Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: ytmApzT8nI5XmdF95igssf6NXN6uet16Eag4fhrvnwk=
Subject key identifier: 00:04:68:0C:5E:5E:0B:E1:56:8F:40:02:4D:42:E6:F7:92:4C:CA:70
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019E205A2477BCEF222AFC83FAF7FBF67AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 0606
Signing time: Wed 13 May 2026 08:00:38 +0000
Manifest this update: Wed 13 May 2026 08:00:38 +0000
Manifest next update: Thu 14 May 2026 08:00:38 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: HrWM0RYZfX8zR9aLJNEfEbY+VxrmN6iO06gdBZMi7Rw=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:24:77:bc:ef:22:2a:fc:83:fa:f7:fb:f6:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: May 13 08:00:38 2026 GMT
Not After : May 14 08:00:38 2026 GMT
Subject: CN=0004680c5e5e0be1568f40024d42e6f7924cca70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:6d:52:cc:55:6d:21:09:b2:32:ac:cf:35:
da:c4:bc:d6:90:de:8f:eb:62:51:82:4a:9e:05:42:
f3:e3:b1:8f:af:5e:6d:a8:ba:29:a8:ca:f8:46:c1:
df:f9:a8:31:63:c3:f4:72:67:2d:08:96:1b:ee:a5:
0e:ac:71:0a:e2:be:79:9c:e1:1a:a9:c0:f4:71:91:
da:e4:69:f0:ab:3d:c9:96:dd:39:13:64:8c:b7:59:
7f:a0:14:09:7a:ca:64:a3:86:0d:22:7b:26:47:8e:
32:02:e6:81:a1:ee:ba:5e:7e:77:64:3b:57:36:bc:
b7:a8:64:b8:8f:ce:36:42:05:d0:89:51:48:c7:c1:
a2:bf:70:0e:49:63:dd:45:4a:c3:71:f9:26:11:f7:
69:54:ff:26:17:ec:a6:aa:7e:01:6b:23:30:d5:63:
18:0e:71:1f:49:14:21:df:a6:54:ad:e2:68:43:22:
c4:b1:56:1f:f9:56:a4:24:f7:f6:7a:36:e7:1f:c7:
2e:f6:19:64:e3:a7:e9:ac:95:93:d2:1d:17:c1:ec:
02:bd:f7:fb:40:ba:9e:f7:b6:4f:db:22:ea:4a:4b:
cc:9c:a3:e3:d7:90:8c:52:46:5e:31:df:ed:49:64:
4f:cc:48:f5:83:bb:d3:d6:7d:f3:c6:10:db:32:aa:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:04:68:0C:5E:5E:0B:E1:56:8F:40:02:4D:42:E6:F7:92:4C:CA:70
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:30:9b:60:10:48:67:44:9d:1d:f8:06:97:86:12:2e:45:ae:
a6:ac:57:ff:4b:63:d6:9f:67:21:f5:7a:07:85:ce:26:7a:f1:
0a:a9:56:7e:f6:92:d4:4b:6b:94:2e:b7:68:67:9d:de:6f:89:
61:ab:51:71:33:bd:84:1c:cb:5a:bd:4e:f4:6d:d9:f7:44:e4:
6e:3e:19:44:cd:ca:85:a5:03:b2:f4:88:29:79:77:1b:75:f6:
46:c6:fa:a9:63:a6:19:cd:7a:3e:e7:74:78:28:18:a0:fc:46:
44:21:6b:15:97:00:d6:fc:da:2a:f4:f3:91:94:1e:72:9e:1d:
9c:09:07:4b:85:a1:48:75:5c:85:aa:71:b3:7a:ed:a3:3b:e3:
28:00:9d:9d:68:34:37:13:7b:72:f8:02:ca:a0:70:53:7c:f2:
c7:e9:f8:c6:04:f0:c7:1a:eb:94:82:39:60:e7:2d:74:d4:44:
ab:29:7b:4a:34:22:0a:d9:55:c9:2d:68:22:19:c7:50:87:ad:
6c:18:ad:4e:35:db:9e:cb:db:f2:9f:7a:61:7e:c3:8e:a4:a2:
e8:18:7f:6b:4f:52:dc:54:78:bd:13:00:64:1a:36:ef:c3:36:
4b:5a:c9:eb:79:bc:97:ff:2d:ba:af:5c:d1:d4:d1:9f:58:6c:
28:9e:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:31 2026 by rpki-client