Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: Yj7CQqDpTPUAi9d4KUGxRMgow7bJauMH9v8dpz98pAM=
Subject key identifier: 68:FC:7D:87:93:CD:B2:F5:E0:D1:58:2A:F8:96:78:CA:09:7F:28:DA
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 01A10BB8F41960F9DF5485D9F53E97317247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 0789
Signing time: Mon 05 Oct 2026 11:00:32 +0000
Manifest this update: Mon 05 Oct 2026 11:00:32 +0000
Manifest next update: Tue 06 Oct 2026 11:00:32 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: PGMkPAT+ou7qMZKIAkdbkgWFAeSoy+xUDa7X8K6e4uc=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:b8:f4:19:60:f9:df:54:85:d9:f5:3e:97:31:72:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Oct 5 11:00:32 2026 GMT
Not After : Oct 6 11:00:32 2026 GMT
Subject: CN=68fc7d8793cdb2f5e0d1582af89678ca097f28da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:47:b7:1c:3d:e8:f0:4e:dd:01:6e:87:cc:
1a:12:a3:78:9b:9f:21:98:e0:c8:da:1c:4a:52:45:
3b:dc:f6:21:13:c4:0c:6a:d0:6f:8a:8e:a9:1c:4f:
be:d7:43:13:8d:61:2c:c6:f1:a8:66:de:4e:c0:eb:
97:a5:4f:76:0f:7e:ac:61:45:29:22:b5:9a:62:80:
b5:af:30:42:f2:4d:41:2e:77:55:22:ad:5f:2c:16:
2f:0e:56:c3:ab:d5:c9:91:d5:e1:da:34:84:82:08:
64:42:c5:9d:d7:89:0c:af:f8:4c:6b:51:59:28:c7:
cc:11:e6:63:a5:5a:5b:5a:97:78:6f:87:da:5c:c6:
9d:01:84:20:5d:1f:7a:0d:6b:24:76:b8:2d:f9:fa:
50:2e:48:75:31:f3:c2:44:46:f9:b2:c1:9f:24:8d:
7a:61:fd:72:31:ab:32:fb:3f:ee:82:83:30:73:3c:
65:8c:eb:4a:9b:af:87:e6:b7:61:9a:36:18:6b:f5:
de:de:2b:ac:2a:0c:6d:a8:64:13:22:4c:8a:58:11:
af:5b:46:8b:52:53:b1:1e:32:62:84:f4:55:ef:c4:
60:1f:de:eb:d8:1b:2c:5c:dc:ed:e8:e8:f9:ac:a7:
a2:f1:3f:97:ae:dc:b5:ca:d3:c3:87:d8:dc:28:69:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FC:7D:87:93:CD:B2:F5:E0:D1:58:2A:F8:96:78:CA:09:7F:28:DA
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cc:46:ea:cb:91:0e:40:51:61:d9:5c:84:cb:1f:54:37:1c:
f2:08:e9:05:53:36:55:29:74:4c:88:7f:c0:ce:84:fa:eb:7b:
e4:20:73:ac:33:c9:06:05:52:6e:49:a9:43:3b:6c:91:3f:1c:
08:32:b1:ff:b1:36:f3:e9:7d:65:5a:d6:28:08:18:a4:5b:d6:
a8:a5:ea:5b:55:71:67:87:76:9e:c3:eb:44:dc:98:ad:c3:1c:
4b:48:a5:cb:7d:ee:eb:c4:84:cc:13:77:b8:14:68:0b:e5:11:
02:46:be:e3:23:fd:de:2f:54:77:96:4d:93:85:ff:5f:25:6e:
9d:94:25:0c:47:65:ee:e0:51:3a:93:03:33:2e:bc:7b:28:48:
08:4d:ab:0f:48:35:59:d1:79:40:d0:74:aa:8b:44:10:cb:84:
50:dd:58:3f:19:a7:14:35:6b:d2:47:54:c0:ec:b1:19:2d:86:
72:0d:c7:ce:7a:ee:96:6f:54:e6:63:c2:e0:70:34:41:8d:5f:
36:f0:98:9c:a9:bb:65:8a:41:57:8e:46:89:e9:20:a4:61:22:
8f:dd:30:ea:74:19:0f:3f:53:bf:0a:f6:16:dd:f4:b9:99:bd:
ef:5f:41:67:a2:0d:02:9b:84:52:ab:3c:b8:d6:75:48:71:3c:
74:76:32:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaELuPQZYPnfVIXZ9T6XMXJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGYzN2Y0M2EyNjgzNDJlYWYwZmVjNTM5NjA2MzQwOTBi
NWIxYjcwHhcNMjYxMDA1MTEwMDMyWhcNMjYxMDA2MTEwMDMyWjAzMTEwLwYDVQQD
Eyg2OGZjN2Q4NzkzY2RiMmY1ZTBkMTU4MmFmODk2NzhjYTA5N2YyOGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf1Htxw96PBO3QFuh8waEqN4m58h
mODI2hxKUkU73PYhE8QMatBvio6pHE++10MTjWEsxvGoZt5OwOuXpU92D36sYUUp
IrWaYoC1rzBC8k1BLndVIq1fLBYvDlbDq9XJkdXh2jSEgghkQsWd14kMr/hMa1FZ
KMfMEeZjpVpbWpd4b4faXMadAYQgXR96DWskdrgt+fpQLkh1MfPCREb5ssGfJI16
Yf1yMasy+z/ugoMwczxljOtKm6+H5rdhmjYYa/Xe3iusKgxtqGQTIkyKWBGvW0aL
UlOxHjJihPRV78RgH97r2BssXNzt6Oj5rKei8T+Xrty1ytPDh9jcKGlSpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGj8fYeTzbL14NFYKviWeMoJfyjaMB8GA1UdIwQY
MBaAFDsPN/Q6JoNC6vD+xTlgY0CQtbG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgt
OWFlOTAwZGY0Zjg4LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgtOWFlOTAwZGY0Zjg4
LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMxG6suR
DkBRYdlchMsfVDcc8gjpBVM2VSl0TIh/wM6E+ut75CBzrDPJBgVSbkmpQztskT8c
CDKx/7E28+l9ZVrWKAgYpFvWqKXqW1VxZ4d2nsPrRNyYrcMcS0ily33u68SEzBN3
uBRoC+URAka+4yP93i9Ud5ZNk4X/XyVunZQlDEdl7uBROpMDMy68eyhICE2rD0g1
WdF5QNB0qotEEMuEUN1YPxmnFDVr0kdUwOyxGS2Gcg3Hznrulm9U5mPC4HA0QY1f
NvCYnKm7ZYpBV45GiekgpGEij90w6nQZDz9Tvwr2Ft30uZm9719BZ6INApuEUqs8
uNZ1SHE8dHYynw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 20:11:13 2026 by rpki-client