Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: j/9pUFRIA+UxHyi6T37Ve4fvAg4z5u+8RcfV/dufmcU=
Subject key identifier: 73:EC:F5:58:24:A3:22:19:2F:4D:54:7B:07:B7:88:13:9D:CD:15:81
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019D9A751AABAD653FE45F65EE687ABDE98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 08:00:58 +0000
Manifest this update: Fri 17 Apr 2026 08:00:58 +0000
Manifest next update: Sat 18 Apr 2026 08:00:58 +0000
Files and hashes: 1: 1-B9Lbj4pKvZfeBlVCluXyZACLgE.roa (hash: dl5qiVx2ohz/ydT7WDU0tUmGSb6dlLqmyduAUAaYC4s=)
2: jSutCugEdF2rS6QxHHGZRxPxhsI.asa (hash: zjJ0AX5FLYwkWoWkgoUko8ALZitnQgcsownFmhLIYFw=)
3: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: UJFOPCU6WkgndNML4x6ZAgMnWom4ZCvh8phWX7cEkBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1a:ab:ad:65:3f:e4:5f:65:ee:68:7a:bd:e9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Apr 17 08:00:58 2026 GMT
Not After : Apr 18 08:00:58 2026 GMT
Subject: CN=73ecf55824a322192f4d547b07b788139dcd1581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:09:fb:22:cd:4d:d0:19:19:6c:49:70:a7:
7a:c6:ec:80:92:8a:08:28:aa:84:2a:89:2e:8f:eb:
91:43:ac:58:de:4f:16:46:73:f7:af:35:8a:49:bc:
36:37:de:57:00:72:e2:49:87:e6:ec:ea:e8:0e:c8:
df:76:5f:2a:8a:78:be:0c:2a:b4:0f:07:bd:a6:b0:
8f:ba:08:96:bb:18:cc:0c:6d:01:f3:a1:f7:8f:1e:
8b:43:4e:e5:2e:d5:11:88:00:30:b1:b4:81:67:c4:
ef:01:a4:b5:3d:67:bc:21:51:11:62:c2:fd:1b:7d:
b5:8c:56:f1:de:0e:9e:a7:e2:45:3c:d7:73:20:22:
81:2a:4a:50:bc:4d:a4:89:78:81:18:74:5f:99:08:
a6:e3:2d:24:14:43:84:78:cf:91:d4:41:65:5e:40:
4a:6b:44:76:47:1d:c4:1a:ae:64:c1:10:31:8a:f1:
0b:59:ec:24:1f:fb:92:81:f4:d2:3d:28:40:b3:fb:
00:cf:9f:83:b7:eb:82:59:7e:09:d2:fa:4c:61:3b:
2d:a3:bc:c3:89:fe:95:c3:06:ca:73:d9:b3:2f:b4:
22:da:2c:8a:fe:d2:13:74:e4:65:fc:8e:0f:4c:0f:
06:3d:d5:8c:71:f7:55:29:6f:af:a5:25:eb:54:56:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:F5:58:24:A3:22:19:2F:4D:54:7B:07:B7:88:13:9D:CD:15:81
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f5:d0:cf:3f:58:be:8d:79:72:e3:d2:1d:aa:48:86:4c:f8:
e7:2b:29:84:ae:a7:f2:5d:78:cc:4d:5a:11:a6:8d:56:f3:fd:
ea:78:b2:33:45:d0:d8:fe:24:8f:44:69:32:42:b2:83:54:ed:
60:13:53:02:14:60:6c:e2:aa:be:d5:34:0b:6a:68:78:a1:97:
e4:80:66:8d:99:54:b2:25:b6:da:c5:fe:f8:50:07:22:b1:e3:
a3:a1:0e:0c:bb:e3:4e:b3:2b:e5:88:31:2a:c9:aa:ae:73:45:
8e:ef:4d:52:80:2f:26:5b:e5:bf:d0:6f:e5:cd:9e:86:e0:6f:
49:49:4f:db:36:27:5d:67:83:72:c5:df:c7:55:64:17:d2:38:
20:11:d8:57:5e:47:31:19:1a:b9:3a:e1:4e:09:03:53:96:4a:
b9:6e:0b:1e:66:62:92:54:11:a1:2b:e9:3f:eb:7e:dd:a8:18:
07:20:a4:74:35:e3:fc:19:d0:ad:03:26:e4:e8:90:d0:13:ef:
c4:d3:e8:24:f0:f7:f8:c2:91:4e:4d:6c:f0:5c:2c:3a:71:fc:
a7:85:92:41:4d:9b:37:ed:fc:41:64:55:0c:79:48:34:39:7d:
34:7a:8d:3a:a3:cc:72:be:9d:b7:c3:53:00:33:c1:3e:dd:ae:
c2:39:b7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:32 2026 by rpki-client