
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
File: OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft (raw, json)
Hash identifier: lVCMuhKmAdzsdit5490/P46EafG+tCynQsi1Fkb1dLQ=
Subject key identifier: 6A:80:EC:E3:F8:C9:9B:D5:95:23:E3:8B:A6:ED:65:AD:DE:45:22:62
Authority key identifier: 3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3
Certificate issuer: /CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
Certificate serial: 019CB136186304AA1BDFDF6A0F6701490F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
Manifest number: 39
Signing time: Tue 03 Mar 2026 01:00:38 +0000
Manifest this update: Tue 03 Mar 2026 01:00:38 +0000
Manifest next update: Wed 04 Mar 2026 01:00:38 +0000
Files and hashes: 1: LcI_BXMvY5aSE3vIzLyzwrL0zuw.roa (hash: slELEFAipdts8+oeGkNV3YMhCrDdwvjfJkdcNFFBnug=)
2: OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl (hash: 3JxEYWtZ7b/UAsZ28LE60fIf1n9cHRmud+FavBXPb9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:36:18:63:04:aa:1b:df:df:6a:0f:67:01:49:0f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0764713e5c8b1d7d2ece048e4ebc139428edc3
Validity
Not Before: Mar 3 01:00:38 2026 GMT
Not After : Mar 4 01:00:38 2026 GMT
Subject: CN=6a80ece3f8c99bd59523e38ba6ed65adde452262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:db:cb:a5:bc:1c:81:fd:2b:5b:58:43:26:eb:
3e:9b:f1:56:12:04:1c:44:79:91:0a:55:76:b1:b7:
ef:e7:29:76:e0:94:51:f9:8e:a8:9c:86:fe:90:c0:
0f:85:fc:86:aa:75:40:90:16:4c:89:68:26:79:4c:
56:d1:e4:2f:d4:0a:11:39:24:ef:dc:42:71:f2:70:
8b:dd:e2:33:82:80:9f:6c:36:bf:ca:a3:1c:f9:c9:
b8:aa:1d:8b:9a:7b:34:b3:f4:a3:b2:09:81:7a:b7:
d1:f6:e8:ca:eb:32:df:2d:fb:74:3d:d7:ef:27:bd:
44:b9:17:0d:a2:88:b9:11:24:76:e6:27:1e:10:e6:
20:32:23:d5:86:6f:87:fb:92:5b:50:b5:71:65:2d:
22:b9:8f:dc:fe:5b:0b:87:14:2a:02:b8:a5:e8:2a:
b4:40:f0:c3:53:f0:c0:a7:9e:bf:f4:d9:36:71:54:
ae:40:c1:de:34:e3:c0:3c:64:98:ed:0b:a7:4a:a2:
21:41:44:76:f3:6c:6a:e4:33:dc:32:64:c6:65:d6:
fd:65:ef:c1:70:f7:3e:db:7f:17:70:1e:c1:c7:9b:
80:f8:0b:d7:2f:e7:40:1d:f1:25:14:a7:1e:f5:9c:
da:58:d1:a1:9b:eb:cc:08:24:29:89:51:af:00:f2:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:80:EC:E3:F8:C9:9B:D5:95:23:E3:8B:A6:ED:65:AD:DE:45:22:62
X509v3 Authority Key Identifier:
keyid:3B:07:64:71:3E:5C:8B:1D:7D:2E:CE:04:8E:4E:BC:13:94:28:ED:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwdkcT5cix19Ls4Ejk68E5Qo7cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65c660-25af-4fb3-af7c-e741999a4d62/1/OwdkcT5cix19Ls4Ejk68E5Qo7cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:74:25:a0:a9:40:c3:8b:b9:1f:7d:5d:db:b1:01:3d:71:f9:
5f:97:8a:77:81:9b:72:b7:41:74:a3:bd:d4:a1:fc:a7:86:4e:
35:6a:5d:77:3b:52:c7:8c:29:f3:df:ce:7f:26:94:31:db:b3:
33:d6:f5:9f:94:29:42:d1:b8:a0:8a:a2:0d:8a:69:f8:22:b8:
02:81:6b:6c:2d:a5:c9:59:44:ea:7e:b5:db:ad:61:fc:30:aa:
a8:1b:ea:45:bd:81:28:55:fe:7b:5e:f1:92:4a:f1:53:31:0e:
36:5b:79:0d:f7:25:ae:1b:d2:e9:54:7d:43:a9:ea:12:cb:c2:
29:ff:24:70:07:dd:37:cf:ac:66:7b:32:b2:cc:8a:b1:55:8f:
33:23:0c:ea:a9:5b:86:59:f1:9a:dd:3c:92:aa:27:7f:38:78:
f6:54:ac:ea:47:70:fc:56:4c:44:a6:f9:84:c4:ab:d7:b9:bd:
a8:6c:6e:47:26:61:42:fa:be:36:36:a3:da:97:d5:02:25:de:
1f:bd:9a:a1:51:60:b8:99:f3:61:23:3e:86:a8:f6:d7:d2:e1:
8b:52:1b:25:03:44:be:80:69:40:70:38:a4:10:3c:ac:b5:5b:
07:70:88:30:92:e0:39:80:a3:68:de:04:0b:d7:29:40:e7:41:
4a:5f:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:44:49 2026 by rpki-client