Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File: mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier: AyhoFP3xxetKMcv7xjSXWE4Yt8X51yBQlAi87iaa2xI=
Subject key identifier: 34:F8:ED:21:50:B7:57:D8:F4:8B:BC:D6:89:2E:BF:56:01:E7:96:05
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial: 019CADC85DC427B3F070EA743E369B2B09A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number: 053F
Signing time: Mon 02 Mar 2026 09:01:55 +0000
Manifest this update: Mon 02 Mar 2026 09:01:55 +0000
Manifest next update: Tue 03 Mar 2026 09:01:55 +0000
Files and hashes: 1: DEtJZBXl24UTmKRuIq3pxJtnaOw.roa (hash: MndJAH2T2Jh63p0lxR3Y6bgJbjAqRwsstx6Rzo2dgCo=)
2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: kt6/CIGiG6uZLoxcAF5EN6cdn39QMPH0Ky8/WEsEsbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:5d:c4:27:b3:f0:70:ea:74:3e:36:9b:2b:09:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
Validity
Not Before: Mar 2 09:01:55 2026 GMT
Not After : Mar 3 09:01:55 2026 GMT
Subject: CN=34f8ed2150b757d8f48bbcd6892ebf5601e79605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:72:e7:0b:38:7e:60:c6:72:3b:1c:75:69:
d8:69:98:2b:f0:b4:c1:ca:c3:83:c5:ef:6d:c1:cc:
ca:25:58:dc:b7:d3:ca:d3:66:07:e4:24:74:2c:92:
58:66:1a:c7:25:73:e6:4c:88:05:e2:3d:60:1a:c0:
2b:35:f9:39:c5:c7:02:f7:29:10:27:f9:5a:52:71:
7f:63:5b:3d:96:56:29:e3:0e:d3:85:71:05:72:be:
47:10:e9:e5:33:04:4a:25:59:92:4d:e3:72:5b:62:
8c:b9:e4:6e:fc:c5:52:6d:fd:77:fe:f5:91:ed:e2:
09:4d:95:46:c5:4d:4f:24:2a:5d:78:36:15:5c:8a:
b8:bb:fb:eb:97:4b:d7:49:18:ab:a7:8b:56:ca:71:
9b:35:6b:8b:68:22:17:9e:2d:b1:53:12:be:0d:f9:
d9:16:5b:af:79:1f:06:6e:01:2a:ce:3c:b0:e1:6c:
96:91:7d:8f:1e:48:2b:5e:b5:4f:b5:53:7d:f8:34:
ac:50:81:26:e6:a3:87:aa:3b:95:04:73:ae:67:9a:
af:28:3a:15:e6:0e:8d:8c:22:a3:2c:4a:ce:12:69:
09:af:32:7a:94:75:ce:4c:85:5f:a1:83:6a:67:18:
d1:dd:99:a5:21:e6:c0:93:c5:0b:c3:ff:04:f7:63:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F8:ED:21:50:B7:57:D8:F4:8B:BC:D6:89:2E:BF:56:01:E7:96:05
X509v3 Authority Key Identifier:
keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f5:4f:79:6b:f5:2e:6b:44:be:f1:3f:d5:c0:70:75:68:ed:
45:f7:11:5e:bb:b3:77:01:b2:03:0c:93:29:3f:20:a7:41:36:
bd:db:15:bb:cc:51:33:67:90:9b:0f:88:a6:da:89:c3:42:d5:
d7:cb:99:87:d3:3c:79:58:48:af:d9:89:f2:06:16:41:23:62:
e9:09:c3:cb:3b:c8:bb:d1:01:10:9b:81:30:e8:ac:e4:db:23:
87:1c:8c:b1:f1:1a:df:d5:cf:62:85:d8:dd:4f:28:43:66:64:
52:a1:db:c1:ee:d0:62:68:2c:cc:4d:98:33:87:eb:de:51:ca:
a5:36:0a:a5:2b:2b:91:68:1e:e9:fb:f2:6d:07:a5:6f:73:ed:
d6:e0:48:d8:88:23:d0:b6:5c:5c:3a:d2:a8:25:fb:59:dc:d4:
02:bf:a5:c4:6c:72:e2:b7:e5:99:82:69:10:e6:f7:02:8f:43:
bf:b1:7e:93:f8:61:e8:c0:2c:10:a5:ad:77:e6:d0:77:96:dd:
5b:0e:7c:77:f8:6e:cd:8c:92:7b:a3:32:21:a1:46:b4:17:4e:
86:c4:9b:d3:2d:2e:2c:91:6c:95:20:c4:42:81:f5:42:ab:28:
35:20:b4:36:10:13:b8:2c:b9:ec:7c:b4:0f:d0:e4:aa:2c:46:
78:af:5b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:52 2026 by rpki-client