Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: S1uhYXIwZ0WyUsT6wwfB4yO9gpiX86W1XI/WqiQT4yI=
Subject key identifier: 11:B0:EE:D6:F4:04:99:4E:FF:C4:81:E1:1E:D2:1F:7D:82:DD:01:08
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 019D9B51597C4D617D516D19A96A653DC82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 12:01:32 +0000
Manifest this update: Fri 17 Apr 2026 12:01:32 +0000
Manifest next update: Sat 18 Apr 2026 12:01:32 +0000
Files and hashes: 1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: MtDrtj46Rdw8XDZss/cKANqqcDEMp5PXBR4wCXE/4mo=)
2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:59:7c:4d:61:7d:51:6d:19:a9:6a:65:3d:c8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Apr 17 12:01:32 2026 GMT
Not After : Apr 18 12:01:32 2026 GMT
Subject: CN=11b0eed6f404994effc481e11ed21f7d82dd0108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:bc:0c:15:d7:c7:b9:b6:20:30:d8:f4:c1:
d3:93:46:d7:14:b0:e3:61:7b:70:5f:bb:9d:a1:23:
f6:26:90:50:d9:d9:29:5a:12:9c:81:e3:ad:43:8a:
3e:b6:ae:3b:3b:45:c4:04:ae:9d:b5:20:dd:65:31:
48:12:2b:1d:e0:5b:9d:8c:7b:d8:90:2c:b0:0b:9b:
20:d7:ad:bc:00:84:97:74:f4:98:50:1c:d3:30:f4:
34:4f:44:bb:e8:81:4e:b3:f2:74:94:7d:63:86:84:
38:a0:5c:d3:4c:d1:da:cd:4a:96:bc:45:7d:08:09:
8e:d1:ee:ae:f4:02:a1:3d:39:f0:a3:23:23:99:cf:
9b:3b:24:b2:d3:8b:ce:52:62:1b:fe:5b:9a:6e:e7:
75:f3:fe:ae:8d:a8:e9:fb:3c:3b:94:bd:e6:f1:e4:
f1:f3:f8:65:2e:77:f4:47:57:af:cd:a5:18:ad:5e:
c5:e8:6f:2d:5c:33:92:46:d1:38:00:a6:da:65:25:
ed:a1:49:73:87:8e:e3:da:d0:c1:92:b1:b9:f8:0b:
df:97:98:93:f8:3b:df:a8:f6:2e:dd:e3:17:16:49:
80:9c:3d:a1:48:e3:6a:95:fa:7f:a1:9e:e9:61:87:
c1:7f:ea:d4:b5:3a:b0:3e:50:d8:3b:7a:d0:ea:60:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B0:EE:D6:F4:04:99:4E:FF:C4:81:E1:1E:D2:1F:7D:82:DD:01:08
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:49:a5:e7:82:34:01:78:e5:69:7e:98:17:ba:08:2e:1d:58:
d2:92:0f:92:e1:f1:18:a7:a5:53:34:70:ad:1c:b6:ae:88:d1:
f8:2d:95:0e:18:56:f2:e6:e7:75:6c:48:b7:93:f5:52:ac:c3:
25:f6:a4:1e:5a:1e:b9:bf:93:40:2c:32:66:39:98:f8:10:fa:
09:b4:a8:20:11:a2:14:79:39:f6:98:f4:2b:d9:d4:c1:3d:06:
62:f3:81:41:13:c9:ff:c5:c3:2f:f7:4d:30:ff:89:2e:ce:5f:
3e:34:ae:b5:23:89:e5:13:71:55:c8:65:ac:98:2e:13:c2:cf:
60:91:73:0a:bd:4f:88:bd:1a:57:8b:0b:cc:c2:44:a5:ad:fd:
fb:3d:58:ce:6d:e1:bd:a6:2f:57:ec:67:3d:aa:30:c7:b0:3d:
35:7d:42:e1:bf:ca:66:36:94:cc:b8:d8:3f:36:a1:e6:5d:b1:
a0:9b:52:97:db:53:62:d2:5c:8a:f1:da:d0:60:78:23:2c:c7:
45:41:d7:55:c0:fc:9f:ce:9c:86:71:91:8f:f5:bd:77:30:44:
b1:a9:ee:d7:0f:59:14:4e:8c:63:05:02:57:78:36:84:5c:d8:
8d:8e:67:c7:52:d7:cd:49:a8:d0:87:37:bf:f7:8c:ec:74:0b:
91:3a:a6:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUVl8TWF9UW0ZqWplPcgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGNkNDRlYmJlM2QwZDZhMDcyZTc1MTAzZjIzMTYwNjk5
NWY2YWIwHhcNMjYwNDE3MTIwMTMyWhcNMjYwNDE4MTIwMTMyWjAzMTEwLwYDVQQD
EygxMWIwZWVkNmY0MDQ5OTRlZmZjNDgxZTExZWQyMWY3ZDgyZGQwMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDG8DBXXx7m2IDDY9MHTk0bXFLDj
YXtwX7udoSP2JpBQ2dkpWhKcgeOtQ4o+tq47O0XEBK6dtSDdZTFIEisd4FudjHvY
kCywC5sg1628AISXdPSYUBzTMPQ0T0S76IFOs/J0lH1jhoQ4oFzTTNHazUqWvEV9
CAmO0e6u9AKhPTnwoyMjmc+bOySy04vOUmIb/luabud18/6ujajp+zw7lL3m8eTx
8/hlLnf0R1evzaUYrV7F6G8tXDOSRtE4AKbaZSXtoUlzh47j2tDBkrG5+Avfl5iT
+DvfqPYu3eMXFkmAnD2hSONqlfp/oZ7pYYfBf+rUtTqwPlDYO3rQ6mDGXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGw7tb0BJlO/8SB4R7SH32C3QEIMB8GA1UdIwQY
MBaAFDsM1E6749DWoHLnUQPyMWBplfarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYt
ZjdkYTNiODczMmJmLzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYtZjdkYTNiODczMmJm
LzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUml54I0
AXjlaX6YF7oILh1Y0pIPkuHxGKelUzRwrRy2rojR+C2VDhhW8ubndWxIt5P1UqzD
JfakHloeub+TQCwyZjmY+BD6CbSoIBGiFHk59pj0K9nUwT0GYvOBQRPJ/8XDL/dN
MP+JLs5fPjSutSOJ5RNxVchlrJguE8LPYJFzCr1PiL0aV4sLzMJEpa39+z1Yzm3h
vaYvV+xnPaowx7A9NX1C4b/KZjaUzLjYPzah5l2xoJtSl9tTYtJcivHa0GB4IyzH
RUHXVcD8n86chnGRj/W9dzBEsanu1w9ZFE6MYwUCV3g2hFzYjY5nx1LXzUmo0Ic3
v/eM7HQLkTqmHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:10:14 2026 by rpki-client