Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier: GxQxJ1gS+8R03/dqrhs6NAMIDYZNaLq6bBwR5eVzbWg=
Subject key identifier: 06:54:B4:50:A3:96:20:57:15:51:C9:FB:5C:2F:AF:DE:1F:1A:EB:A1
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 019F95128C97C3FD34F24E28B4DB2EC6E6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number: 0B64
Signing time: Fri 24 Jul 2026 17:00:48 +0000
Manifest this update: Fri 24 Jul 2026 17:00:48 +0000
Manifest next update: Sat 25 Jul 2026 17:00:48 +0000
Files and hashes: 1: 8mrRFShZe3jIWPC5rjWtkIF86Ow.roa (hash: 1eDONGdvpbePJA/RAEZxIbFZz7jJ9+He5LHXPoKLTvk=)
2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: jQl+Unnr98L4H3+XToiMWBj5YvQ71lb7A7t7F7t+BHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:8c:97:c3:fd:34:f2:4e:28:b4:db:2e:c6:e6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: Jul 24 17:00:48 2026 GMT
Not After : Jul 25 17:00:48 2026 GMT
Subject: CN=0654b450a39620571551c9fb5c2fafde1f1aeba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:d3:43:e6:4e:6f:58:fc:3c:34:11:c7:13:
87:4d:9c:17:b8:ed:d9:b9:a6:31:5c:cf:1b:48:66:
5c:82:00:5b:f7:3b:ef:a4:f7:4c:02:eb:7d:fd:25:
7c:f5:d1:62:2d:9e:da:a5:5f:8a:06:9c:83:8d:84:
59:36:7d:27:4e:17:54:0f:d2:42:04:d9:d8:eb:e2:
5a:9c:64:98:c3:06:3a:3c:bd:4c:cc:7a:7d:a7:54:
ce:c3:f2:fd:a8:30:bc:41:3e:f8:82:90:7e:a4:11:
1f:4b:a2:50:48:41:37:ab:32:cf:ca:77:5b:a6:8d:
c2:d2:b0:fa:4d:7e:38:e7:55:65:e1:0d:b3:df:a4:
24:73:07:dc:f7:70:c5:0f:34:91:ef:ce:78:14:85:
cd:5c:fb:f0:4d:9c:91:b3:2e:8a:75:ee:b1:51:cc:
a2:28:44:f6:aa:54:25:86:85:fe:69:16:36:b9:01:
29:d2:1c:fb:e0:72:4f:8c:aa:54:ac:cf:44:37:e2:
32:67:f5:fb:61:9c:de:aa:10:c6:2b:64:59:50:f3:
f1:83:f5:48:9e:11:2e:60:54:c4:5b:c7:af:ac:2c:
12:b2:77:5c:4e:d3:25:83:9a:bc:df:2d:fd:cc:a2:
96:49:ba:29:65:b3:b6:d6:6f:84:69:55:00:ef:95:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:54:B4:50:A3:96:20:57:15:51:C9:FB:5C:2F:AF:DE:1F:1A:EB:A1
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:be:83:c0:2e:9a:ea:14:22:e6:43:09:bb:06:af:1d:df:1e:
ff:92:c9:f5:f4:3a:d5:5a:97:57:f5:88:63:75:23:e9:0f:05:
14:6b:49:af:f2:65:7c:ac:28:0c:ca:93:0e:4b:89:8f:8d:0d:
66:65:fb:e2:b0:40:9a:70:77:00:e3:59:e3:e1:d1:d3:8f:16:
79:0b:b7:57:cc:68:3b:e3:a0:f7:23:c5:b0:c9:8f:ae:31:b7:
dd:c4:0c:60:2b:f5:93:8a:d8:02:10:42:dc:07:6e:4d:d2:f3:
d4:58:55:0d:60:05:10:d3:1f:51:a8:42:5d:b8:2d:7d:49:76:
7e:2e:56:c0:89:8f:cb:f0:2e:d7:87:31:b1:2e:ea:91:25:eb:
ba:58:8f:2d:94:7b:a5:33:d7:0d:e9:54:8d:f3:42:00:c3:90:
0f:19:9c:dd:61:21:bd:e8:f3:3e:bf:60:2c:6c:7a:2c:57:46:
23:c0:54:f0:78:3f:42:e4:be:3e:37:e2:0f:e1:c8:5d:e7:94:
87:9d:e2:98:5d:18:ca:b9:8f:cf:0c:63:ae:cc:e4:c0:38:64:
96:22:eb:b8:a0:8a:1e:6b:f1:a3:48:e2:f6:29:a7:a9:63:6a:
43:55:75:5a:4c:4c:49:2f:5a:80:fa:f8:42:00:7d:23:27:5e:
dc:d0:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:09 2026 by rpki-client