Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json)
Hash identifier: GFyH8LdJw3FnOihxDsFRFybvCZX6UXekJLb6PjgAoG8=
Subject key identifier: 17:EE:C4:CA:ED:16:A8:58:CA:5F:85:29:E7:17:E8:BF:B4:97:1B:1A
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial: 019E205ADCD778F9F523F13BC5F3CC5724B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
Manifest number: 0AA3
Signing time: Wed 13 May 2026 08:01:26 +0000
Manifest this update: Wed 13 May 2026 08:01:26 +0000
Manifest next update: Thu 14 May 2026 08:01:26 +0000
Files and hashes: 1: 8mrRFShZe3jIWPC5rjWtkIF86Ow.roa (hash: 1eDONGdvpbePJA/RAEZxIbFZz7jJ9+He5LHXPoKLTvk=)
2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: aTNngIpteSXKwUsqBjqDLFP/ekXbOm1RiZaoHmj271Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:dc:d7:78:f9:f5:23:f1:3b:c5:f3:cc:57:24:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Validity
Not Before: May 13 08:01:26 2026 GMT
Not After : May 14 08:01:26 2026 GMT
Subject: CN=17eec4caed16a858ca5f8529e717e8bfb4971b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:01:f0:db:6b:70:24:51:e0:46:cd:82:fe:
83:be:0a:cf:f2:06:96:df:19:16:31:39:ae:0e:19:
a5:af:f9:14:12:1f:5d:87:14:ac:32:99:e8:23:5d:
52:67:50:42:c5:5b:87:26:1f:e0:45:36:ea:84:c5:
76:00:4a:20:01:9d:b3:81:15:b3:65:73:43:21:50:
55:99:6a:ae:04:98:62:07:c6:ed:63:f0:1b:94:52:
60:f0:da:6f:83:01:0f:05:1a:18:1d:40:5a:15:bd:
61:7d:20:49:65:e4:d3:0c:9d:91:18:cf:8e:d7:fa:
c7:c5:c6:26:3a:5f:1d:70:66:ac:9c:e0:ba:51:26:
1a:bf:2c:37:e3:0c:68:15:e5:b9:56:40:06:15:a6:
e3:1a:ed:63:2b:24:60:4e:8b:2d:f0:9b:b1:09:98:
ff:ce:ea:65:a8:4d:f8:2b:3f:d1:c8:bd:7a:1c:82:
c3:be:c6:64:00:38:30:13:77:d3:d8:af:07:2f:a6:
28:68:4e:42:59:a5:06:2e:b6:f4:c3:56:6c:18:ee:
63:c7:5c:bb:c9:16:0d:55:55:f7:03:7e:56:3f:03:
6e:31:8b:35:fb:f3:44:17:0b:05:c9:1f:42:7d:6b:
27:d1:bd:15:a1:ad:57:30:59:c1:36:04:8b:7d:22:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EE:C4:CA:ED:16:A8:58:CA:5F:85:29:E7:17:E8:BF:B4:97:1B:1A
X509v3 Authority Key Identifier:
keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f1:95:45:93:25:81:0a:eb:6d:c6:f1:39:07:f2:70:51:d4:
a6:ae:30:6d:33:9a:93:f9:a7:ff:f7:bf:2b:60:2b:66:02:e4:
47:96:3e:a6:7b:40:2a:35:a7:97:72:41:e3:45:56:c1:73:1a:
3c:fe:89:ab:e1:95:a8:35:a8:c8:09:ab:a7:71:29:3b:28:d2:
66:da:65:10:af:85:5b:c5:47:6d:7f:9a:a5:5a:0c:4a:57:79:
a7:ae:f8:18:50:d5:69:ca:66:e5:4b:38:53:9e:d0:d9:a7:df:
54:d2:59:7c:a6:f4:ec:9b:8e:52:d2:a7:4e:42:48:fa:c1:35:
54:af:a1:10:ab:9f:cf:d0:27:d8:52:35:51:a4:22:7d:00:bd:
d5:f8:47:52:3d:62:83:1a:ba:cd:1a:81:65:74:f6:11:e4:d1:
6f:e8:52:47:7f:30:60:97:70:83:9d:55:84:e1:f8:f9:3c:e3:
7b:75:76:7f:2e:2c:19:e2:ca:ac:7a:06:f0:ae:54:ab:0e:e0:
e2:f5:ee:02:6b:fa:31:f1:4d:af:dc:d0:e3:23:22:34:3c:ee:
5e:59:13:0d:d0:5e:b7:3c:ca:5f:4d:52:a2:23:b7:71:64:dc:
99:af:3d:7d:66:cb:c0:b6:5f:20:3b:5e:02:2d:70:a5:19:96:
3a:95:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:56 2026 by rpki-client