Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: 2xmb11Q5IFyxOvTNlFEnArV7Vwa0JB2qtFngfOpDA94=
Subject key identifier: B1:59:73:F5:A8:43:41:7A:AB:6A:41:39:4C:84:C6:2F:74:54:F6:0D
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019D273A88BCA8C42C836F13FE6D537CFAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 0585
Signing time: Wed 25 Mar 2026 23:00:40 +0000
Manifest this update: Wed 25 Mar 2026 23:00:40 +0000
Manifest next update: Thu 26 Mar 2026 23:00:40 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: Nm/Wgh53++E3lfIgwpahuK49tbiNBhk0rzRM5wUFo6M=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:88:bc:a8:c4:2c:83:6f:13:fe:6d:53:7c:fa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Mar 25 23:00:40 2026 GMT
Not After : Mar 26 23:00:40 2026 GMT
Subject: CN=b15973f5a843417aab6a41394c84c62f7454f60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:40:6a:17:99:b1:b7:47:22:e7:31:90:db:
a0:14:f4:ad:2d:80:84:bb:70:5a:a6:11:4d:25:c5:
25:1c:19:5c:0d:fe:f2:38:20:c2:ae:b1:d4:ec:d9:
12:4a:86:36:40:72:f1:35:79:a0:a8:98:a6:e4:08:
95:43:cd:ae:3c:b1:7b:16:e0:1a:46:fb:28:bf:04:
81:99:2c:1a:1f:16:39:b3:0e:b4:6e:ab:80:cb:47:
49:54:89:95:66:99:bc:64:6b:7d:b8:19:2b:66:65:
40:40:35:87:4b:57:2a:a3:e3:8b:91:aa:14:96:d6:
52:02:ee:17:16:98:71:e7:22:b4:6b:d2:26:74:ec:
de:03:19:e4:5e:3a:8a:18:66:69:60:0d:18:63:38:
63:8d:db:0d:b8:d1:0d:11:29:91:43:76:61:57:fd:
ad:dc:13:15:61:92:33:38:bb:7b:fa:47:1b:88:4e:
33:22:44:82:58:5f:39:59:22:37:b3:60:76:ee:ec:
2f:8a:ac:5b:4b:a9:ec:6c:16:8a:6d:be:da:0d:ef:
04:8a:8b:eb:d0:06:84:9d:a4:6e:2d:1c:bb:9e:dd:
a0:7b:15:31:52:6c:9d:70:5c:b4:da:30:51:7a:9b:
eb:44:e1:d3:87:5e:3e:50:aa:72:0d:5d:57:f5:d5:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:59:73:F5:A8:43:41:7A:AB:6A:41:39:4C:84:C6:2F:74:54:F6:0D
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e7:d2:0f:63:31:25:92:a7:3c:fd:36:80:dc:ce:a5:89:ba:
16:8c:21:61:3b:17:ac:2f:2e:1b:f7:77:94:3c:86:3c:37:1e:
b2:e1:35:5b:2b:2a:c3:6f:88:62:ce:d7:1f:85:9c:c1:4f:4c:
7a:76:2e:fd:2e:20:d5:92:9c:9b:b2:a7:90:ea:b4:02:6e:7e:
d3:01:09:1d:ab:9a:39:1f:7c:3c:11:f0:aa:79:e0:39:e2:53:
37:75:c7:9c:7d:47:5c:a0:00:21:e9:cb:23:9d:6a:58:59:0b:
7d:96:1e:3b:e7:4c:67:f9:b8:59:3b:c6:1d:d1:d1:6b:bd:34:
84:50:02:71:00:34:af:1a:56:e9:32:22:e7:2b:f7:71:6a:ba:
26:76:50:cf:d6:df:f7:ee:15:f5:9c:af:0a:e5:76:83:0b:f2:
60:6a:21:d7:b6:e6:42:ac:b5:f7:da:7d:e6:48:b5:a1:38:e5:
ef:05:38:a8:76:2b:56:7d:a1:80:d6:e6:55:0c:20:0f:3e:0d:
b7:fb:c9:45:ac:c8:d3:e0:b4:aa:ac:cc:ee:12:bb:ca:95:7f:
d8:5f:7a:33:71:4d:5c:bb:f9:59:7f:54:85:fd:ba:4d:91:a1:
48:3f:be:26:f7:15:8c:9f:2e:e8:88:5d:dc:51:57:c3:33:e2:
a5:16:2e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:35 2026 by rpki-client