Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: HgOwYYrj3fVx9d79T5y58DAX17LNmikidtKz6/CC27w=
Subject key identifier: 12:24:14:27:97:79:30:6C:C9:51:30:F6:30:2C:DC:1C:B9:AA:D9:D8
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019CAA5820466554EF819F26D4538D25326D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: lkMBU0ulWCYX9Qd2oDU0Fa5nUCQ.roa (hash: 5I+gArCAUlirrf6+Qe9WxJcuIzvziEquXwY3XUiYld0=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: msbQ8CB2yKv/463ViKa6asI6fQaLdv7VQWDhhZ/LSrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:20:46:65:54:ef:81:9f:26:d4:53:8d:25:32:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=122414279779306cc95130f6302cdc1cb9aad9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:46:34:35:bb:29:ba:36:53:5f:82:4c:29:
11:5d:6d:6c:1f:03:38:24:96:68:04:6e:8b:0e:de:
7b:11:40:1a:b8:2e:f0:b6:51:3c:f6:63:3d:22:9a:
c2:02:68:76:2e:7d:6b:07:6c:6f:dc:f4:3b:22:5f:
ce:5b:5f:42:e8:00:51:6c:07:33:18:cb:8a:a0:94:
6d:96:82:93:69:41:92:60:f3:fc:f0:d8:c8:40:3b:
fa:b5:82:2b:4c:cc:c1:28:ae:55:a8:82:03:08:3c:
eb:7d:b1:96:a9:f5:5c:b2:2c:55:e0:81:1c:97:b3:
db:b9:07:21:7e:ca:47:23:71:48:ba:11:3a:08:70:
85:8b:8f:4a:3b:e8:e1:89:85:9f:ea:7e:ce:82:dd:
a2:f6:75:36:63:08:32:6a:2e:d5:e2:96:58:11:85:
cc:bc:98:f7:53:58:17:34:20:15:6d:00:63:b7:11:
a9:e4:cd:2a:89:c0:ca:d9:72:e0:bf:4a:10:b8:c9:
0e:65:f9:4c:ca:1f:fb:c9:65:df:3c:d7:e4:78:85:
56:69:45:ce:4f:7d:b6:b1:78:a0:8f:ee:ef:18:b7:
f1:6a:7d:47:d4:5e:b3:db:de:7e:b0:c9:f6:f3:54:
89:74:fb:55:d7:35:89:a2:33:03:56:10:70:d5:2a:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:24:14:27:97:79:30:6C:C9:51:30:F6:30:2C:DC:1C:B9:AA:D9:D8
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:92:59:4f:0b:99:99:19:f3:00:c2:09:48:f9:c1:a3:cd:c4:
38:e4:1c:e7:68:f3:6a:8a:cb:4d:9c:64:bc:3d:bd:7e:a7:fd:
59:87:68:a9:36:d6:aa:48:ee:b7:3a:2e:8e:7a:73:59:77:ec:
df:e2:ca:a8:ec:ec:f7:e4:52:d2:63:22:0b:3f:3c:7b:e4:d6:
e6:04:b9:38:95:bb:00:e6:e6:63:ba:05:6e:78:11:21:2c:b6:
8f:06:00:e0:d1:a4:77:dd:96:42:2b:38:fe:88:c5:90:6d:1b:
8e:62:59:05:64:44:d2:55:2e:f2:c2:af:94:10:5b:e2:e1:ca:
27:cc:de:12:0b:9a:87:4b:0a:d8:7a:39:52:1f:72:3d:dd:de:
0b:61:0f:bc:62:c2:f4:68:4f:54:54:02:a6:f1:c0:0d:44:55:
be:f1:5c:a8:3b:d4:aa:93:3a:fd:62:fd:86:82:6f:6c:69:17:
e7:08:b2:17:b6:ce:94:88:0d:90:03:f3:b2:e8:02:6c:d8:2b:
a2:ab:8f:43:5a:be:2d:4a:5b:83:8a:36:5d:c0:1b:c8:30:74:
a5:88:bb:b2:9a:63:53:e1:e5:49:f0:2e:ca:03:89:fd:9d:cf:
a7:e5:a2:df:dd:bd:21:98:69:7f:9b:53:0b:22:65:70:27:bf:
83:a7:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:20 2026 by rpki-client