Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: fLeerySfXFLsR93OB+UJ9EEjWw+UizWY62HXltfKoGg=
Subject key identifier: 01:FB:78:EE:9E:D8:08:C1:DC:50:57:CD:CD:6C:22:CF:01:FB:89:0E
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 01A1231D8394140DF7FA2F11F8864477FFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 1A96
Signing time: Sat 10 Oct 2026 00:01:38 +0000
Manifest this update: Sat 10 Oct 2026 00:01:38 +0000
Manifest next update: Sun 11 Oct 2026 00:01:38 +0000
Files and hashes: 1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: Y7opcsy6KnhctbT9V3/Awd4CKN4qDAn0raYHvEkF4Mg=)
2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:83:94:14:0d:f7:fa:2f:11:f8:86:44:77:ff:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: Oct 10 00:01:38 2026 GMT
Not After : Oct 11 00:01:38 2026 GMT
Subject: CN=01fb78ee9ed808c1dc5057cdcd6c22cf01fb890e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:61:47:6b:2b:83:f7:84:f7:38:2e:ba:8e:
ef:af:ad:f9:db:12:7c:c7:da:c4:d9:fa:0b:95:8b:
8f:8d:17:28:8a:cd:af:dc:16:51:a2:6a:83:ed:da:
df:72:fe:00:53:96:c5:f5:66:5e:d1:9e:8f:90:7f:
05:6a:c1:1f:dc:60:2d:08:67:42:dd:9e:64:4b:30:
7a:73:12:7b:ef:f5:a3:9a:70:63:d5:fb:f1:64:a5:
4d:a0:9c:63:df:4f:48:73:4f:d5:72:6c:89:5e:61:
00:24:dc:55:ee:26:44:01:f3:73:e6:14:0f:15:22:
1a:4e:c9:e8:c8:41:70:30:6e:8f:88:7d:99:f3:03:
7c:a8:e6:1c:7c:06:0d:c9:6a:c5:d3:e5:26:33:60:
5f:45:f6:79:be:ea:11:61:f0:06:cd:50:c8:04:e7:
dd:7f:40:71:86:36:01:eb:62:ec:de:48:ae:20:db:
fc:e5:3a:3e:64:98:d6:e2:ae:2d:3d:56:4b:a3:6a:
5f:2f:4c:a6:b5:66:90:cf:74:4f:51:67:c8:71:5e:
08:ca:34:01:32:e2:b7:3a:33:2e:c3:00:f7:8d:0a:
4f:4c:a0:49:1b:04:c1:e4:d1:51:47:ef:94:b4:fd:
ff:f2:71:ee:2b:23:c3:f8:be:22:eb:a8:d5:79:16:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FB:78:EE:9E:D8:08:C1:DC:50:57:CD:CD:6C:22:CF:01:FB:89:0E
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5d:df:df:64:7d:97:f1:fe:9c:3c:60:ec:77:5c:53:fb:f8:
85:08:f8:87:78:1a:d1:57:fd:eb:20:eb:3a:74:f4:17:73:26:
f7:04:2e:cb:14:93:39:fb:50:c1:4b:28:d4:f0:6f:e5:b4:58:
2e:7e:9b:6a:aa:75:60:c7:a6:84:aa:62:8e:ff:13:bc:9e:e7:
50:a9:a9:62:5b:ff:f6:09:7a:eb:db:18:10:e9:5b:30:b0:e1:
f4:fe:3a:aa:78:46:1b:d7:3a:e5:ce:71:7d:9d:30:e6:d4:87:
a3:39:37:5b:6b:37:28:16:b9:53:c6:91:19:b5:9f:2c:b8:8a:
e3:b6:ba:ae:3e:34:a2:67:6d:e2:88:39:96:6f:9d:27:a5:b9:
06:93:ca:1c:01:ad:16:31:10:da:76:1a:00:84:8e:49:93:d0:
75:e5:9b:1c:92:f6:b0:49:a3:a3:3e:92:f9:39:c0:07:80:23:
ff:5b:e9:07:27:94:da:74:1d:31:d6:2c:b2:fb:60:dc:af:42:
02:5b:d2:0d:0a:11:5a:ca:29:db:d6:f7:e8:e2:19:fa:cb:c6:
43:b4:2a:52:9d:7c:b8:4d:3a:0e:72:c9:33:0b:0c:32:79:0d:
6e:a1:b9:5a:1a:cc:a2:0f:e9:83:15:05:c7:65:c5:09:ad:bb:
4d:1a:e9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:44:29 2026 by rpki-client