Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: 2DkI5vehex9zgwGeTAJP2zQHYRWZyW78DYjSiWu7Tjk=
Subject key identifier: 10:AF:00:7D:85:A5:2F:55:91:D5:5E:89:D5:0F:C6:A2:36:9B:F0:FC
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019FAC3F003948B855EFBE6374EE501A1F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 06D3
Signing time: Wed 29 Jul 2026 05:00:37 +0000
Manifest this update: Wed 29 Jul 2026 05:00:37 +0000
Manifest next update: Thu 30 Jul 2026 05:00:37 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: RuN1qdiouffSKKsWWigCMB7PDYFJNRJmvCk9LnWMfHU=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:00:39:48:b8:55:ef:be:63:74:ee:50:1a:1f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Jul 29 05:00:37 2026 GMT
Not After : Jul 30 05:00:37 2026 GMT
Subject: CN=10af007d85a52f5591d55e89d50fc6a2369bf0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:7f:6c:05:40:cb:3f:0e:43:10:78:e4:96:
db:45:a1:d2:b6:9e:0c:d5:ee:f2:7b:04:ac:d7:d9:
ca:bf:8a:ce:ca:e0:bd:b9:17:82:d4:1e:68:44:8d:
b5:db:a2:b5:ed:58:21:c3:9e:76:14:ce:42:8b:ad:
dc:98:5a:ed:f8:c6:a9:20:06:78:d6:a8:33:51:e7:
c6:7e:48:04:a6:8f:b9:e9:81:54:7b:5e:c3:4f:3c:
78:bd:d7:e7:df:f3:d7:3c:fd:7d:f4:00:91:e9:ec:
2e:d2:5b:df:d5:16:37:1e:3b:19:ef:57:88:3d:35:
eb:4b:88:f4:54:38:d4:0a:e8:3b:7a:aa:3a:b9:13:
fc:3e:96:2a:30:9c:8c:9b:76:b8:2d:e3:22:b8:c8:
a1:96:c3:43:3f:ca:6a:b4:a3:ce:59:35:0c:d3:73:
ad:d5:d0:ef:7d:71:c3:ab:6a:91:f7:f7:0e:ad:ce:
96:45:92:5c:44:37:b9:b1:24:9e:a8:41:31:f2:db:
29:24:4f:53:b1:f6:9f:b9:2a:15:be:bd:9a:c6:26:
15:bc:45:bb:dc:ab:5a:eb:a1:b0:ea:b8:4c:e0:88:
8c:4a:25:8c:8a:17:dd:69:3a:bc:d3:80:cf:35:bf:
f1:e9:f3:af:48:84:d9:29:78:09:87:6d:88:c8:2c:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AF:00:7D:85:A5:2F:55:91:D5:5E:89:D5:0F:C6:A2:36:9B:F0:FC
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4f:72:41:86:7f:94:ab:65:c6:8d:1d:f4:92:bd:05:a1:32:
2c:14:ae:27:90:a6:7a:b5:93:be:dc:a9:6b:40:1d:0a:ba:d3:
44:c6:14:cc:43:2c:ba:76:25:5c:53:3e:d8:3d:fb:40:c8:1f:
20:88:22:53:a1:c9:1b:90:bd:6b:50:3d:c0:df:2f:0d:db:98:
3b:1f:57:8c:67:5b:f6:ce:be:36:7b:e1:4b:c3:18:66:13:67:
c5:f9:cf:c5:3f:41:64:4b:cd:78:ff:a3:c6:89:ec:3b:82:00:
11:33:2f:61:6f:0d:44:d8:73:93:b4:e7:cb:17:7f:bf:09:53:
4a:ea:56:cb:b3:5c:3a:57:82:c1:ad:c9:2f:9d:e8:5c:2b:f5:
11:9c:7e:25:36:0a:fa:85:ea:6c:d2:59:2a:f3:d9:b4:58:34:
eb:5d:3e:86:c5:41:b7:35:ee:7b:57:80:67:ba:f6:6f:43:19:
d3:24:d4:9e:dd:60:80:73:7d:d5:3e:7a:a5:ea:04:a8:5a:82:
69:f6:88:dd:39:df:35:5f:7f:6b:77:39:fb:fd:dd:88:3d:f7:
30:a1:ab:9e:a7:78:85:0a:78:b4:31:38:1f:b8:5b:9a:3b:76:
4e:fb:80:c3:f4:1b:52:a7:29:aa:ba:a5:33:5c:40:9b:34:e0:
89:09:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:11:03 2026 by rpki-client