Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: 35KAGjGZV1e2VfsTwNac+Cc8NSioi/FIJ8nbUZudehw=
Subject key identifier: 96:4C:DC:11:E4:AA:54:E8:90:74:49:F6:EA:B6:B5:16:FE:B6:E7:A7
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019EC1EDBAC392A319A3014B95AB93B49BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 17:00:42 +0000
Manifest this update: Sat 13 Jun 2026 17:00:42 +0000
Manifest next update: Sun 14 Jun 2026 17:00:42 +0000
Files and hashes: 1: 1-B9Lbj4pKvZfeBlVCluXyZACLgE.roa (hash: dl5qiVx2ohz/ydT7WDU0tUmGSb6dlLqmyduAUAaYC4s=)
2: jSutCugEdF2rS6QxHHGZRxPxhsI.asa (hash: zjJ0AX5FLYwkWoWkgoUko8ALZitnQgcsownFmhLIYFw=)
3: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: QPwlTnSonJN8/16etPYStMMb5XaY/c/xyAY1SX2B+IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:ba:c3:92:a3:19:a3:01:4b:95:ab:93:b4:9b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Jun 13 17:00:42 2026 GMT
Not After : Jun 14 17:00:42 2026 GMT
Subject: CN=964cdc11e4aa54e8907449f6eab6b516feb6e7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:bd:a9:c8:89:9b:94:66:1a:b4:d5:7b:94:
9d:c3:64:f2:94:f8:97:c3:0e:6b:71:c9:89:10:fe:
fc:05:01:19:62:74:ee:61:b7:ff:e0:b0:a9:ed:03:
68:f6:e6:ea:4d:dd:4b:7b:fd:ce:14:22:6d:9e:a3:
b2:c6:43:b6:00:91:f8:77:f9:8a:64:91:b8:cf:c7:
ff:68:7b:ac:3e:2b:0f:34:03:5b:b9:c9:9f:db:f5:
cd:c4:7f:7b:2b:42:85:9e:2f:71:9d:67:20:61:23:
d7:8a:8b:49:13:08:c3:c7:a9:c8:d6:e8:7f:c9:0d:
6f:ae:2c:84:e5:8a:71:66:2a:6a:b5:8b:8b:ce:af:
3a:ff:19:ca:b0:98:88:a9:26:0b:61:a8:e4:e2:38:
79:cf:98:96:8f:2a:b2:0f:5d:8a:cb:b0:bd:0b:1c:
89:10:10:24:af:cc:e8:80:5d:a3:59:6c:56:97:db:
5d:2d:10:fe:07:1d:91:1c:dd:60:83:16:29:f2:fe:
2a:6f:81:93:05:9d:a9:b4:67:25:4a:ea:d1:b4:1e:
9e:3c:f7:56:5b:68:b0:dc:df:f7:53:65:22:cf:b4:
ec:20:5e:53:58:36:60:98:64:60:aa:83:b0:29:f1:
6b:d8:f6:b2:9b:af:73:f8:cb:7d:39:7f:f0:f1:e7:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4C:DC:11:E4:AA:54:E8:90:74:49:F6:EA:B6:B5:16:FE:B6:E7:A7
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:11:af:75:79:5a:97:72:f1:d3:c4:2e:1e:93:c3:70:0b:a8:
28:4c:04:66:dd:c5:20:88:2e:74:af:ab:df:7e:71:e5:e3:e9:
8c:77:0b:90:6c:39:5c:3f:1c:3c:dc:26:ef:50:4b:4d:67:d3:
ec:d9:75:72:c2:07:56:fe:a7:e4:7e:0d:21:6a:42:74:7d:1f:
c2:13:eb:24:17:9c:68:7e:26:dd:5b:07:63:a1:64:9b:8f:eb:
9e:63:1a:71:be:10:9a:3b:b4:28:81:4c:65:dd:3f:06:99:d5:
58:9c:5f:06:38:ec:6b:a4:82:b2:ca:dd:63:02:76:be:c3:86:
66:3e:dc:76:68:b2:a5:19:03:04:21:f1:86:f1:a7:6b:e3:cd:
68:ca:6b:8a:bd:e9:2a:46:e0:38:19:2d:f8:08:a2:cf:dc:b4:
aa:bb:c2:f0:2a:a2:f6:69:07:25:f6:71:1c:13:e9:3d:d5:5a:
08:3f:7c:87:22:fc:30:75:9c:3a:99:33:5b:f1:d7:1a:2e:4b:
88:4e:c3:71:4e:8e:87:46:fc:7e:03:ca:b8:0b:f0:86:d7:e1:
df:f4:d1:c1:10:7b:a7:7c:3c:96:50:62:f8:15:54:a8:a5:91:
df:e9:de:f8:ae:01:5d:3f:4b:46:4b:2f:a9:08:7a:e6:b8:73:
00:23:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:30:20 2026 by rpki-client