Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File: mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier: 997lyIfl1s7a0qLEKBs83Q2Tj5YCBl8P/QxcY7VhX0c=
Subject key identifier: E2:14:21:E6:C2:BB:52:F8:4E:62:65:A7:3D:8C:17:A0:90:2E:C5:3C
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial: 019CAFB5CC6E430B2241960869C0F1209B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number: 0540
Signing time: Mon 02 Mar 2026 18:00:53 +0000
Manifest this update: Mon 02 Mar 2026 18:00:53 +0000
Manifest next update: Tue 03 Mar 2026 18:00:53 +0000
Files and hashes: 1: DEtJZBXl24UTmKRuIq3pxJtnaOw.roa (hash: MndJAH2T2Jh63p0lxR3Y6bgJbjAqRwsstx6Rzo2dgCo=)
2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: BmdeYn6NPMMSsCVqys4TjTYLDV5nDp548TK6IqJXA3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:cc:6e:43:0b:22:41:96:08:69:c0:f1:20:9b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
Validity
Not Before: Mar 2 18:00:53 2026 GMT
Not After : Mar 3 18:00:53 2026 GMT
Subject: CN=e21421e6c2bb52f84e6265a73d8c17a0902ec53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:4d:64:f2:9f:84:dd:f2:ad:c3:1b:60:b9:
61:e2:40:8d:f0:9e:2e:71:cc:c7:c9:37:bc:14:37:
0b:39:c9:a4:2b:9f:b9:c8:c4:04:90:1c:d1:82:49:
1d:36:81:be:0e:ee:ad:37:c1:30:10:32:35:64:49:
f2:9d:9f:17:cb:8f:e2:32:eb:bf:5a:fb:e8:b3:36:
8f:aa:a4:17:88:65:81:7e:cb:c9:cb:33:67:9d:62:
18:07:7c:4c:fb:d0:99:ed:a3:de:ca:e9:69:c1:d2:
91:8b:ac:2b:ea:7e:7c:89:94:3d:92:bb:7b:f6:78:
36:78:20:02:4c:74:5e:d1:7d:47:18:e6:6d:2f:9b:
b8:11:de:07:fb:a1:ab:4f:13:32:49:bb:94:4a:5d:
a0:b0:b7:c2:c2:9c:39:d0:64:37:cb:9d:b0:c8:fa:
40:1d:c9:9c:8d:24:a6:a3:33:ad:b5:e2:57:ce:8f:
08:65:0a:2d:53:1e:ee:cb:68:98:f1:76:60:ae:74:
1a:be:e1:94:7a:93:69:cb:5a:2d:25:85:ea:25:34:
3a:8e:8e:57:95:68:57:6e:11:fc:68:01:2f:8f:58:
6d:af:1a:81:e3:17:37:d5:3e:0f:3b:a4:b3:21:b1:
34:2c:54:87:4d:8b:c0:ac:5e:6b:bc:f0:7d:83:4d:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:21:E6:C2:BB:52:F8:4E:62:65:A7:3D:8C:17:A0:90:2E:C5:3C
X509v3 Authority Key Identifier:
keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:73:22:4d:bf:e0:a5:79:55:23:69:72:c7:db:06:b8:20:a0:
dd:1d:81:59:6b:4b:8c:15:08:f3:b6:69:75:7a:2a:2f:b5:6f:
33:34:ec:3f:78:ee:ec:ce:6e:aa:67:08:f7:7a:63:a5:38:55:
33:35:d6:ee:81:00:09:6a:f8:27:b3:d8:44:a4:a4:70:42:54:
b0:95:cd:8d:5a:56:ea:ee:15:ef:a6:67:7f:3c:a4:b6:14:d5:
90:12:8f:10:6b:17:e5:20:90:eb:e3:b9:ef:81:00:e0:12:56:
64:64:b8:77:54:06:8f:49:7c:b6:36:f0:f2:f5:2a:ad:77:a9:
e5:ac:28:33:98:77:8e:c5:68:23:a4:f2:5d:50:39:61:12:11:
48:16:62:38:2b:63:fb:c9:e5:cc:da:4a:28:7e:61:84:2a:1a:
12:42:59:4e:f1:27:12:c5:e8:1a:ea:15:36:d3:bf:d4:1a:8d:
55:e8:3e:e5:c5:a3:55:21:38:9d:87:73:41:4e:78:5a:62:db:
f2:84:d9:f7:f2:c7:cc:a6:61:73:11:e5:71:4b:e9:42:f2:12:
36:fe:31:f3:1f:3b:74:14:e5:92:8d:79:7f:a4:69:fd:f2:c6:
cd:8f:37:ff:e1:c0:02:02:50:a6:9c:73:a4:40:d4:7d:5b:b6:
ad:ea:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:08 2026 by rpki-client