:21:1e:c0:40:98:f7:de:e3:32:7c:42:f3:8f:48:
9c:e1:5a:b6:c6:58:25:d4:fd:8c:a0:10:5f:01:f3:d5:49:c8:
19:e5:89:5e:1b:98:29:fb:5b:e1:af:e0:78:e6:1d:1c:a9:d7:
67:54:c0:22:86:db:50:af:2f:94:5f:ad:75:7b:14:15:56:7b:
f8:6a:e1:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFA8QeseXOLq6N2TXkXYlzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGRkYWE3NDk0ZDY5YmExY2FjYjQ1N2VmOTFiNmRjZDIy
ZThkZDkwHhcNMjYxMDE1MTkwMTQwWhcNMjYxMDE2MTkwMTQwWjAzMTEwLwYDVQQD
EyhhNDcxMzA3MmI3M2MwMDIyOTliOWNlNzBkNGE5MTMyZTNiZTMwZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzusNnzFyYXurdDX4w/Fxb5kig0E5
B+cWCHi74KZQK8u1Mysz7m6TbOZAsJ60sqzXzUW9wAQNPgz+Z74348Wqzj0ipe7S
kmcNlnmfuMMHeAZ5KwDyrgTnq9Ttf1n52tnQZj441vDZIqW0n/L5qZZp3gyoiEGc
JsTdWZ9MriYl2NecC8Ps8SD3T8kkXZcNaBy9bxuKDVpMCsKt6ZXoNUfws3h4jak2
MFpnf5310DBE0GmB/sbCpAqBrz7qA8mUeEGSpqHp//uQWW6Ecl9DCOyjs5SqmlPA
2Ja7chpc9eaZuPDpjheg8jMHpsxgLPdd7fLXvsTvaDAOMy0lSMUQ3c1NoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRxMHK3PAAimbnOcNSpEy474w7ZMB8GA1UdIwQY
MBaAFKMN2qdJTWm6HKy0V++RttzSLo3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTIt
NjU0NGEyYjk5ODE3LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTItNjU0NGEyYjk5ODE3
LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKaYpJFc
LPftjlgDTCu2GDK+kxOme7OO01Wv7JoV4FpyeUrH//bNvjQYuITBVZp8nYPOXSlM
0WrVYA1r4QnPkCdnInY5+yr0StkU+dRSO884i5De53f+j0A/RkhUMCtjNNw0rEtw
Y9PFXitggHw/66Vh2My8erBDV3u2CY4mVtF+yK4tK5ujddUA23k+/3xhelTNp3yY
uJRfV270OiDjbyEMdI5xt8uhLDnz0HqDAzbZUkCUSISy2iEewECY997jMnxC849I
nOFatsZYJdT9jKAQXwHz1UnIGeWJXhuYKftb4a/geOYdHKnXZ1TAIobbUK8vlF+t
dXsUFVZ7+GrhBQ==
-----END CERTIFICATE-----
Generated at Fri Oct 16 01:48:03 2026 by rpki-client