Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: jTifbc9GYRmXO+S4hSUmMNSAaa3Q9Cwaafd89v3hqUw=
Subject key identifier: 56:24:B7:D1:84:BA:65:0F:A2:C4:2B:02:D2:83:A3:3E:4E:63:E3:D2
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 019D98F516F247DEABEA29DF0E5DF2E81AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 188A
Signing time: Fri 17 Apr 2026 01:01:32 +0000
Manifest this update: Fri 17 Apr 2026 01:01:32 +0000
Manifest next update: Sat 18 Apr 2026 01:01:32 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: sqPfPVWu8Pc0deAzoEBmL/M32rUEmY6qhvPBrVgumHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:16:f2:47:de:ab:ea:29:df:0e:5d:f2:e8:1a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Apr 17 01:01:32 2026 GMT
Not After : Apr 18 01:01:32 2026 GMT
Subject: CN=5624b7d184ba650fa2c42b02d283a33e4e63e3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:f7:d2:02:84:50:1b:ed:38:85:4f:58:8f:
18:1d:48:dc:95:6e:22:84:4d:dc:55:1d:16:cf:36:
92:69:8d:df:e9:ab:70:09:9b:fa:4d:0b:3f:ed:74:
74:db:b2:cf:cb:1f:55:9a:d9:8e:c2:f1:83:e2:ac:
28:70:4a:46:9d:d1:d5:23:6e:f7:27:f0:21:28:be:
f3:52:43:d1:ba:60:9f:65:aa:eb:4f:cc:82:c3:8e:
1d:f8:de:c0:b3:c0:5f:e5:4a:1a:33:8a:44:5d:16:
ee:5f:03:a3:49:7b:59:e9:48:f2:a0:36:0d:37:1c:
b2:95:e7:1c:58:40:c0:dd:13:11:f5:01:e6:60:5f:
e5:f0:f3:67:28:ee:1c:49:67:8d:74:d3:26:45:ed:
5f:c5:b6:26:4a:f3:3e:e6:8b:62:37:be:ac:3f:77:
69:91:1b:72:36:43:6f:f0:b6:47:7c:f9:0e:a2:ac:
6e:42:d2:9d:f8:18:14:8c:d4:d6:f1:10:6e:d1:8f:
2c:5f:8a:60:88:0e:7b:83:e5:fd:d3:d7:81:59:ba:
c1:be:9b:25:15:5b:cd:44:43:48:66:cd:8d:d6:97:
ce:a2:e7:b6:49:07:7e:bb:5d:85:d7:7f:0d:54:5c:
36:88:74:ae:b5:52:05:4b:d3:b8:c0:66:6d:46:78:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:24:B7:D1:84:BA:65:0F:A2:C4:2B:02:D2:83:A3:3E:4E:63:E3:D2
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0a:ab:2e:09:f5:c3:d6:3d:05:12:60:f4:7f:92:07:4f:75:
5c:e6:73:45:9d:1f:1c:8a:7e:b5:6c:76:a9:06:e9:aa:3b:39:
6f:78:97:8f:fd:28:8f:fc:b2:e5:2a:0e:bb:b8:50:54:2f:df:
a7:72:20:a7:58:54:33:47:99:31:f7:fc:19:54:39:23:e3:13:
43:3b:fe:19:22:d0:c8:72:38:af:bc:87:36:99:32:cd:e4:06:
8d:f0:ee:dd:10:1b:92:3f:b3:b2:ff:5f:44:80:44:cb:ad:33:
78:da:f9:35:47:57:82:63:c6:f3:1f:ad:79:ba:dc:2a:a2:34:
54:bd:b2:19:48:dd:5e:e3:c3:a8:e3:5a:8d:60:a8:f0:15:e8:
0a:a1:16:b5:86:d5:ed:92:74:2b:3c:53:ad:34:07:5a:22:57:
af:87:93:eb:a6:ef:dd:39:83:4d:62:9a:a9:d1:68:cb:bb:34:
4b:0c:25:d1:51:98:97:05:7a:f8:e7:c6:3a:33:e2:08:76:1a:
d5:e2:02:b9:f8:81:38:1a:88:62:15:03:7c:ab:62:a5:39:c6:
76:12:7f:64:b5:a0:cc:33:d9:f5:70:29:1f:cb:f8:76:42:72:
68:c8:11:13:f2:16:d1:d9:6d:b6:05:6f:c4:cd:28:d1:34:66:
8d:5c:8e:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9RbyR96r6infDl3y6BrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjhlZTBiMWY0MGNiYjEzYTg4ZmRlNGMwYjExNjgzMDRk
ZjJkNmIwHhcNMjYwNDE3MDEwMTMyWhcNMjYwNDE4MDEwMTMyWjAzMTEwLwYDVQQD
Eyg1NjI0YjdkMTg0YmE2NTBmYTJjNDJiMDJkMjgzYTMzZTRlNjNlM2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JH30gKEUBvtOIVPWI8YHUjclW4i
hE3cVR0WzzaSaY3f6atwCZv6TQs/7XR027LPyx9VmtmOwvGD4qwocEpGndHVI273
J/AhKL7zUkPRumCfZarrT8yCw44d+N7As8Bf5UoaM4pEXRbuXwOjSXtZ6UjyoDYN
NxyyleccWEDA3RMR9QHmYF/l8PNnKO4cSWeNdNMmRe1fxbYmSvM+5otiN76sP3dp
kRtyNkNv8LZHfPkOoqxuQtKd+BgUjNTW8RBu0Y8sX4pgiA57g+X909eBWbrBvpsl
FVvNRENIZs2N1pfOoue2SQd+u12F138NVFw2iHSutVIFS9O4wGZtRnjogwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYkt9GEumUPosQrAtKDoz5OY+PSMB8GA1UdIwQY
MBaAFDlo7gsfQMuxOoj95MCxFoME3y1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYt
Nzk5OGY0YmRmMjFjLzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYtNzk5OGY0YmRmMjFj
LzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwqrLgn1
w9Y9BRJg9H+SB091XOZzRZ0fHIp+tWx2qQbpqjs5b3iXj/0oj/yy5SoOu7hQVC/f
p3Igp1hUM0eZMff8GVQ5I+MTQzv+GSLQyHI4r7yHNpkyzeQGjfDu3RAbkj+zsv9f
RIBEy60zeNr5NUdXgmPG8x+tebrcKqI0VL2yGUjdXuPDqONajWCo8BXoCqEWtYbV
7ZJ0KzxTrTQHWiJXr4eT66bv3TmDTWKaqdFoy7s0Swwl0VGYlwV6+OfGOjPiCHYa
1eICufiBOBqIYhUDfKtipTnGdhJ/ZLWgzDPZ9XApH8v4dkJyaMgRE/IW0dlttgVv
xM0o0TRmjVyOdw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:40 2026 by rpki-client