Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: 5mc4PDgD+TYCftRtjBZLS+64SE3XZ6zSS0SSW8y8O/k=
Subject key identifier: C1:86:0B:53:B7:31:83:ED:CA:68:EE:60:DD:89:C0:28:2D:D2:E0:06
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 019D999999FB5682C1D70ED4F7123AC2232A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 0838
Signing time: Fri 17 Apr 2026 04:01:13 +0000
Manifest this update: Fri 17 Apr 2026 04:01:13 +0000
Manifest next update: Sat 18 Apr 2026 04:01:13 +0000
Files and hashes: 1: KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa (hash: Sr5K6ccTAcON+APYQXJhtPURh7qUu9XiFdatnlSg6xs=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: uhDxK7j90KnMxb9ZKOUZ/BFg5LIzFGeSDHQu75nhkq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:99:fb:56:82:c1:d7:0e:d4:f7:12:3a:c2:23:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Apr 17 04:01:13 2026 GMT
Not After : Apr 18 04:01:13 2026 GMT
Subject: CN=c1860b53b73183edca68ee60dd89c0282dd2e006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:b6:0b:5e:e8:ef:5f:96:66:78:85:05:c4:
46:c6:19:7d:c4:a2:84:78:d5:b9:f0:6b:60:9e:20:
ec:14:9a:53:d2:cb:1c:c6:ac:f2:5f:df:6c:73:92:
11:31:1d:61:cf:71:ae:dc:86:10:19:56:8e:a0:7c:
36:06:e1:d7:ab:ca:3a:9d:6f:69:0b:a7:bf:d4:cb:
5a:f2:df:16:6d:c0:e9:99:dd:e7:bc:03:75:51:f0:
d6:ab:26:3c:84:0a:42:62:79:cf:55:65:4e:c0:78:
ea:a7:77:c8:27:ec:14:06:7a:31:d7:df:a0:6c:dd:
49:09:ad:94:73:b0:9b:4e:d4:05:77:6b:9e:2e:67:
30:b8:74:a1:9b:e9:63:cf:b7:d4:ce:a7:7d:8b:28:
34:29:aa:40:05:40:79:42:3d:89:63:74:6c:bb:57:
5f:ab:88:eb:ee:96:91:db:90:1a:54:49:62:98:ec:
7f:88:a2:1e:26:15:8a:e3:de:43:a0:25:0b:8e:c9:
e2:be:91:76:12:d3:cb:d4:3a:8e:38:39:98:a7:0d:
31:db:c6:bc:8b:3d:be:a7:26:28:0c:a9:29:d9:11:
30:b3:f4:df:52:58:d9:f1:c5:7b:a3:a7:35:54:53:
9b:fe:90:85:1c:cf:e8:49:7e:67:67:9a:12:17:c3:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:86:0B:53:B7:31:83:ED:CA:68:EE:60:DD:89:C0:28:2D:D2:E0:06
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4a:99:10:02:57:5d:24:21:40:84:07:98:9e:e5:6a:91:ef:
e1:13:40:e5:39:70:7b:93:ad:e8:61:c2:5e:84:13:8e:8d:cc:
7a:de:bf:08:54:54:50:e6:de:10:4f:42:24:04:90:47:2f:8b:
d6:18:09:9a:4a:42:bf:fc:e1:a4:a9:34:99:87:f4:73:45:77:
3e:34:9d:d6:18:35:97:f0:35:dd:0f:43:72:7d:25:42:73:8a:
de:d7:5a:09:a9:97:fa:48:a3:70:b2:cb:4c:c3:d4:43:40:b8:
9e:73:20:7d:f7:d8:86:ef:39:6e:c0:10:bb:79:45:e4:39:6c:
fa:1f:7d:41:ea:14:dd:63:39:ce:d6:ce:d5:18:a1:67:a2:c0:
ba:47:95:a0:25:4b:6d:27:1a:78:8a:85:12:ec:65:bb:b9:98:
19:ee:04:65:f7:ac:c5:97:5f:e2:39:1c:b3:09:c6:4d:6e:72:
a0:78:d2:b1:3f:bb:66:d2:0c:fc:6e:98:f1:00:f5:a9:07:44:
58:76:29:8e:b4:54:a8:f7:98:b4:b6:af:e4:95:b5:9a:30:55:
a3:4a:25:b1:4e:3a:d8:e3:3e:39:74:de:f2:e1:f9:e8:fe:dd:
9f:c9:62:da:dd:a5:b6:b7:8e:49:82:84:b1:4d:8f:11:5b:a2:
72:73:1b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:54 2026 by rpki-client