Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft
File: OWpY9F0OyAFfoyauWP9YAzKJv50.mft (raw, json)
Hash identifier: lGsyK1Ouue4iBZXZ0ko3zXlpYDN78raZp5kaEzh4p6c=
Subject key identifier: 6E:04:73:94:C3:F5:45:50:91:AD:40:C3:52:36:82:1C:6E:DB:50:E7
Authority key identifier: 39:6A:58:F4:5D:0E:C8:01:5F:A3:26:AE:58:FF:58:03:32:89:BF:9D
Certificate issuer: /CN=396a58f45d0ec8015fa326ae58ff58033289bf9d
Certificate serial: 019D371B60D9438153A3330A5050D9682CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWpY9F0OyAFfoyauWP9YAzKJv50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 01:00:34 +0000
Manifest this update: Sun 29 Mar 2026 01:00:34 +0000
Manifest next update: Mon 30 Mar 2026 01:00:34 +0000
Files and hashes: 1: OWpY9F0OyAFfoyauWP9YAzKJv50.crl (hash: oYAbbK7YIYbePXcpyWnYeFwRrnn4gru+M4jUi7S9U+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWpY9F0OyAFfoyauWP9YAzKJv50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:60:d9:43:81:53:a3:33:0a:50:50:d9:68:2c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=396a58f45d0ec8015fa326ae58ff58033289bf9d
Validity
Not Before: Mar 29 01:00:34 2026 GMT
Not After : Mar 30 01:00:34 2026 GMT
Subject: CN=6e047394c3f5455091ad40c35236821c6edb50e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:8c:83:49:9a:b6:ac:50:0c:0c:13:aa:06:
f3:2d:a8:dc:36:4a:d6:bf:d3:57:7f:d5:4c:4e:cb:
06:23:25:9e:ed:25:58:ed:6a:4a:ea:14:5f:26:ac:
29:17:7d:3f:a3:59:00:a4:0d:0a:b4:8c:d9:e4:07:
9e:04:76:92:0f:81:a8:af:b9:45:e2:d8:b7:b0:f2:
be:5b:e7:8f:a5:66:c4:30:a9:45:5b:35:63:5e:14:
e9:e7:bf:2d:e9:a4:dd:1c:d1:8b:1f:94:58:0c:4a:
d1:71:4f:46:64:f1:03:88:63:51:30:92:41:dd:4b:
96:56:24:56:0a:5b:8e:b3:b5:9b:50:9b:07:3b:20:
41:6f:0a:a4:f9:80:ea:77:40:32:df:03:3e:14:40:
64:16:63:aa:ac:e2:cc:b3:df:2a:05:d7:98:e9:5e:
ca:17:a9:29:4d:f4:3c:1b:a3:63:4a:78:49:61:25:
4c:05:7f:d3:10:7b:f3:02:bd:9e:10:19:8a:dc:ba:
02:66:97:b9:5a:79:65:8c:a7:9f:38:d7:6b:47:7c:
1f:e4:d3:1b:c6:4f:67:cf:05:d0:ed:75:af:cb:53:
37:c4:15:85:8e:74:d7:fb:a8:30:96:28:3f:15:93:
fd:fa:f0:b8:9c:5a:b2:f4:25:1c:77:c0:f0:6d:0e:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:73:94:C3:F5:45:50:91:AD:40:C3:52:36:82:1C:6E:DB:50:E7
X509v3 Authority Key Identifier:
keyid:39:6A:58:F4:5D:0E:C8:01:5F:A3:26:AE:58:FF:58:03:32:89:BF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWpY9F0OyAFfoyauWP9YAzKJv50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:14:b2:bf:38:2f:23:2d:44:51:24:4c:c0:8e:1c:ff:1e:da:
