Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File: OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier: 8SiEt6Sg4Xag2hEErxYPiBpsMcRGiAZacMz4Lwmcqqg=
Subject key identifier: 1F:06:51:90:B8:CF:39:34:34:CC:51:5C:DF:A1:FA:ED:8C:E9:6B:C8
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer: /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial: 019D27DFB1218E1F56C3072EA2BA2BC1F2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 02:01:04 +0000
Manifest this update: Thu 26 Mar 2026 02:01:04 +0000
Manifest next update: Fri 27 Mar 2026 02:01:04 +0000
Files and hashes: 1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: lDMOseM6LmibZ5yicPbjV0YdZI3kcHLDatgoFxg9UlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b1:21:8e:1f:56:c3:07:2e:a2:ba:2b:c1:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Validity
Not Before: Mar 26 02:01:04 2026 GMT
Not After : Mar 27 02:01:04 2026 GMT
Subject: CN=1f065190b8cf393434cc515cdfa1faed8ce96bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:5b:ad:c6:64:d5:52:bf:62:cf:37:57:1e:
9c:48:2e:14:a1:bc:0c:90:33:30:61:00:02:59:71:
53:ee:84:70:88:53:6f:e7:f9:3f:3f:22:73:1a:94:
58:2b:f7:da:7d:3e:f5:5d:f9:b4:70:95:1e:70:dc:
b1:06:10:10:6a:30:f1:e2:a6:17:46:e6:5e:00:d5:
31:c2:4f:ff:65:56:3d:58:06:bd:55:59:cf:a1:5d:
87:01:56:6b:c0:ed:60:b2:ca:d9:fd:43:f8:94:68:
fe:35:c5:fc:10:86:52:8d:72:5d:0c:63:18:d4:ee:
d9:7c:7f:b4:bf:b3:d8:db:4a:e2:99:f4:e4:81:5a:
ab:5a:bc:23:49:8f:84:b6:fc:86:3d:a7:91:8a:73:
48:23:bc:bb:94:1f:a6:81:67:f5:54:d9:29:fa:c9:
48:87:4d:50:07:3a:64:42:42:2b:11:0f:ad:46:04:
ac:c2:c7:38:32:8e:bf:a9:16:e3:78:7e:0f:2e:27:
a1:35:f0:d0:9f:f7:be:41:85:5c:11:01:b3:33:a6:
f9:53:a6:a2:1d:61:ad:4c:d3:a4:d4:1c:cd:c5:c6:
09:d9:93:5b:a2:70:06:a4:50:10:76:a3:cb:31:04:
43:88:85:3c:93:52:94:3f:9f:fe:f7:19:fb:54:22:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:06:51:90:B8:CF:39:34:34:CC:51:5C:DF:A1:FA:ED:8C:E9:6B:C8
X509v3 Authority Key Identifier:
keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4e:f5:17:f5:d0:23:d4:4f:36:6c:4b:97:39:cb:e7:c5:67:
b6:b4:48:f6:2c:5f:cb:3e:05:eb:89:3f:91:06:34:61:69:5c:
f6:b3:b0:37:9c:5f:67:6f:20:af:b4:e2:f3:f0:8d:4a:8c:55:
f0:59:fa:bc:a6:e1:38:84:ec:1a:dd:01:a0:4d:56:18:ef:91:
2b:9c:30:d2:19:51:8a:85:be:1a:cd:37:69:f1:34:85:d1:6d:
e6:aa:fb:3b:ef:17:59:f7:ed:63:36:8a:a3:cf:b6:43:fd:23:
41:d1:3b:44:b6:03:71:b0:48:23:89:c3:1a:76:08:e2:0c:19:
8a:ec:81:99:ca:d7:1b:98:4e:11:ef:33:bd:0f:fd:a1:65:5a:
aa:e9:9d:22:25:68:e4:eb:51:ed:fa:11:47:e0:c7:46:d5:e7:
b1:6d:4e:3f:91:49:3e:81:c9:99:7d:d9:12:6f:41:79:92:ba:
23:47:6e:85:7c:fd:f9:8f:48:05:41:60:5a:00:de:c5:00:06:
9c:c1:2f:aa:69:c8:df:2c:af:c4:56:d7:86:ae:7c:f4:7e:14:
a6:25:90:1d:82:d7:df:08:ff:f0:2f:6b:b2:fd:b1:d3:60:61:
a8:4d:ac:ca:35:94:9f:89:e9:b7:79:ca:04:ac:4f:21:0b:4f:
16:6f:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:20 2026 by rpki-client