
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: aCWaMafx+6qhmU4sDbIhgmcRr27/owEn7PZpKtZWVJw=
Subject key identifier: AE:34:BF:FD:58:CA:B2:38:62:8C:1C:F6:56:A6:7D:0E:F9:66:96:E5
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 01A0D983786570994F0EF694B2736824B21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 076F
Signing time: Fri 25 Sep 2026 17:01:06 +0000
Manifest this update: Fri 25 Sep 2026 17:01:06 +0000
Manifest next update: Sat 26 Sep 2026 17:01:06 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: +QEY2uU5rzWdtXB+iVrbuIwJdR7tIkO+kZ/iT113Jz0=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:78:65:70:99:4f:0e:f6:94:b2:73:68:24:b2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Sep 25 17:01:06 2026 GMT
Not After : Sep 26 17:01:06 2026 GMT
Subject: CN=ae34bffd58cab238628c1cf656a67d0ef96696e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:11:b3:6e:5d:6a:79:09:55:fd:a5:51:59:
72:3f:f5:32:b6:34:14:52:c5:eb:2b:b4:0a:9b:3d:
65:38:e4:aa:aa:04:26:77:6c:8b:bc:d3:bb:1f:16:
6c:2c:b1:af:0f:27:51:5a:4b:34:a2:65:1c:e0:2b:
88:7d:3b:bf:c8:b5:f6:ed:82:68:24:24:db:9d:ae:
e0:b9:bc:64:f2:74:f0:95:e0:a2:fc:49:32:40:ad:
2d:c9:86:4f:85:b4:73:7b:ac:e5:50:e8:53:92:1b:
db:bb:c0:c4:77:15:4f:de:5c:67:c4:97:26:56:f3:
8a:a1:7b:34:e2:0a:12:69:98:af:49:49:ee:9d:e3:
88:96:43:11:79:3c:aa:39:0a:cc:62:2a:83:ac:66:
2f:53:60:52:1c:c5:e2:48:77:82:15:d3:94:a5:8e:
ff:ab:50:91:a9:3a:05:ba:de:69:d7:78:ee:33:08:
c1:61:11:bd:7a:07:bd:bd:1d:fe:d9:52:90:75:fe:
31:3a:b0:d7:16:16:dc:e8:14:59:df:b3:a5:b9:25:
81:e0:25:0e:4e:20:a5:ee:ea:41:6b:54:1f:b8:ed:
ef:e3:56:2f:b5:68:00:09:e1:3e:3b:5f:c7:b2:dd:
f2:fb:c2:ea:f9:63:80:37:cb:00:9b:64:31:97:3a:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:34:BF:FD:58:CA:B2:38:62:8C:1C:F6:56:A6:7D:0E:F9:66:96:E5
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:20:d9:31:4c:be:8b:36:93:51:a5:f1:04:9d:69:5b:d1:e9:
8e:08:a8:3d:a8:10:8e:ba:4f:f8:d0:8f:95:c9:25:dc:3b:51:
6e:3c:f3:58:f6:ff:af:64:07:33:cd:f6:f2:2d:6a:97:c5:f1:
f5:6e:1b:9d:2c:34:50:72:54:08:5f:c0:75:66:8a:2b:ff:e2:
09:b4:97:b1:66:58:1f:a7:d4:2e:45:23:83:6c:a6:23:c7:da:
23:9b:dd:fc:75:c6:c2:13:72:9c:c7:09:54:1a:34:e3:7a:2b:
a5:32:0d:56:99:a9:50:7f:ce:dd:3b:30:2c:8b:31:2a:48:de:
2a:5e:9e:17:b9:b5:66:4a:8b:ac:4a:a3:77:1e:a8:f5:46:ea:
7b:c8:39:b1:ab:cf:60:6f:e2:7b:36:a0:6e:84:ca:fb:95:03:
a0:31:98:86:e7:b9:61:63:b0:fd:3a:ed:30:d2:f3:6c:a6:01:
d9:36:cc:e9:e7:21:99:23:77:c7:7f:b6:83:41:10:4c:27:e7:
b9:38:6e:da:50:a9:08:28:37:38:5a:32:aa:03:5d:8d:27:c4:
4d:e4:3f:18:42:ae:1f:60:24:f2:c8:fb:81:d4:c3:58:af:d7:
59:ad:4a:59:2b:32:a4:4e:13:db:6c:9b:74:02:92:22:6c:bc:
e1:ca:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:00:29 2026 by rpki-client