Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: WeacV8yF7tgbJGh4fF8h3U94O6koWULQRQPIUhJmcB4=
Subject key identifier: 63:87:E9:63:F3:4C:93:FA:15:38:9A:D8:5C:B2:74:DB:0F:98:58:DE
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 01A10ADE714310998CA7A490395732FB75BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1A91
Signing time: Mon 05 Oct 2026 07:01:52 +0000
Manifest this update: Mon 05 Oct 2026 07:01:52 +0000
Manifest next update: Tue 06 Oct 2026 07:01:52 +0000
Files and hashes: 1: MJmEGSwkNgc6tWAjFHwsQalK-pc.roa (hash: zGylhLzO0uiWa1ShFqQYwTVVj/623FBQDk35JT6LjUg=)
2: jSutCugEdF2rS6QxHHGZRxPxhsI.asa (hash: zjJ0AX5FLYwkWoWkgoUko8ALZitnQgcsownFmhLIYFw=)
3: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: dNFkFV2fB+LmbR/YapYnlbXI2fISfa49B/18qvJnNE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:de:71:43:10:99:8c:a7:a4:90:39:57:32:fb:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Oct 5 07:01:52 2026 GMT
Not After : Oct 6 07:01:52 2026 GMT
Subject: CN=6387e963f34c93fa15389ad85cb274db0f9858de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:28:97:ea:24:fe:34:9b:09:ef:1c:a8:1d:
b5:07:6f:ce:18:42:15:33:65:80:46:1b:ce:2d:c4:
a0:4e:2f:58:92:8a:06:01:55:c6:56:ec:9e:e2:e9:
1e:32:75:cb:03:12:a0:e9:af:90:ad:1a:a5:7c:2d:
67:00:4e:43:0a:68:7e:0f:de:67:e9:7d:4f:d1:7f:
9f:9e:9a:eb:b9:e3:68:6f:e9:cb:82:5c:13:a6:8d:
5d:10:88:bd:9c:18:4d:a1:30:20:85:51:a0:3a:81:
0e:19:94:42:41:6a:72:03:09:2f:28:53:94:19:93:
1c:ee:16:96:9e:67:0b:12:35:1d:25:a3:45:5c:fc:
b7:76:fc:43:09:b4:b6:55:55:76:0c:ad:5e:88:29:
6c:8c:c5:26:fd:21:6e:ba:fd:6b:74:3e:a9:22:97:
36:a9:51:7a:8a:68:17:5e:ae:3a:32:da:e2:40:a2:
b8:f9:c3:ad:52:b1:40:b3:fe:2a:58:91:66:c0:7e:
90:b0:cc:50:19:62:e8:e4:7a:e2:d1:62:19:d9:86:
9c:7d:a8:60:34:7a:99:85:ec:27:f9:1c:50:f6:2e:
ed:e2:e2:81:5e:15:d7:3d:bc:f9:c3:f8:e6:fa:2b:
ca:7c:40:6e:b5:35:42:4b:14:10:35:9e:99:57:ec:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:E9:63:F3:4C:93:FA:15:38:9A:D8:5C:B2:74:DB:0F:98:58:DE
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:eb:83:2b:5d:03:d2:97:11:f9:1e:f5:c7:6b:50:4c:9c:1d:
4e:0c:2e:4a:90:f4:e4:15:0d:b9:0a:8d:09:0d:6c:a1:1e:98:
e0:02:41:75:91:09:c2:d4:40:2c:0c:43:be:c5:60:6f:22:49:
7e:b2:02:41:31:48:54:46:ff:0c:11:1f:0e:21:2d:6f:a3:75:
6a:4d:b7:56:b9:c4:18:d5:a2:8c:70:fa:c1:f9:d6:e8:a3:f4:
f9:4e:83:84:85:b8:c8:f7:48:55:54:81:98:05:61:36:32:80:
65:4c:a8:c2:a3:a6:0d:93:18:4f:8f:11:0a:6e:ec:75:de:bf:
ca:9f:c1:fe:a6:12:34:ac:b5:38:34:e1:d0:17:25:eb:3a:b2:
9f:0e:9f:38:c2:b2:a6:82:5b:28:3c:5d:16:95:08:66:ac:22:
57:df:cc:89:64:d5:85:8d:49:e2:7c:3c:e8:6d:25:34:b6:4a:
29:ea:5c:76:a5:17:33:7c:7c:48:e5:4d:54:24:8d:6e:94:55:
c9:73:c5:07:13:86:8b:92:09:3d:59:57:50:db:f1:46:c7:d2:
4f:c2:d6:a4:1b:a9:43:27:35:c0:5d:95:57:38:9e:ce:1f:c0:
0e:71:0d:42:d3:68:4e:0e:89:22:3a:44:f0:f0:98:63:47:44:
e5:1b:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:25:55 2026 by rpki-client