Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier: q16JmpD9XaqcQF4MJE9kEFhlBzcbbyT0CTg5R/Ap6Oo=
Subject key identifier: 0D:24:F1:AC:1C:1B:21:98:27:8D:C6:E3:E4:E2:A3:C9:94:46:4C:70
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 019D9B19A7DDDE7994090BD1045DB9686A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number: 0A5E
Signing time: Fri 17 Apr 2026 11:00:43 +0000
Manifest this update: Fri 17 Apr 2026 11:00:43 +0000
Manifest next update: Sat 18 Apr 2026 11:00:43 +0000
Files and hashes: 1: 8mrRFShZe3jIWPC5rjWtkIF86Ow.roa (hash: 1eDONGdvpbePJA/RAEZxIbFZz7jJ9+He5LHXPoKLTvk=)
2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: UPiHlomFujmIAor5tNOv7bDeolPVe7JCzi5hLIF6Ui0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:a7:dd:de:79:94:09:0b:d1:04:5d:b9:68:6a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: Apr 17 11:00:43 2026 GMT
Not After : Apr 18 11:00:43 2026 GMT
Subject: CN=0d24f1ac1c1b2198278dc6e3e4e2a3c994464c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:3b:c8:dd:6e:41:f9:6d:f7:f0:d4:6d:f9:
e2:ee:26:e2:2f:3d:85:ac:4e:ae:c1:76:e9:ab:1f:
ca:a5:7f:ed:30:bc:d6:b2:19:72:7d:36:37:87:1a:
57:cd:59:6a:1e:80:e4:f5:fb:95:ce:89:53:f7:e8:
45:b9:a2:47:74:20:5c:d0:2a:23:09:22:9c:92:c8:
a2:d2:ac:84:c3:fb:d9:b8:be:96:21:84:43:6a:5e:
6c:85:17:b1:54:e1:39:18:16:1b:c2:6b:7e:f5:9b:
b4:d8:aa:2b:3e:74:b3:6a:45:06:42:63:27:d2:17:
61:95:3f:9d:d9:7e:50:ef:96:0f:24:fe:90:e5:79:
3a:e2:f8:79:41:73:69:56:4e:04:bf:27:af:33:94:
e7:74:49:9e:a0:1f:01:8d:85:0c:72:af:b3:05:31:
4e:e1:65:b7:82:66:06:33:fd:01:de:65:86:4c:91:
a7:62:53:69:a1:77:89:62:8a:84:96:c5:3f:c3:5d:
5b:95:56:ca:33:13:a8:b0:6e:e1:96:96:0c:b8:ed:
b6:19:8f:14:91:64:ec:c0:06:c5:8d:bb:b3:00:4a:
4e:30:c5:e1:ab:02:02:04:dc:24:fb:ee:91:fb:10:
fa:47:28:1c:f1:a3:6d:d2:72:3c:4a:5d:15:29:2d:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:F1:AC:1C:1B:21:98:27:8D:C6:E3:E4:E2:A3:C9:94:46:4C:70
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:67:74:43:52:20:25:c6:df:68:36:34:39:a7:44:48:4a:07:
52:ec:31:78:3e:10:bf:8f:6d:3f:f6:81:c6:ed:9b:a5:3b:c7:
35:4e:cf:3c:3c:2c:07:b4:cf:04:9c:34:05:3b:18:38:3c:2d:
0e:28:8f:d9:45:6a:29:d3:96:41:76:01:b0:a0:a8:c3:da:69:
e2:99:cb:51:cc:4d:57:08:6b:10:8e:d1:96:b5:36:5b:ea:6d:
2e:a4:46:64:76:01:0d:a7:b8:1a:78:d1:fa:0a:4c:35:b4:07:
d3:2c:5a:6d:2a:a3:2a:69:fe:aa:e1:ce:39:9b:d4:f3:3c:50:
eb:54:c6:3d:3e:69:b8:11:73:16:6e:25:6f:0c:90:21:8a:85:
28:22:1a:59:87:70:7c:ef:cc:2c:64:4a:fe:94:b4:7a:f7:57:
0f:66:d4:08:76:8e:ac:c6:02:e2:9c:31:f1:ae:9f:e1:51:f4:
7e:80:cd:8c:1b:02:47:91:eb:8f:98:b4:57:58:63:a0:7b:e5:
5d:b7:b4:0c:77:44:55:28:fd:ec:e9:8a:9c:3a:ad:45:1c:92:
0f:de:4c:13:c0:8e:ac:82:85:c4:59:88:22:f3:94:3a:f1:99:
2a:d1:fd:4a:66:f2:1b:15:b2:1f:82:31:dc:7f:91:4e:5b:ce:
0e:28:a5:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGafd3nmUCQvRBF25aGomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMDIwYWU5NmI1ZjBjNWI3MzM5ZTYxNTRkY2VjNmYxNmNi
NjNmNWEwHhcNMjYwNDE3MTEwMDQzWhcNMjYwNDE4MTEwMDQzWjAzMTEwLwYDVQQD
EygwZDI0ZjFhYzFjMWIyMTk4Mjc4ZGM2ZTNlNGUyYTNjOTk0NDY0YzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ug7yN1uQflt9/DUbfni7ibiLz2F
rE6uwXbpqx/KpX/tMLzWshlyfTY3hxpXzVlqHoDk9fuVzolT9+hFuaJHdCBc0Coj
CSKcksii0qyEw/vZuL6WIYRDal5shRexVOE5GBYbwmt+9Zu02KorPnSzakUGQmMn
0hdhlT+d2X5Q75YPJP6Q5Xk64vh5QXNpVk4EvyevM5TndEmeoB8BjYUMcq+zBTFO
4WW3gmYGM/0B3mWGTJGnYlNpoXeJYoqElsU/w11blVbKMxOosG7hlpYMuO22GY8U
kWTswAbFjbuzAEpOMMXhqwICBNwk++6R+xD6Rygc8aNt0nI8Sl0VKS0jgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0k8awcGyGYJ43G4+Tio8mURkxwMB8GA1UdIwQY
MBaAFKMCCulrXwxbcznmFU3OxvFstj9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAt
M2I3YzEyNjcyNWQ1LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAtM2I3YzEyNjcyNWQ1
LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2d0Q1Ig
JcbfaDY0OadESEoHUuwxeD4Qv49tP/aBxu2bpTvHNU7PPDwsB7TPBJw0BTsYODwt
DiiP2UVqKdOWQXYBsKCow9pp4pnLUcxNVwhrEI7RlrU2W+ptLqRGZHYBDae4GnjR
+gpMNbQH0yxabSqjKmn+quHOOZvU8zxQ61TGPT5puBFzFm4lbwyQIYqFKCIaWYdw
fO/MLGRK/pS0evdXD2bUCHaOrMYC4pwx8a6f4VH0foDNjBsCR5Hrj5i0V1hjoHvl
Xbe0DHdEVSj97OmKnDqtRRySD95ME8COrIKFxFmIIvOUOvGZKtH9SmbyGxWyH4Ix
3H+RTlvODiilvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:52 2026 by rpki-client