Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: 4r3Q1wjBsNGYIF/SU7SeSMfNIY5q40m2c9CfnCE+2Z0=
Subject key identifier: 49:6A:27:B4:8A:29:49:DA:B2:F8:33:BB:43:E8:20:6A:40:32:AB:0A
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 01A128E80519E73337951CA9C6469EC91A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 03:00:56 +0000
Manifest this update: Sun 11 Oct 2026 03:00:56 +0000
Manifest next update: Mon 12 Oct 2026 03:00:56 +0000
Files and hashes: 1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: rzHoHoP6sjtcU/vjTE6+e3d6GWRhhvrijFOa8V4Ekkw=)
2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:05:19:e7:33:37:95:1c:a9:c6:46:9e:c9:1a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Oct 11 03:00:56 2026 GMT
Not After : Oct 12 03:00:56 2026 GMT
Subject: CN=496a27b48a2949dab2f833bb43e8206a4032ab0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e1:fe:bc:13:d0:03:92:b3:d3:47:44:c6:be:
01:ae:2f:31:41:ea:2e:64:08:af:57:47:38:2c:64:
a9:06:5d:ba:44:45:25:2b:b3:04:23:bd:c3:af:5c:
80:34:b9:37:76:51:f8:c0:7a:a0:ee:27:7d:ab:43:
78:7e:06:ec:7c:5f:51:35:81:0e:30:7a:8e:11:73:
ac:3e:5e:3c:3e:9b:49:78:62:d7:11:ce:a2:b2:c1:
de:41:1b:12:9e:21:2a:2c:f9:b1:62:75:83:d2:d0:
a4:29:51:ac:10:0f:40:15:fc:b9:c3:6e:37:f5:48:
73:29:f2:d6:6a:ba:59:c7:a0:0b:59:4c:2a:cd:da:
07:3e:62:1a:8c:37:20:3a:80:eb:e1:b3:80:1b:7e:
03:bc:3f:b2:68:6b:0c:a2:4a:bf:30:af:ec:8f:ec:
d7:17:f3:da:d6:69:17:02:25:8b:5d:61:e1:ee:f6:
3a:94:c4:c3:ba:6d:0a:5b:78:8f:c2:a3:1b:7d:00:
96:b5:69:e2:44:fc:64:9f:97:43:84:fb:60:e4:4e:
26:e8:c6:22:33:8e:4f:9d:7e:b3:6d:52:97:e3:3b:
86:44:ae:bb:00:46:bb:4e:b9:b0:9f:7c:15:fe:7f:
05:ce:47:f5:64:93:c0:40:e9:0f:0d:0d:51:8b:13:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:27:B4:8A:29:49:DA:B2:F8:33:BB:43:E8:20:6A:40:32:AB:0A
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:cb:15:2e:e8:3d:08:95:cd:b6:51:cd:c1:d4:3a:17:d5:2f:
cc:45:19:ec:51:17:0b:4e:8c:29:2c:7d:bc:df:5f:03:b5:0b:
44:ff:51:91:77:8a:d7:d1:41:1c:8e:0e:c8:e0:7d:dc:51:ab:
59:15:cf:4f:98:28:d6:c5:58:0d:7c:fb:12:46:a6:cf:b2:16:
d2:32:0a:92:22:d0:4a:8a:c2:72:19:22:2c:69:08:4f:4a:8a:
7c:60:26:cc:20:c3:8f:d6:36:46:cc:2b:ad:a0:34:39:21:4c:
15:5b:7e:18:56:ac:d3:72:63:12:5e:b3:c5:13:f6:59:23:c5:
26:43:d9:63:cf:b2:9f:8a:7e:ee:a8:f7:57:ac:25:f0:de:b6:
d5:c1:0e:63:d8:82:bc:79:dc:86:78:1d:50:77:b9:21:eb:72:
34:67:c2:48:eb:39:4a:0f:9e:21:b1:a1:0f:0c:56:91:d4:50:
ec:11:a1:b9:7d:db:d8:dd:65:61:52:a3:b1:78:2b:94:6a:e8:
3e:a0:0a:30:5a:1c:12:9f:79:16:20:9c:6a:7a:b9:b4:bd:6d:
3b:1a:e4:94:2a:e7:3c:d1:e8:8d:6f:9c:3c:1b:b4:a8:72:86:
ca:d9:3c:e3:08:34:5f:96:cb:38:c6:a0:40:f9:7e:bc:6c:af:
19:ad:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:05:55 2026 by rpki-client