Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: NZW64SrDhmPQseYAgcNf/GkxwfX9Ct5L+/odGHAwyYw=
Subject key identifier: 19:D2:D9:EE:DC:A8:8B:A7:5F:7C:88:48:60:DF:18:87:94:5F:B4:38
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 019FAABF217AF2E020382F42CAA332533EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 094A
Signing time: Tue 28 Jul 2026 22:01:20 +0000
Manifest this update: Tue 28 Jul 2026 22:01:20 +0000
Manifest next update: Wed 29 Jul 2026 22:01:20 +0000
Files and hashes: 1: KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa (hash: Sr5K6ccTAcON+APYQXJhtPURh7qUu9XiFdatnlSg6xs=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: Y/5jjbjuS5AJ3vG/3m4XH+p0M5w1dZELwihUNLyXQrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:21:7a:f2:e0:20:38:2f:42:ca:a3:32:53:3e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Jul 28 22:01:20 2026 GMT
Not After : Jul 29 22:01:20 2026 GMT
Subject: CN=19d2d9eedca88ba75f7c884860df1887945fb438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:14:79:51:b5:03:63:f8:38:3e:e7:ee:01:
72:4e:05:fe:3d:75:a5:69:ed:f3:34:1c:a1:e1:ee:
16:a5:88:e4:58:5b:bd:f9:f7:b2:9d:b8:5c:18:b4:
45:ba:50:6a:9a:50:f6:3e:5f:f2:32:1f:58:c5:09:
ad:68:71:7f:c3:a6:dd:b1:6e:58:d6:6a:fd:d8:b7:
2a:85:5f:57:23:92:1a:9d:df:d0:15:b1:65:2f:86:
ac:f3:38:81:05:c7:69:2f:e1:21:98:1a:13:08:e0:
d0:d8:47:af:37:83:eb:d2:75:63:36:80:ac:ae:b2:
03:ac:39:c9:80:e5:9e:64:a7:74:c7:c3:e6:d5:8c:
8e:c5:f0:99:dd:f7:89:00:7f:0c:1a:7b:df:dc:7f:
93:7b:9f:9e:94:42:ad:e1:67:a5:dc:e5:07:e9:ca:
09:d4:e7:07:86:b8:d1:b9:80:69:08:3f:8f:aa:2c:
84:9d:62:5e:f0:e2:f0:ed:79:e0:32:55:a2:ed:e9:
fb:6f:04:17:1e:41:cf:98:f7:7d:35:0f:49:70:91:
60:2f:31:d8:4f:bb:45:32:7c:89:a7:27:e0:19:1e:
88:08:04:8b:50:4b:70:4e:04:e2:39:28:26:e5:b5:
4c:a7:92:5b:03:d9:77:a9:35:59:79:e4:8c:e0:58:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D2:D9:EE:DC:A8:8B:A7:5F:7C:88:48:60:DF:18:87:94:5F:B4:38
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8d:5d:24:e3:df:1f:7f:5f:c6:72:c0:84:2a:f6:1d:9b:0a:
50:2b:39:f7:6f:6a:d1:f0:f4:c0:ad:b9:5b:2b:6c:33:8c:8a:
ac:2a:43:08:63:2b:d5:ba:3c:09:aa:16:7d:f2:7d:31:4f:03:
30:fa:47:f2:8c:13:c7:13:0f:e8:79:66:de:63:fc:00:64:52:
a3:ce:8b:d5:f1:6b:2a:a6:52:55:60:69:c6:98:07:da:35:6f:
de:c6:af:60:66:46:18:8e:20:18:6f:e5:41:03:16:0b:21:f4:
81:38:82:7c:8d:3a:fa:8f:41:97:59:08:f3:d5:1a:1a:8d:0f:
f2:3f:56:2a:22:14:64:fa:1e:8d:09:7d:27:57:01:46:03:89:
04:94:2e:cd:85:1c:f3:3c:1e:dc:b0:ec:f8:49:89:1f:6e:52:
b9:c8:ec:85:3a:49:12:61:b2:6d:37:8e:42:42:ef:1d:fa:1c:
39:a2:cc:0d:19:40:18:c3:45:ec:4b:b1:e8:64:84:f6:2d:a3:
4c:e6:ff:06:00:69:4f:34:82:f3:72:e3:47:27:c0:e3:ab:f5:
82:5c:a8:06:89:29:32:b9:16:84:16:80:62:9a:87:84:41:d1:
46:b4:97:08:1b:1b:d9:98:ba:24:74:a5:9f:b4:0b:fc:61:86:
09:c6:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:43 2026 by rpki-client