Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: Lz11guQ7WZz8WMQxRNZkYfLgbEgCIrEPYg3+mzSZbnQ=
Subject key identifier: B1:B2:9B:11:47:59:D2:70:57:2F:19:5E:80:96:EF:73:5E:36:13:9B
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019CABA25E9131FFEF84518553BF4B565A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 0545
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: /j8B/+YLGxYSsNRxjcPbqrDBtCN7iivDGtmu+cmsNEQ=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5e:91:31:ff:ef:84:51:85:53:bf:4b:56:5a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=b1b29b114759d270572f195e8096ef735e36139b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:e9:04:0c:f1:b0:c1:ee:35:32:2e:54:68:
f7:b2:2f:af:7d:c9:08:aa:e0:42:b1:ed:19:70:da:
cd:61:7a:a9:a2:6b:d1:a0:6d:97:0b:39:fb:d0:07:
aa:25:cf:2d:1c:23:22:ff:95:3a:a7:6d:cc:93:a5:
65:26:c8:44:34:b8:5c:fd:2b:bb:12:dd:4b:6b:74:
29:38:a9:c4:df:47:15:a8:e5:a9:0b:bd:80:99:1d:
21:f6:d5:df:51:84:65:af:2e:c9:ea:3c:07:8a:b4:
a8:26:77:f1:90:15:d1:e1:ff:48:9c:5d:77:cb:91:
36:36:2c:f1:7f:24:47:f8:37:8b:f1:b0:74:a7:d6:
c6:9b:3c:ad:bd:76:69:13:2c:9d:d1:aa:c4:97:c8:
ee:59:a9:7c:53:61:7c:86:79:c1:aa:fa:66:75:a3:
27:56:a0:48:a1:a7:c1:fe:00:ce:35:66:42:68:88:
84:ec:c7:de:fa:58:c7:32:0f:26:d9:38:de:7b:00:
45:39:cf:a2:85:4e:86:51:eb:93:90:5e:fd:c0:31:
07:95:2d:97:04:77:b3:91:d8:ca:bd:20:4f:02:ba:
46:ac:18:f9:2c:46:6f:c0:eb:31:2d:66:59:0b:f1:
51:c3:cd:2a:f8:40:83:06:66:5a:dd:c8:cf:e0:e6:
a9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B2:9B:11:47:59:D2:70:57:2F:19:5E:80:96:EF:73:5E:36:13:9B
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:35:a5:3f:84:69:90:4d:21:de:6f:75:e8:c9:8f:87:0b:96:
99:aa:6a:7e:4c:34:22:ae:68:e9:6e:04:3c:09:c6:0f:ed:75:
97:4e:dd:d8:56:05:ab:a4:8c:91:2d:34:a1:cd:f8:68:02:da:
81:91:62:71:9f:25:60:54:68:71:aa:cc:53:c9:e7:7b:9b:ae:
92:63:4f:bf:1e:3e:77:ab:48:81:38:2c:a5:2e:7a:1b:b0:de:
1f:2f:eb:0a:bb:6a:b2:84:18:46:f3:98:bb:76:fe:76:80:45:
97:45:07:93:07:a9:db:a1:bb:fa:26:74:23:fe:34:21:26:5d:
71:01:df:a9:bf:4f:8b:be:13:2f:a3:ab:a3:ed:62:20:00:74:
d4:87:88:ff:19:ba:76:3f:2d:1a:c8:4a:c8:b8:39:bd:d6:fc:
cb:2e:2d:46:6b:8e:18:1c:04:e8:12:32:33:ba:07:05:5d:bc:
84:61:17:f8:10:f3:a9:78:1a:b6:d2:92:d1:43:64:c4:1b:60:
ad:a6:79:93:95:fb:48:2d:dc:91:7a:09:c9:ec:0d:70:14:5c:
fc:2d:08:7e:eb:33:b5:36:aa:40:e9:d2:df:45:de:81:4a:49:
b6:cc:73:13:95:7b:7b:d4:d3:fb:4f:8c:e4:e1:15:74:a6:99:
15:c1:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:29 2026 by rpki-client