Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json)
Hash identifier: b80unnJUsL83PcdWE74trqhX3hqRQ7OKLK/15cxIPgw=
Subject key identifier: 20:08:4B:27:D9:5B:94:87:AA:EA:6B:B2:1F:E4:D2:C8:6A:8F:20:46
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 01A10DA7522AC15C2EC3275AFD450027AA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
Manifest number: 078A
Signing time: Mon 05 Oct 2026 20:00:31 +0000
Manifest this update: Mon 05 Oct 2026 20:00:31 +0000
Manifest next update: Tue 06 Oct 2026 20:00:31 +0000
Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: VK4qVaY/7ucbqAWSCSQTO+F5FxJl8sByrwmEfIH67NY=)
2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:a7:52:2a:c1:5c:2e:c3:27:5a:fd:45:00:27:aa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Oct 5 20:00:31 2026 GMT
Not After : Oct 6 20:00:31 2026 GMT
Subject: CN=20084b27d95b9487aaea6bb21fe4d2c86a8f2046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:ec:90:f7:37:7b:9a:31:9f:ec:6a:b8:9e:
84:a0:5b:ea:92:90:4c:a0:e5:f6:28:67:cf:07:f7:
5e:e7:42:02:69:3a:86:ae:bb:44:3e:18:1f:76:e0:
45:89:e9:14:76:cc:06:fb:43:60:0b:9a:3e:7c:75:
d1:d6:d4:d7:1d:01:68:ba:86:80:4f:da:5a:92:18:
65:17:86:d8:40:58:c6:e4:89:e9:e1:ce:c4:21:8e:
72:c8:b6:ae:0a:e9:c1:42:41:7b:2e:ca:5f:c6:82:
25:ea:11:45:f1:b3:c6:63:41:ac:24:28:c4:be:64:
dd:86:47:74:7b:0e:7a:8a:57:e0:52:26:d2:9c:44:
b8:bf:37:d2:b2:6b:8b:9e:09:9c:d0:b3:23:3c:4c:
e8:b1:89:28:65:1c:61:01:a8:20:c2:67:77:df:89:
9c:08:69:ef:bf:a6:3e:2a:e4:91:d1:67:3f:ad:c3:
1e:72:f1:cb:bc:af:d3:1e:a7:e1:eb:f7:1e:ea:15:
b2:73:b8:b8:27:68:ad:02:0a:35:bb:3d:78:70:2f:
41:50:01:17:53:23:12:20:8e:cf:58:c1:92:be:65:
aa:30:aa:51:c9:c5:79:be:ca:d5:3d:37:06:84:da:
01:bc:79:13:ee:c9:08:00:35:17:5b:dd:58:2b:4e:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:4B:27:D9:5B:94:87:AA:EA:6B:B2:1F:E4:D2:C8:6A:8F:20:46
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:15:59:d2:79:8e:f4:5d:92:d0:5a:e4:f8:7d:7a:6b:37:c8:
86:53:12:82:17:2b:6e:28:bd:9d:bb:a3:02:b3:93:8f:c6:a0:
32:bd:62:dc:64:1b:f1:bc:d2:8a:69:75:0d:69:79:d7:4c:85:
4a:be:08:3a:37:8e:c3:c4:88:3a:09:a1:c6:95:26:f9:36:e8:
81:cb:47:51:d5:a9:f4:60:89:78:47:bd:19:94:24:2b:e4:20:
af:54:51:4b:e1:ac:0e:e6:e1:9b:b5:1a:56:18:0f:39:1e:cf:
e2:d7:a0:5a:f9:e1:06:4f:d4:b6:0a:ed:53:59:97:6f:4e:c5:
37:6c:94:dc:0c:9c:48:5d:c2:d3:af:06:3a:c9:d4:07:da:02:
a7:d5:f6:ca:8b:5c:45:88:bf:c3:6e:c9:2a:5e:8d:19:22:61:
64:26:4b:24:9a:0f:5b:b8:a9:c5:53:2a:99:ea:54:05:cf:7b:
b1:0d:78:6e:04:68:b0:d9:1d:e8:d5:d4:0a:58:25:fe:67:48:
0f:6d:67:e8:26:53:73:6e:55:00:ef:18:9e:2c:32:1e:ab:78:
30:a5:8b:59:ef:0a:f5:8e:be:d6:ef:4f:b1:79:c8:0a:c5:16:
50:27:5e:07:ba:20:66:d3:8b:35:75:6c:2b:6b:b2:1c:e9:44:
8d:76:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:59:01 2026 by rpki-client