Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: 9RpfbQFSAIENKNiKdB1UuDLo4Wd1RqACM2oiV+0yYdE=
Subject key identifier: CD:AC:5A:DC:8F:5B:22:14:1C:42:C6:55:1A:D2:71:00:75:63:D3:F3
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 01A0F6E8DB9ED2E38836FEA397435968604C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 09F6
Signing time: Thu 01 Oct 2026 10:00:50 +0000
Manifest this update: Thu 01 Oct 2026 10:00:50 +0000
Manifest next update: Fri 02 Oct 2026 10:00:50 +0000
Files and hashes: 1: KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa (hash: Sr5K6ccTAcON+APYQXJhtPURh7qUu9XiFdatnlSg6xs=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: Xa50eF1urgeZFlWLiocSFMS/IlNOMFn64BlF8nEIYTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e8:db:9e:d2:e3:88:36:fe:a3:97:43:59:68:60:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Oct 1 10:00:50 2026 GMT
Not After : Oct 2 10:00:50 2026 GMT
Subject: CN=cdac5adc8f5b22141c42c6551ad271007563d3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:68:e2:ca:3d:6b:2e:2f:00:6f:60:dc:d5:
6e:cb:49:86:39:3d:a6:3c:fb:56:bf:98:f8:87:c2:
cd:4f:8c:06:42:cc:71:93:5a:7a:49:56:e4:85:46:
f2:27:c4:82:d5:76:6d:c2:7a:67:d5:f8:2a:ee:d0:
f6:90:39:6b:65:19:86:b5:a3:e7:21:a6:c8:d2:f1:
26:cd:80:33:f2:28:4f:6f:5a:30:80:0b:19:9e:01:
b8:93:8c:57:37:d5:c9:ed:07:c1:f8:1c:a8:e8:86:
cc:76:40:b1:2f:0f:2c:8a:1a:4e:21:5f:c4:71:bb:
48:10:db:a1:64:1c:76:00:07:f4:35:8a:14:ad:18:
b9:dd:7f:a0:eb:66:5a:1e:c2:a1:09:c2:91:83:4a:
ae:3b:36:37:44:6e:98:bf:63:45:ec:55:b2:f3:4f:
7c:2a:d7:e9:d7:72:27:24:4e:fe:cb:57:61:90:e8:
6d:76:83:71:8a:31:c5:12:61:29:4d:11:dc:89:9c:
7a:4e:6a:77:7b:dc:05:09:7d:b2:42:c1:1d:47:91:
b8:7c:88:c9:d6:51:f9:aa:e9:3b:5c:c9:22:5f:74:
43:96:8c:64:18:50:e1:46:ad:a6:f6:e3:6e:f8:59:
14:40:6c:de:95:2f:2d:21:d1:dc:99:4d:08:34:b7:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AC:5A:DC:8F:5B:22:14:1C:42:C6:55:1A:D2:71:00:75:63:D3:F3
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:95:ae:8e:b9:92:6a:93:fc:47:ef:0e:1d:54:d4:b7:fa:d9:
aa:04:b5:66:7a:ab:92:d3:bb:93:3d:44:b1:de:b8:fd:16:3c:
09:1b:8a:00:6a:99:31:79:3c:f5:6c:00:ce:45:df:c4:8f:fc:
63:ef:da:35:11:27:c0:a3:03:3a:1f:03:e3:77:fe:e2:ff:f0:
c6:59:f2:a8:a6:67:69:ac:ac:d5:b4:67:1a:29:2e:26:75:d6:
26:4b:66:e1:4c:aa:f6:3c:51:eb:58:aa:27:51:56:0d:45:0a:
a4:dc:a0:37:6a:9e:81:cc:29:a0:19:4f:96:da:0f:5d:14:91:
db:c6:75:8d:78:d8:dd:9b:57:00:d8:c3:5f:54:9f:eb:9a:ec:
a0:75:f4:68:01:a7:1c:93:52:02:f1:fd:94:80:52:dc:4a:73:
55:31:a9:40:45:b5:ae:e2:c5:af:c5:8d:d1:9d:c3:41:15:72:
9c:41:09:28:5b:b3:e4:92:88:d9:89:a3:3b:15:4f:b6:06:9f:
02:97:b3:5e:ac:7e:cd:ae:fe:55:28:50:bb:b6:c1:8e:d5:5e:
a0:fa:8b:e6:63:ee:6f:c4:c3:aa:14:b8:e7:ce:02:58:59:da:
49:39:b1:bb:70:bf:c1:61:cf:d5:a5:4e:96:70:63:e4:21:f3:
e0:b9:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:20:30 2026 by rpki-client