Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a3bad7-7c93-4a07-9915-4f7cdc40de1c/1/owqdYFkKaJlCY4ax42FjreFpo8Y.mft
File: owqdYFkKaJlCY4ax42FjreFpo8Y.mft (raw, json)
Hash identifier: OsBqoisRYidxnkd6J5yZwqVOJXOVnpYddDa4tzRIE1o=
Subject key identifier: 8B:D9:AC:AF:71:D7:77:E2:20:9A:66:3F:FD:85:43:6F:5D:C4:3A:E9
Authority key identifier: A3:0A:9D:60:59:0A:68:99:42:63:86:B1:E3:61:63:AD:E1:69:A3:C6
Certificate issuer: /CN=a30a9d60590a6899426386b1e36163ade169a3c6
Certificate serial: 019F19B1C89FDDEDCEE92112AB84E54E51A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owqdYFkKaJlCY4ax42FjreFpo8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a3bad7-7c93-4a07-9915-4f7cdc40de1c/1/owqdYFkKaJlCY4ax42FjreFpo8Y.mft
Manifest number: 06
Signing time: Tue 30 Jun 2026 18:01:49 +0000
Manifest this update: Tue 30 Jun 2026 18:01:49 +0000
Manifest next update: Wed 01 Jul 2026 18:01:49 +0000
Files and hashes: 1: 6LfIaA-RGpt6UyHGaFPtgWSzWoo.roa (hash: aw5x8nH1XT0Cri8yXXadKOmXkKAkU7N+vk6+l2iRF90=)
2: owqdYFkKaJlCY4ax42FjreFpo8Y.crl (hash: 1B0ZortBC/EhyO6L+axdmzpE14j//rFqlWW2wGSW/ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a3bad7-7c93-4a07-9915-4f7cdc40de1c/1/owqdYFkKaJlCY4ax42FjreFpo8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a3bad7-7c93-4a07-9915-4f7cdc40de1c/1/owqdYFkKaJlCY4ax42FjreFpo8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/owqdYFkKaJlCY4ax42FjreFpo8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:c8:9f:dd:ed:ce:e9:21:12:ab:84:e5:4e:51:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30a9d60590a6899426386b1e36163ade169a3c6
Validity
Not Before: Jun 30 18:01:49 2026 GMT
Not After : Jul 1 18:01:49 2026 GMT
Subject: CN=8bd9acaf71d777e2209a663ffd85436f5dc43ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:ce:e6:91:68:fa:6e:27:26:b6:66:17:1e:
5d:34:41:02:94:9c:11:0c:77:0d:83:83:85:80:ee:
65:5b:6d:bb:5e:28:07:19:95:a9:df:60:c6:a1:22:
f6:18:b7:82:b5:b9:14:54:c7:2b:80:59:e9:62:ce:
43:7b:d2:f5:68:8f:6f:ec:d0:2c:da:79:44:cd:11:
08:c5:86:da:3e:72:78:01:18:08:e1:97:ce:bc:2e:
a6:6f:1f:2c:bf:7b:9a:ea:54:ab:1c:76:c1:72:0f:
ea:c2:58:c2:9e:81:c8:0d:73:76:e4:ad:ec:89:5e:
91:3b:be:11:56:e2:ea:05:f1:b0:19:9a:cd:97:dc:
00:43:46:6b:2c:b6:88:4d:30:65:bc:df:01:73:a3:
57:85:c4:0b:32:8a:39:99:c4:18:1f:e4:11:7a:0d:
c6:61:cd:09:e9:d9:e5:e5:05:71:5f:d2:fb:d4:f2:
5c:c7:15:a6:09:98:da:3a:4b:d4:d5:59:cf:a7:ae:
2d:fb:5b:3d:25:e0:b6:41:59:10:a4:ce:c5:b1:e3:
f4:6f:92:0f:98:6e:5a:70:a9:1a:18:6c:25:c2:26:
2d:56:5b:49:97:84:5f:59:63:39:fe:a2:69:cb:98:
8b:37:8c:ca:5c:d4:3d:3d:9a:5d:6c:eb:dd:e9:50:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D9:AC:AF:71:D7:77:E2:20:9A:66:3F:FD:85:43:6F:5D:C4:3A:E9
X509v3 Authority Key Identifier:
keyid:A3:0A:9D:60:59:0A:68:99:42:63:86:B1:E3:61:63:AD:E1:69:A3:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owqdYFkKaJlCY4ax42FjreFpo8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a3bad7-7c93-4a07-9915-4f7cdc40de1c/1/owqdYFkKaJlCY4ax42FjreFpo8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a3bad7-7c93-4a07-9915-4f7cdc40de1c/1/owqdYFkKaJlCY4ax42FjreFpo8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ef:1f:f6:a5:7d:be:4d:92:9e:e0:37:65:78:c1:56:a8:82:
85:fe:8b:6b:5c:98:82:e3:fe:fa:ee:46:77:8b:f9:68:66:f8:
79:bf:a9:39:03:de:f2:90:23:48:2c:5b:48:2a:e0:fd:23:4c:
a5:02:79:e2:18:60:9c:c2:b6:b0:2f:c9:e6:4d:d6:b9:88:a3:
50:92:dd:dd:5e:e2:ed:01:31:3e:50:95:ca:59:aa:29:6d:44:
cf:6f:6c:2b:d0:79:bd:df:f5:a7:97:ec:51:d7:fa:d1:7e:0d:
7a:52:82:a1:69:81:4e:c0:6e:47:9c:d8:c6:3b:93:f3:bf:f2:
46:b1:49:05:ba:48:4b:c2:00:42:e5:7b:9a:55:29:95:4d:cb:
d7:6a:1e:51:49:91:28:c4:52:2f:f9:0e:99:97:31:5b:16:5a:
ca:81:51:0b:a6:e7:9f:37:57:82:cf:82:56:e7:de:6e:07:4c:
3f:a4:c3:2d:b9:dc:a7:01:f6:45:ef:bc:32:b2:0d:f1:2d:a8:
2e:17:ed:27:25:6b:79:75:32:4a:0b:1a:e2:8a:ee:7e:22:85:
68:e8:14:0d:d2:26:d5:ac:65:31:03:5e:35:e6:ed:b6:1c:22:
19:09:ee:15:8f:7c:f6:62:3b:5c:34:30:bd:4a:c3:8e:fd:4c:
6e:85:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:37:45 2026 by rpki-client