Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
File: OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json)
Hash identifier: oemHCLyiDNrfdCnul03W7Cxg30NjgQCm+S90TAMjQlQ=
Subject key identifier: 73:3D:6E:78:9B:62:F1:70:C0:03:78:E5:1C:4C:3F:A7:E1:B5:6A:E0
Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
Certificate issuer: /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Certificate serial: 019CAC46B4BC7CCDC82519DE53386F1CA10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
Manifest number: 07CB
Signing time: Mon 02 Mar 2026 02:00:40 +0000
Manifest this update: Mon 02 Mar 2026 02:00:40 +0000
Manifest next update: Tue 03 Mar 2026 02:00:40 +0000
Files and hashes: 1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: wDEVzZ4ImT9TlYrCOn7kAnBcNglsZ+xfVJc4AHKT7I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b4:bc:7c:cd:c8:25:19:de:53:38:6f:1c:a1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Validity
Not Before: Mar 2 02:00:40 2026 GMT
Not After : Mar 3 02:00:40 2026 GMT
Subject: CN=733d6e789b62f170c00378e51c4c3fa7e1b56ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:65:e9:f0:ea:fb:57:e4:42:1c:7e:85:06:
df:3d:d9:0c:0c:27:49:0e:a0:6e:8a:1d:a9:9f:e8:
dc:71:97:62:39:e9:ef:15:19:48:a6:c7:fd:d5:ba:
f5:5c:b3:44:72:dd:38:ec:a5:14:a0:ef:01:a2:0a:
0c:dd:4e:63:d0:e1:48:12:e0:82:f6:72:a3:fe:fd:
65:b5:1b:e1:ce:f1:42:df:37:5a:a8:87:da:37:81:
4a:99:23:b6:7f:ef:4b:af:67:e4:4c:3a:98:5a:64:
d7:4c:50:3b:1c:2f:c8:e6:35:6c:49:94:30:ce:11:
76:6f:6e:70:4a:7b:27:d8:55:29:67:0a:02:fa:fb:
31:c4:13:68:20:50:89:ed:7f:71:b2:b6:b3:05:cd:
24:f9:11:b8:1d:48:22:6b:45:28:61:c9:1f:57:f2:
e3:4c:77:3e:7b:4c:77:a1:57:aa:d8:a5:6e:ab:25:
93:5f:a4:2c:14:6a:79:c0:88:0f:95:e6:49:87:48:
b1:84:14:16:82:63:1b:a7:2a:e3:e8:f8:9c:21:5f:
58:42:99:47:f9:e9:51:75:12:22:44:71:57:83:f0:
f3:3e:1f:e9:96:ef:3a:30:2d:7a:ed:d3:a1:96:73:
5b:d7:c6:90:21:37:95:71:5b:e6:4a:3b:7d:a2:03:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3D:6E:78:9B:62:F1:70:C0:03:78:E5:1C:4C:3F:A7:E1:B5:6A:E0
X509v3 Authority Key Identifier:
keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7c:d2:ae:d3:07:0a:68:b2:5a:f9:a7:18:e2:88:63:68:a9:
74:82:2a:ac:bb:0f:04:ef:a8:41:7f:a6:a1:bc:b8:e1:2e:a0:
80:6b:96:a0:80:63:a9:38:09:86:6e:48:f0:57:a2:92:29:e9:
26:fd:d1:2e:6b:73:72:2e:a7:78:47:a4:a3:20:52:d4:94:23:
33:a0:57:5d:a6:b4:4d:e8:1b:91:68:01:7b:c9:38:9f:e1:0e:
08:43:62:33:ec:19:ff:c4:98:00:2f:87:54:98:07:77:3a:26:
ca:26:eb:fc:ae:fd:9f:e1:89:36:8c:d4:b0:e5:37:d5:67:ff:
e7:13:72:1c:58:2f:e2:33:f7:8a:6c:0d:5f:30:86:80:d6:02:
00:05:3a:58:be:c9:79:e7:e6:e9:84:69:83:09:9f:10:56:8c:
ac:0b:a8:36:fd:dd:7e:f2:42:b0:c2:c9:38:79:66:68:0d:f0:
54:50:b4:24:3c:97:3f:2b:83:51:73:65:e9:fe:ab:5f:b0:6b:
70:34:6e:6a:48:9f:8f:da:09:1a:64:fa:01:aa:8d:f5:62:39:
da:a7:55:d3:2c:ef:e6:21:8c:b1:2e:7a:b8:e6:e6:20:52:df:
15:08:c0:43:fd:22:73:6c:41:ee:a3:c4:0f:1d:77:a0:fe:32:
a4:a4:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:20 2026 by rpki-client