Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: WK0XfYahokl5Vpmc+kCMG9rw+VBUL5Ue+Rx/drW295E=
Subject key identifier: C9:14:27:3B:99:4B:04:09:63:83:79:9A:A4:49:99:01:08:0F:5B:4C
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 019CAC0F965D2EC7EAE558636EB79E9859EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 07BD
Signing time: Mon 02 Mar 2026 01:00:28 +0000
Manifest this update: Mon 02 Mar 2026 01:00:28 +0000
Manifest next update: Tue 03 Mar 2026 01:00:28 +0000
Files and hashes: 1: KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa (hash: Sr5K6ccTAcON+APYQXJhtPURh7qUu9XiFdatnlSg6xs=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: HFwF+y9fd9ajQAU7By7blB4PUBMnkITdE9vXRrZMR+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:96:5d:2e:c7:ea:e5:58:63:6e:b7:9e:98:59:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Mar 2 01:00:28 2026 GMT
Not After : Mar 3 01:00:28 2026 GMT
Subject: CN=c914273b994b04096383799aa4499901080f5b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:ac:2b:6b:6b:b1:6d:b5:bd:18:9a:0f:88:
0b:c4:b2:c7:c6:dd:13:98:af:3a:17:c9:2d:03:b9:
bf:0f:b7:75:d3:d5:39:b8:b7:4d:02:42:f4:bb:1d:
38:0e:f2:1d:65:34:ed:ad:b4:9d:7e:c9:60:9f:c3:
ec:c8:4e:61:ee:1c:1f:29:eb:4c:a8:70:c4:b2:28:
e8:dc:00:76:83:21:87:bb:1d:5d:a7:23:95:ed:bd:
62:a0:62:14:37:63:1b:9d:c3:a3:a2:53:a6:16:bc:
c9:f7:76:1a:dd:8f:b9:3a:45:d8:ec:d4:0b:bf:09:
40:c3:2a:e1:27:a4:ab:9c:a8:29:5d:ae:93:cf:3e:
fb:7d:c1:0c:eb:14:bf:94:89:1e:0e:71:ee:f7:8f:
90:fa:c0:14:af:c3:8d:41:02:b6:2d:f2:14:0d:3d:
ae:76:42:cf:a1:3f:37:87:19:47:c8:1e:49:a2:70:
dd:3a:42:b0:72:11:5d:71:0a:aa:1e:3b:3c:ed:05:
c9:ec:c7:3a:4b:b6:24:ac:44:d9:a6:e7:2c:99:07:
e1:08:65:9a:52:58:20:01:00:a6:d4:76:aa:26:8f:
dd:6e:37:0e:5e:26:07:5a:bc:05:6d:d4:cc:8f:b0:
a4:8e:48:4c:99:59:2a:ec:96:71:17:47:f9:ca:9c:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:14:27:3B:99:4B:04:09:63:83:79:9A:A4:49:99:01:08:0F:5B:4C
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9d:1b:d8:e8:e4:79:62:d1:2d:8d:00:9d:e2:34:06:50:61:
f3:e2:2d:f9:21:0b:76:86:e1:ce:85:f8:28:4d:48:9b:2f:76:
34:84:33:98:8f:be:37:af:76:d2:59:25:d2:3b:f7:27:45:4a:
c6:c8:8c:99:24:ac:7e:a3:40:26:3a:a5:d9:40:1b:ef:40:6a:
bf:bb:85:aa:dd:ec:44:ca:5b:07:3c:d0:08:6c:8b:78:38:b2:
50:2c:83:0a:c7:0e:a1:94:68:29:7e:03:bb:04:ad:9b:e3:4c:
73:dd:ea:66:9b:9a:ed:63:83:4e:05:96:68:a0:41:55:ba:f9:
83:42:f4:3d:86:02:1c:e4:7a:76:a3:25:18:82:d9:83:e4:ad:
94:79:16:c2:a0:78:15:71:0f:5c:16:59:ee:f2:8a:e4:b5:12:
2c:f7:c7:47:35:3c:b8:33:fc:3b:3d:4e:68:90:f0:c2:a5:48:
35:78:81:7c:d1:5b:8c:93:fd:05:c2:da:a6:5f:de:63:9d:11:
a4:f9:a6:97:48:79:d3:92:e1:5f:8b:c3:c7:a4:ef:59:1d:cc:
fe:31:c7:03:79:09:47:16:d4:04:06:4a:14:05:95:59:89:15:
41:43:0e:9a:d2:df:a8:2b:9c:49:96:03:ac:79:38:d5:bf:f7:
bb:07:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:44 2026 by rpki-client