Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: 8SeqveY6tSW+rHJprrRKINvgjySfz031AWuxydsLeto=
Subject key identifier: FD:5A:E1:51:51:5D:E7:D4:B7:2D:42:C7:D7:D3:22:2B:CD:D2:1C:0E
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019E295DACE5C3D24E07899D6585AF09EA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1913
Signing time: Fri 15 May 2026 02:01:05 +0000
Manifest this update: Fri 15 May 2026 02:01:05 +0000
Manifest next update: Sat 16 May 2026 02:01:05 +0000
Files and hashes: 1: 1-B9Lbj4pKvZfeBlVCluXyZACLgE.roa (hash: dl5qiVx2ohz/ydT7WDU0tUmGSb6dlLqmyduAUAaYC4s=)
2: jSutCugEdF2rS6QxHHGZRxPxhsI.asa (hash: zjJ0AX5FLYwkWoWkgoUko8ALZitnQgcsownFmhLIYFw=)
3: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: JEwPZzRd/C+i7XK6szPv6gs08ui2MiiMschaQsammnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:ac:e5:c3:d2:4e:07:89:9d:65:85:af:09:ea:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: May 15 02:01:05 2026 GMT
Not After : May 16 02:01:05 2026 GMT
Subject: CN=fd5ae151515de7d4b72d42c7d7d3222bcdd21c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:6b:f9:a4:a7:c1:a9:54:96:da:e5:e6:61:
f4:4b:c2:84:aa:6d:08:7c:8f:34:d1:67:a3:01:e1:
b9:6e:2a:24:43:9c:49:e8:9c:98:b8:27:7f:47:a1:
e8:c6:2c:d0:b4:9c:bd:ae:30:34:f4:72:9d:30:d5:
d8:a3:21:af:66:82:43:54:bd:66:e9:5b:26:24:1c:
7b:fa:bc:08:78:02:69:07:a8:9d:e7:21:36:52:6d:
df:d3:f3:f0:fe:ef:3d:c3:af:03:76:e9:ad:df:e2:
55:f9:3e:ed:01:9c:a4:66:5c:d7:1b:34:85:6b:ee:
9c:1d:e0:3a:f9:16:05:c7:a6:94:b6:30:3b:4a:24:
a7:ff:cc:06:7b:3c:22:dc:c3:71:bc:05:04:51:ff:
4f:f9:7b:46:ae:02:12:4c:1e:67:df:4f:f6:23:b0:
a9:a6:5d:2e:6e:5d:ee:f7:11:ab:fd:52:80:74:3c:
73:c3:a4:5d:bd:13:ae:ce:74:bf:80:ec:ab:3e:da:
ee:94:6c:40:f8:ef:be:8c:62:ad:5b:bb:48:5e:2b:
75:f3:44:39:0d:5c:7a:ed:84:75:22:46:a2:0d:73:
29:e0:01:bb:3f:a0:bf:29:15:60:7a:e1:ad:b1:52:
5e:a2:43:5d:b2:ed:4a:46:60:90:9c:44:c2:66:10:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5A:E1:51:51:5D:E7:D4:B7:2D:42:C7:D7:D3:22:2B:CD:D2:1C:0E
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:89:6c:c8:10:94:d8:92:1b:55:a1:ed:7b:10:60:92:b5:2e:
a4:51:7a:4d:f7:2c:56:ce:3e:16:39:74:ec:d1:37:65:f0:77:
44:58:e6:e1:b1:d1:54:b3:2c:0a:7c:ce:ce:12:e9:78:7a:b7:
19:29:fe:38:7a:91:8d:72:03:b4:6c:c6:ea:ac:d8:60:d5:5d:
89:6d:d1:70:e8:37:95:92:68:2f:7c:dd:bb:46:ca:c5:1f:04:
6c:a2:82:9f:8d:91:d2:e8:0d:c8:b7:73:12:3b:99:9d:f1:49:
c2:dd:9d:28:7f:0a:2c:f2:04:f5:aa:dd:c8:d9:0b:1e:0b:8a:
d4:f0:ce:93:64:8c:c1:5e:05:9a:f6:3b:68:fb:19:eb:49:28:
5a:8b:d9:10:6d:58:c2:d6:67:05:f2:82:d7:3a:03:29:64:7a:
65:ef:96:8d:20:7d:54:40:bf:f8:b7:0a:7c:04:95:df:bc:d9:
c6:da:11:ec:30:f6:0e:65:b3:be:bc:b8:46:37:6e:15:cb:2d:
8a:f2:a8:6a:e4:a7:6a:ec:e1:24:2f:fb:0c:f4:00:5a:64:08:
ec:7f:5e:c1:a3:ac:f3:03:d1:a3:96:4a:65:d5:32:7a:da:4f:
2e:5d:0c:bb:cd:94:38:2c:52:aa:37:52:29:4f:66:b2:db:7a:
12:06:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:28 2026 by rpki-client