Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier: CFOTwO66rT3ff35qQzJLhmHtHgnhf2FEzp5aONNxiU4=
Subject key identifier: 74:F4:68:8F:2A:B0:7D:A2:C1:BE:4D:A7:D8:E3:45:00:6F:BB:BC:80
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial: 019E20915049CEF08291172C0341A92EA5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 09:00:54 +0000
Manifest this update: Wed 13 May 2026 09:00:54 +0000
Manifest next update: Thu 14 May 2026 09:00:54 +0000
Files and hashes: 1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: hsfZhfhFqygWmc1HgYaCZkudrbiE8eH3qjBa0ip+agk=)
2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:50:49:ce:f0:82:91:17:2c:03:41:a9:2e:a5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Validity
Not Before: May 13 09:00:54 2026 GMT
Not After : May 14 09:00:54 2026 GMT
Subject: CN=74f4688f2ab07da2c1be4da7d8e345006fbbbc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:e5:f1:0d:9f:7e:db:21:12:67:fe:fe:bc:
32:56:3e:76:2d:97:6f:fe:9c:de:37:83:cc:00:0a:
2f:41:e1:81:4f:93:c6:76:d5:4a:f7:6f:d4:a8:36:
e1:a8:e3:2f:8c:5f:01:98:a5:4e:31:37:f7:c5:8d:
bb:0b:31:66:35:63:f2:80:6b:8a:5b:6b:3a:45:90:
b4:45:5d:48:a3:ef:a4:41:4c:67:b4:3b:70:da:2b:
34:dc:29:20:f1:d6:39:94:9b:38:9e:f4:84:fd:50:
f6:78:d7:22:fc:40:31:08:bb:cb:78:ab:57:93:3d:
66:cc:df:55:f4:8d:0c:cb:10:a5:0a:88:47:a3:67:
a0:c8:57:39:68:1c:70:72:33:3a:48:47:33:a4:2e:
c2:3e:4d:c9:3f:d0:65:44:03:a3:d7:1a:d9:f4:c9:
c0:b3:13:4a:50:da:45:1d:f9:30:df:42:d4:66:73:
2c:84:0d:6c:f0:89:2d:1a:89:20:d9:1b:bf:c6:a3:
0f:29:8c:aa:68:f6:e1:55:af:75:4c:cd:03:24:95:
97:c2:2a:3b:d9:74:28:fa:2c:e5:c3:e5:35:0d:76:
e6:cd:8e:fd:c3:02:56:19:77:9f:bd:dc:72:64:91:
ec:80:35:0c:2b:fc:b5:08:81:e4:63:69:30:8e:37:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F4:68:8F:2A:B0:7D:A2:C1:BE:4D:A7:D8:E3:45:00:6F:BB:BC:80
X509v3 Authority Key Identifier:
keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:96:d0:3b:fc:cb:cb:43:a7:70:b1:83:af:a2:56:92:8f:e9:
d8:e9:fa:9b:1c:3d:b1:9c:62:06:a1:70:c2:9a:5e:f0:3d:f0:
aa:72:b6:5c:1e:ce:de:2f:d2:21:97:65:37:9d:9f:39:68:24:
89:f8:85:d9:10:d6:e8:46:58:21:0c:16:10:93:d4:5a:59:d3:
6c:9c:43:7e:cf:6b:aa:a9:ec:3e:ec:55:49:c9:89:35:2f:6b:
65:56:95:c5:ee:9d:9b:86:4a:c2:cb:5b:a1:e3:dc:e5:17:97:
0f:ef:b2:86:50:04:5e:31:b1:06:4c:a4:ba:74:da:1e:58:a7:
de:a6:ad:eb:e9:b6:66:cd:c0:2d:a9:88:8e:f4:ca:87:de:3c:
c9:c9:04:b0:12:21:7b:65:6c:c6:2c:21:12:0d:8a:58:5a:1c:
57:be:24:55:7f:4a:c0:0c:80:fa:c7:b4:20:03:f7:3c:22:52:
63:22:b1:dd:43:40:b4:e2:5b:03:4f:a5:ed:3d:d4:09:67:41:
a3:17:f0:57:07:26:bb:d0:96:dc:70:20:45:c5:68:05:c4:c6:
d0:06:4b:e5:ac:63:f3:a3:e8:f2:3a:50:98:4f:0e:65:21:12:
fb:04:d3:16:59:11:6d:24:6e:0b:3b:15:d2:32:74:01:b0:42:
e1:0a:e6:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkVBJzvCCkRcsA0GpLqXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGNkNDRlYmJlM2QwZDZhMDcyZTc1MTAzZjIzMTYwNjk5
NWY2YWIwHhcNMjYwNTEzMDkwMDU0WhcNMjYwNTE0MDkwMDU0WjAzMTEwLwYDVQQD
Eyg3NGY0Njg4ZjJhYjA3ZGEyYzFiZTRkYTdkOGUzNDUwMDZmYmJiYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyevl8Q2fftshEmf+/rwyVj52LZdv
/pzeN4PMAAovQeGBT5PGdtVK92/UqDbhqOMvjF8BmKVOMTf3xY27CzFmNWPygGuK
W2s6RZC0RV1Io++kQUxntDtw2is03Ckg8dY5lJs4nvSE/VD2eNci/EAxCLvLeKtX
kz1mzN9V9I0MyxClCohHo2egyFc5aBxwcjM6SEczpC7CPk3JP9BlRAOj1xrZ9MnA
sxNKUNpFHfkw30LUZnMshA1s8IktGokg2Ru/xqMPKYyqaPbhVa91TM0DJJWXwio7
2XQo+izlw+U1DXbmzY79wwJWGXefvdxyZJHsgDUMK/y1CIHkY2kwjjdEDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT0aI8qsH2iwb5Np9jjRQBvu7yAMB8GA1UdIwQY
MBaAFDsM1E6749DWoHLnUQPyMWBplfarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYt
ZjdkYTNiODczMmJmLzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYtZjdkYTNiODczMmJm
LzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZbQO/zL
y0OncLGDr6JWko/p2On6mxw9sZxiBqFwwppe8D3wqnK2XB7O3i/SIZdlN52fOWgk
ifiF2RDW6EZYIQwWEJPUWlnTbJxDfs9rqqnsPuxVScmJNS9rZVaVxe6dm4ZKwstb
oePc5ReXD++yhlAEXjGxBkykunTaHlin3qat6+m2Zs3ALamIjvTKh948yckEsBIh
e2VsxiwhEg2KWFocV74kVX9KwAyA+se0IAP3PCJSYyKx3UNAtOJbA0+l7T3UCWdB
oxfwVwcmu9CW3HAgRcVoBcTG0AZL5axj86Po8jpQmE8OZSES+wTTFlkRbSRuCzsV
0jJ0AbBC4Qrm6w==
-----END CERTIFICATE-----
Generated at Wed May 13 19:10:11 2026 by rpki-client