Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: 3cyaAoCmFrX5gIK2EFvZTm5BFLSFhZ5tM+h+m55sCnc=
Subject key identifier: D2:F6:8C:B5:96:BC:F0:B7:EC:76:B9:24:C0:C3:1B:B7:5A:4D:9A:FD
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019F951229B69EDDAA6EC10330F8623970EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 06C7
Signing time: Fri 24 Jul 2026 17:00:23 +0000
Manifest this update: Fri 24 Jul 2026 17:00:23 +0000
Manifest next update: Sat 25 Jul 2026 17:00:23 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: qxSAmZtN0MvYXVi9+KbMWciqPGSpDdN5xgJ5D596Wws=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:29:b6:9e:dd:aa:6e:c1:03:30:f8:62:39:70:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Jul 24 17:00:23 2026 GMT
Not After : Jul 25 17:00:23 2026 GMT
Subject: CN=d2f68cb596bcf0b7ec76b924c0c31bb75a4d9afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:73:7b:8d:50:eb:bd:f0:a3:dd:14:22:76:
cb:ec:66:90:6f:d9:4b:34:ec:80:b9:d8:8f:2e:cf:
57:50:ba:13:25:d2:31:e1:97:b5:40:85:4b:fd:5c:
e9:c4:a3:83:46:15:1b:7c:b2:95:c5:ff:eb:03:33:
28:1e:ac:4a:b3:71:37:29:63:cf:10:c6:43:97:63:
ca:39:7e:a5:5a:39:23:9b:63:ec:f3:f7:1f:a9:2b:
76:4c:34:84:b6:84:97:fc:3c:f4:37:12:9c:48:33:
b9:28:29:8f:7f:0f:9b:0c:73:1b:55:f4:f0:ea:36:
3b:b4:bf:30:17:fe:cc:ca:a8:22:11:51:07:2e:df:
3d:b0:60:bb:d3:75:e3:bb:57:c9:3e:f5:03:ca:52:
0e:58:66:34:38:93:cf:65:68:5d:40:03:ca:27:ee:
30:d0:71:a5:46:55:a5:5b:19:6c:c0:e1:ea:07:78:
67:7b:6f:07:1c:98:e0:b8:53:cf:ab:f4:31:74:0e:
10:5d:50:3d:57:ad:b5:7b:df:0a:b6:3a:64:49:21:
ea:0b:89:e5:25:63:70:0b:82:91:f7:31:30:85:80:
3e:e7:b7:85:77:2c:1e:49:6f:f0:e0:78:8a:b0:5c:
f0:cd:5b:17:bb:be:3c:cf:31:ef:67:18:03:d7:f2:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F6:8C:B5:96:BC:F0:B7:EC:76:B9:24:C0:C3:1B:B7:5A:4D:9A:FD
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3b:70:96:fb:18:e6:17:d9:0e:2a:9a:e7:c7:0d:db:7e:03:
bb:01:d7:91:21:ed:03:4f:bb:a6:90:0a:2f:4f:9c:ab:e1:f0:
b9:34:6f:8f:85:9e:be:65:2a:11:05:57:40:e1:01:99:e6:bb:
a3:d8:02:17:93:a3:f6:9d:15:53:c5:de:5b:1d:6e:9f:59:01:
8a:c3:62:21:0e:b9:28:a7:b9:f5:b3:4d:dc:71:a9:e9:37:58:
e0:21:04:77:86:92:1c:e0:a8:6d:67:03:be:c1:fb:13:77:36:
47:65:aa:f7:a5:6d:6c:c5:6b:d9:e0:2e:f2:30:3b:58:56:3a:
76:d6:44:a1:44:fe:fe:a8:e3:21:6b:32:13:c9:d1:2c:00:24:
c0:51:a2:7a:fb:6d:67:e2:97:8e:35:7b:3e:c2:1f:3f:65:e5:
d9:26:2a:e2:c1:0c:0e:51:2b:ed:69:64:6b:af:00:60:39:ea:
3c:e9:42:f9:cb:69:ee:11:57:57:93:e0:97:c1:d2:63:8e:1b:
80:3d:c4:2e:55:6b:d2:8d:27:c1:6f:a5:c3:d4:ae:36:0d:4c:
f5:42:69:c6:31:d2:8a:1f:09:fa:ae:03:bb:95:6b:df:91:c4:
7e:e4:99:0f:80:7c:c9:5e:e9:ba:83:7b:a3:0c:ad:f8:16:d0:
82:47:83:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:56 2026 by rpki-client