Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File: mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier: bxd0HRrr+9rAoZMsZ3Vtg0amrUTgzpO8L5PPeS04EU8=
Subject key identifier: AE:63:38:7B:11:EB:74:11:2F:F6:ED:A0:9B:C1:89:3D:0D:B5:5E:96
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial: 019D38D2CB2A13754BA6BC62D60FA5A07EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number: 0587
Signing time: Sun 29 Mar 2026 09:00:31 +0000
Manifest this update: Sun 29 Mar 2026 09:00:31 +0000
Manifest next update: Mon 30 Mar 2026 09:00:31 +0000
Files and hashes: 1: DEtJZBXl24UTmKRuIq3pxJtnaOw.roa (hash: MndJAH2T2Jh63p0lxR3Y6bgJbjAqRwsstx6Rzo2dgCo=)
2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: T0FgMioy2YXG7Gq0fz0Ni4N2PSgo7ljCwnBEAt6zDj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cb:2a:13:75:4b:a6:bc:62:d6:0f:a5:a0:7e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
Validity
Not Before: Mar 29 09:00:31 2026 GMT
Not After : Mar 30 09:00:31 2026 GMT
Subject: CN=ae63387b11eb74112ff6eda09bc1893d0db55e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:94:c9:8e:fb:e0:bb:fb:b5:cd:33:c9:4c:
bf:96:99:19:62:b6:b0:f6:c5:a5:e4:cd:4f:07:f9:
e4:01:de:35:4d:39:e2:24:a6:d7:84:07:95:93:0d:
f3:8e:32:32:9a:0e:38:80:9e:9d:5a:85:79:33:c8:
2f:00:b5:0f:b5:d5:8d:42:12:ef:3c:29:86:78:45:
3c:c6:b0:c5:f6:72:0e:1b:ce:de:9a:84:b4:9e:31:
96:29:2d:02:73:75:9c:75:e4:5d:dc:8a:35:ea:83:
0e:61:88:6e:40:71:a5:46:3e:9e:78:a4:13:c2:74:
56:89:6b:21:c8:87:f6:e7:00:65:13:fd:dd:f4:18:
91:93:9c:63:cc:53:a9:60:1f:62:23:08:01:3d:18:
64:4f:32:78:ab:17:2b:ef:55:c7:d2:9b:f5:72:e2:
bb:be:2a:23:83:c2:d2:a0:41:fc:9d:62:c1:bd:d9:
c4:53:35:63:c3:da:78:81:32:23:a4:1c:df:44:2e:
0c:59:fd:fc:5e:76:26:c1:19:c5:45:e3:35:50:26:
65:2d:9c:94:91:61:15:3d:60:e2:da:dc:8c:bb:e4:
bc:e3:68:49:3a:0e:d6:c7:e9:36:f9:29:c1:4e:d6:
c3:4b:85:01:34:05:a0:b8:57:c4:5e:0d:05:6c:df:
0d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:38:7B:11:EB:74:11:2F:F6:ED:A0:9B:C1:89:3D:0D:B5:5E:96
X509v3 Authority Key Identifier:
keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:63:d3:70:91:46:c4:91:ee:a8:a9:a2:81:2e:80:a6:a9:6b:
45:b8:7b:db:9d:07:6e:6b:c1:bb:3f:71:ed:ef:62:c0:f4:fd:
aa:e4:e3:ef:88:eb:89:e2:7b:80:2a:5b:e0:8e:d2:e1:21:b1:
e5:4f:df:f5:5a:0c:64:8c:aa:00:6d:4e:b7:65:f1:d5:07:96:
d9:28:3c:af:58:fa:c5:6a:b4:d8:60:b9:80:62:00:86:7e:be:
1c:d5:a4:e5:2a:b3:99:1c:93:9f:28:3b:73:eb:e5:9e:4f:3f:
a0:bd:75:15:6e:aa:59:a8:39:e3:18:c5:47:55:dc:e6:69:38:
54:37:87:b9:ee:65:18:a1:49:d5:28:cf:48:c5:8e:df:c3:20:
2a:1c:ab:f5:9a:36:73:be:a9:dc:02:74:cb:96:eb:fc:e8:6b:
29:11:4c:94:8b:94:38:0a:1f:7c:3d:3a:3b:f6:f5:16:ab:78:
09:70:5a:cb:27:a0:bb:f1:d4:68:95:53:06:b5:3c:bb:f2:71:
0a:d1:c6:44:41:78:18:42:97:aa:57:52:a5:17:d8:c1:ee:74:
5c:0f:8c:2f:6a:d8:dc:fa:44:0f:35:52:99:b5:13:7b:d5:e3:
9b:fc:fd:a0:0c:7e:c5:ae:5c:20:fe:5e:19:81:b7:6b:fc:a1:
57:8b:03:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:14 2026 by rpki-client