Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier: mQKPTMDizzwsmF3nUsm3hns3lAs1C73q6Nq9Jz8IULg=
Subject key identifier: 36:54:3E:1C:8C:4A:48:60:11:23:14:D8:38:E1:8B:AB:28:F4:3F:E1
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 019CAD90A1DF6325CD6C597552087E7413F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number: 09E3
Signing time: Mon 02 Mar 2026 08:01:02 +0000
Manifest this update: Mon 02 Mar 2026 08:01:02 +0000
Manifest next update: Tue 03 Mar 2026 08:01:02 +0000
Files and hashes: 1: 8mrRFShZe3jIWPC5rjWtkIF86Ow.roa (hash: 1eDONGdvpbePJA/RAEZxIbFZz7jJ9+He5LHXPoKLTvk=)
2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: SmSopTSYmu8ucFmseWKcj5Cus6+1tS8Z8fbu+K0eQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a1:df:63:25:cd:6c:59:75:52:08:7e:74:13:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: Mar 2 08:01:02 2026 GMT
Not After : Mar 3 08:01:02 2026 GMT
Subject: CN=36543e1c8c4a4860112314d838e18bab28f43fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:4b:69:4d:3c:c7:ee:30:67:16:29:c2:24:
04:ea:59:ab:e8:b0:69:6c:3e:fb:60:ab:a5:ff:84:
fa:15:14:38:ae:56:86:e6:de:e5:59:15:fc:40:58:
c7:ff:c6:e4:e2:f4:9e:aa:1f:7a:d1:88:b8:8a:4e:
59:58:2a:5a:eb:91:32:c7:94:97:4c:05:da:cc:0b:
c5:20:b0:30:49:09:ee:10:10:05:da:d5:d4:79:5d:
af:f6:9e:07:6d:eb:a0:d5:bc:ba:f7:11:01:c8:5f:
33:f7:58:79:97:40:b1:3f:9b:f8:58:8c:4e:10:ef:
de:82:64:4e:0d:53:bd:93:28:df:ad:cc:a8:9e:fc:
1e:86:d4:1f:05:4c:88:bd:c8:3e:f0:2a:6e:40:8a:
c7:f6:c8:28:39:04:f8:b7:45:42:24:3a:df:f0:be:
81:59:f4:5f:79:6f:37:82:a2:0c:48:32:b4:76:71:
5a:f4:22:06:4e:1f:09:b1:08:fb:6f:b7:06:b4:d4:
f9:e9:37:3a:ae:07:e0:dc:fa:c3:67:91:36:51:fb:
b5:0a:a0:18:cc:32:25:db:9c:a3:4a:87:26:a8:e4:
70:8c:f1:f6:21:ce:ef:28:00:8e:db:99:a7:aa:48:
53:96:59:5f:9f:7a:72:22:36:83:13:18:30:21:c4:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:54:3E:1C:8C:4A:48:60:11:23:14:D8:38:E1:8B:AB:28:F4:3F:E1
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:22:89:59:77:2e:ab:53:bd:ae:8d:26:7f:aa:a9:d9:ee:98:
2c:32:d9:47:9c:79:27:3f:34:8f:7b:bf:2f:a6:7c:17:fc:03:
72:bf:3c:6b:b2:f5:41:6b:e4:91:c4:10:ba:42:7e:ac:90:6c:
9d:85:c1:92:6a:ce:c4:1a:5a:7f:44:f6:da:3d:d3:bb:eb:3e:
55:e0:bb:45:ca:d9:26:c2:d8:11:ce:8f:67:67:53:e3:91:09:
e6:d5:19:f6:c5:e4:6e:11:b6:ae:6f:a4:a7:45:31:42:0d:f5:
f6:55:91:d0:f9:5a:28:73:3e:a9:ee:b5:80:8a:3c:0f:01:f4:
25:1d:96:3f:39:a3:86:d9:40:24:9d:fc:8d:5a:2a:ee:ca:7c:
7d:b4:30:b6:b7:81:dc:1a:83:a8:04:d7:0d:9e:f3:e4:d7:a9:
91:a0:8f:59:4b:24:46:7b:f2:b4:ec:04:6f:8c:0f:e0:74:d5:
83:37:85:54:93:0a:db:4c:cf:61:f4:15:c1:5c:9a:da:5c:5f:
a8:09:bd:aa:81:8f:5d:99:eb:14:9e:79:ed:7b:ab:d0:47:8d:
01:27:3c:66:ab:3b:75:f9:22:a3:cc:07:38:d7:8b:25:44:b5:
73:68:ca:9e:14:2c:ab:ce:fb:68:c2:4c:87:ab:8a:a6:f5:cd:
7d:00:bd:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkKHfYyXNbFl1Ugh+dBPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMDIwYWU5NmI1ZjBjNWI3MzM5ZTYxNTRkY2VjNmYxNmNi
NjNmNWEwHhcNMjYwMzAyMDgwMTAyWhcNMjYwMzAzMDgwMTAyWjAzMTEwLwYDVQQD
EygzNjU0M2UxYzhjNGE0ODYwMTEyMzE0ZDgzOGUxOGJhYjI4ZjQzZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoBLaU08x+4wZxYpwiQE6lmr6LBp
bD77YKul/4T6FRQ4rlaG5t7lWRX8QFjH/8bk4vSeqh960Yi4ik5ZWCpa65Eyx5SX
TAXazAvFILAwSQnuEBAF2tXUeV2v9p4Hbeug1by69xEByF8z91h5l0CxP5v4WIxO
EO/egmRODVO9kyjfrcyonvwehtQfBUyIvcg+8CpuQIrH9sgoOQT4t0VCJDrf8L6B
WfRfeW83gqIMSDK0dnFa9CIGTh8JsQj7b7cGtNT56Tc6rgfg3PrDZ5E2Ufu1CqAY
zDIl25yjSocmqORwjPH2Ic7vKACO25mnqkhTlllfn3pyIjaDExgwIcRcfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZUPhyMSkhgESMU2Djhi6so9D/hMB8GA1UdIwQY
MBaAFKMCCulrXwxbcznmFU3OxvFstj9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAt
M2I3YzEyNjcyNWQ1LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAtM2I3YzEyNjcyNWQ1
LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViKJWXcu
q1O9ro0mf6qp2e6YLDLZR5x5Jz80j3u/L6Z8F/wDcr88a7L1QWvkkcQQukJ+rJBs
nYXBkmrOxBpaf0T22j3Tu+s+VeC7RcrZJsLYEc6PZ2dT45EJ5tUZ9sXkbhG2rm+k
p0UxQg319lWR0PlaKHM+qe61gIo8DwH0JR2WPzmjhtlAJJ38jVoq7sp8fbQwtreB
3BqDqATXDZ7z5NepkaCPWUskRnvytOwEb4wP4HTVgzeFVJMK20zPYfQVwVya2lxf
qAm9qoGPXZnrFJ557Xur0EeNASc8Zqs7dfkio8wHONeLJUS1c2jKnhQsq877aMJM
h6uKpvXNfQC9Ew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:04 2026 by rpki-client