d7:f2:10:3f:cb:4d:f6:c2:e6:74:59:0e:3c:44:b5:05:f9:f4:
3f:1c:3e:fa:94:b6:fd:5c:28:29:32:a9:87:bf:b5:39:e0:df:
8a:b7:b8:64:70:93:b0:de:e6:6d:87:3e:82:e1:8d:a6:48:0f:
da:c0:ba:46:06:fe:4c:7a:56:2c:3d:cb:d3:27:2e:42:94:31:
80:e9:70:5d:19:b8:b5:3a:1a:ab:83:e7:32:9c:7e:c6:91:ec:
56:02:36:d7:2d:f6:b5:3f:70:83:3f:ce:d4:83:a6:4f:34:7a:
cc:b8:e0:4c:6c:02:14:41:8b:68:bd:f3:99:62:e5:a9:de:91:
79:d3:04:3d:38:7c:0e:38:f9:74:70:4a:4e:4f:93:42:ca:c0:
dd:8c:ff:0a:f2:ec:dd:a7:47:72:d4:a2:e4:a6:73:35:25:4f:
5f:b5:3d:ec:f7:60:6a:e8:6b:a7:34:37:a4:79:42:a4:f1:4a:
29:46:a9:75:35:ef:ac:dd:85:41:cc:b6:f4:14:8c:75:1b:52:
0e:82:8f:ae:56:35:ed:bc:42:bd:e2:0e:70:93:2e:bc:9d:9b:
38:d6:bf:23:b7:70:f7:97:25:b3:f3:70:35:27:cc:5b:9d:4f:
13:9d:46:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G2DZQ4FTozMKUFDZaCzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NmE1OGY0NWQwZWM4MDE1ZmEzMjZhZTU4ZmY1ODAzMzI4
OWJmOWQwHhcNMjYwMzI5MDEwMDM0WhcNMjYwMzMwMDEwMDM0WjAzMTEwLwYDVQQD
Eyg2ZTA0NzM5NGMzZjU0NTUwOTFhZDQwYzM1MjM2ODIxYzZlZGI1MGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwruMg0matqxQDAwTqgbzLajcNkrW
v9NXf9VMTssGIyWe7SVY7WpK6hRfJqwpF30/o1kApA0KtIzZ5AeeBHaSD4Gor7lF
4ti3sPK+W+ePpWbEMKlFWzVjXhTp578t6aTdHNGLH5RYDErRcU9GZPEDiGNRMJJB
3UuWViRWCluOs7WbUJsHOyBBbwqk+YDqd0Ay3wM+FEBkFmOqrOLMs98qBdeY6V7K
F6kpTfQ8G6NjSnhJYSVMBX/TEHvzAr2eEBmK3LoCZpe5WnlljKefONdrR3wf5NMb
xk9nzwXQ7XWvy1M3xBWFjnTX+6gwlig/FZP9+vC4nFqy9CUcd8DwbQ6qzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4Ec5TD9UVQka1Aw1I2ghxu21DnMB8GA1UdIwQY
MBaAFDlqWPRdDsgBX6Mmrlj/WAMyib+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dwWTlGME95QUZmb3lhdVdQOVlBektKdjUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTVjMzQtOTVmOS00OTVlLWIxYzgt
NDc0ZjJjZjZlNjJhLzEvT1dwWTlGME95QUZmb3lhdVdQOVlBektKdjUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80OTVjMzQtOTVmOS00OTVlLWIxYzgtNDc0ZjJjZjZlNjJh
LzEvT1dwWTlGME95QUZmb3lhdVdQOVlBektKdjUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxSyvzgv
Iy1EUSRMwI4c/x7a1/IQP8tN9sLmdFkOPES1Bfn0Pxw++pS2/VwoKTKph7+1OeDf
ire4ZHCTsN7mbYc+guGNpkgP2sC6Rgb+THpWLD3L0ycuQpQxgOlwXRm4tToaq4Pn
Mpx+xpHsVgI21y32tT9wgz/O1IOmTzR6zLjgTGwCFEGLaL3zmWLlqd6RedMEPTh8
Djj5dHBKTk+TQsrA3Yz/CvLs3adHctSi5KZzNSVPX7U97PdgauhrpzQ3pHlCpPFK
KUapdTXvrN2FQcy29BSMdRtSDoKPrlY17bxCveIOcJMuvJ2bONa/I7dw95cls/Nw
NSfMW51PE51GRw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:26 2026 by rpki-client