Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: Ov7RO44p0wWkXJMirx4aovyRt5JbhbGYqGXsI5MBdps=
Subject key identifier: C7:8E:3A:60:92:A6:35:84:65:EF:46:4A:51:7A:99:02:79:BE:1D:56
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 01A0028177799DB263E03E1875EE2A573129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1A08
Signing time: Fri 14 Aug 2026 23:00:34 +0000
Manifest this update: Fri 14 Aug 2026 23:00:34 +0000
Manifest next update: Sat 15 Aug 2026 23:00:34 +0000
Files and hashes: 1: 1-B9Lbj4pKvZfeBlVCluXyZACLgE.roa (hash: dl5qiVx2ohz/ydT7WDU0tUmGSb6dlLqmyduAUAaYC4s=)
2: jSutCugEdF2rS6QxHHGZRxPxhsI.asa (hash: zjJ0AX5FLYwkWoWkgoUko8ALZitnQgcsownFmhLIYFw=)
3: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: mLhzWn1uDxufVXN8RwJ9K8nQ63+32qT0ztNo0DinpG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:77:79:9d:b2:63:e0:3e:18:75:ee:2a:57:31:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Aug 14 23:00:34 2026 GMT
Not After : Aug 15 23:00:34 2026 GMT
Subject: CN=c78e3a6092a6358465ef464a517a990279be1d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:2c:7e:c7:3f:fa:36:93:9b:f0:a9:7e:12:
dc:23:7b:bb:a8:23:2c:06:fd:6c:fc:02:5c:80:dd:
7a:83:35:89:af:08:f1:1d:70:c6:86:54:48:3b:aa:
cc:03:b2:18:42:db:36:ea:5d:cc:37:96:e7:33:03:
26:ad:29:41:de:a9:6c:c2:18:96:03:bb:db:21:14:
6f:25:bc:24:a5:bc:e5:e1:67:29:a1:7f:a3:de:7b:
c8:ad:91:76:62:48:22:5a:20:1c:5f:64:82:7c:d2:
60:f2:36:88:dd:6f:95:df:68:bc:c4:35:66:62:2f:
a7:73:92:4a:50:47:db:a4:95:63:7e:11:63:78:74:
2a:e4:20:04:41:69:58:75:4e:91:bc:e3:c6:e4:09:
f6:98:32:aa:19:45:9a:d6:23:b3:0b:bf:e1:08:b3:
3e:ea:17:9b:d5:9b:7b:01:e2:1c:6c:3b:fb:b8:ee:
a1:7d:7d:b9:23:03:57:b3:5e:a4:d9:be:03:ac:0e:
49:06:25:a3:ff:bb:7e:8c:63:c7:41:c0:1d:f5:fb:
ba:56:5d:27:5a:d0:fd:5f:59:e7:9a:35:b2:09:c1:
8e:b8:1a:87:0d:22:ce:39:b2:4b:a4:64:7c:89:76:
15:ad:78:7f:05:05:0e:0e:9e:04:b1:d0:12:2b:4b:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8E:3A:60:92:A6:35:84:65:EF:46:4A:51:7A:99:02:79:BE:1D:56
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7e:ba:37:a5:f9:44:60:c8:4d:2e:89:48:53:2e:62:b9:42:
73:62:c6:c6:f0:36:08:d4:6a:37:2c:1f:26:eb:25:8c:e2:2f:
81:a4:84:bd:bb:d9:b8:0d:9d:51:19:63:c0:4d:d8:90:b0:47:
4f:ba:9b:52:e0:2d:b2:18:95:c9:8b:f6:1a:a0:7f:ce:0d:da:
ab:f5:5e:76:3d:e7:d7:f8:4f:cb:e3:64:df:c4:ba:f6:c1:bc:
2f:2b:0b:eb:2b:1a:bc:97:bb:68:7d:78:98:a7:ac:57:3c:42:
6a:54:f6:b4:45:a7:6f:95:4f:66:76:bd:df:4e:18:d6:7b:dd:
6e:65:9a:13:65:32:5e:8a:34:0a:bb:60:20:b7:ee:f4:6c:bc:
3f:77:44:85:35:39:c9:53:e9:a8:5e:5b:e5:69:71:1f:db:6b:
3a:cd:c8:e5:41:2a:e9:8a:75:aa:a7:e2:f0:ab:88:cc:4b:1f:
00:e8:f2:2d:25:d4:cd:d1:4d:44:49:57:dc:67:19:6f:80:f7:
a5:c6:21:48:46:b6:c3:ac:a5:1e:b8:b4:69:31:35:f8:75:c6:
7f:19:04:f4:de:b7:be:ed:9f:d1:73:f9:65:48:d9:ca:b1:91:
6e:49:89:c6:ce:6d:28:4d:4a:0d:b2:92:fa:82:15:0f:54:f6:
68:5b:0d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:45 2026 by rpki-client