Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
File: OWaV1J6GRw-alqgbSiQxm_l7x64.mft (raw, json)
Hash identifier: qMILlnnkrqEoA7siEDs1lka+K2rrLcvKwj2i3yK7UXA=
Subject key identifier: E0:D2:8E:B3:5C:01:87:0C:B9:C1:E7:57:53:73:17:74:94:D5:62:C1
Authority key identifier: 39:66:95:D4:9E:86:47:0F:9A:96:A8:1B:4A:24:31:9B:F9:7B:C7:AE
Certificate issuer: /CN=396695d49e86470f9a96a81b4a24319bf97bc7ae
Certificate serial: 01A0E1E1E1F3222F3A1F8FF675BF681CB9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 08:01:11 +0000
Manifest this update: Sun 27 Sep 2026 08:01:11 +0000
Manifest next update: Mon 28 Sep 2026 08:01:11 +0000
Files and hashes: 1: HffM29R42fpCfN2qzwUjeJ-H-S0.roa (hash: PTCqTbI3aQtr5zYX+8hriBPXqPfTgAil3GxXOXcU5Nk=)
2: OWaV1J6GRw-alqgbSiQxm_l7x64.crl (hash: DgifGkeSGU0sB7uiHBXTkd4O63bKJymahnIO1HveDoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:e1:f3:22:2f:3a:1f:8f:f6:75:bf:68:1c:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=396695d49e86470f9a96a81b4a24319bf97bc7ae
Validity
Not Before: Sep 27 08:01:11 2026 GMT
Not After : Sep 28 08:01:11 2026 GMT
Subject: CN=e0d28eb35c01870cb9c1e7575373177494d562c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:a7:d3:b4:89:4f:cd:a5:0f:87:d5:b9:84:
09:10:f8:c7:2e:69:7f:ca:84:ae:82:3d:cc:ab:d3:
a6:bd:6e:d5:45:59:2e:31:84:e2:ed:8f:6f:65:92:
87:c9:3d:d1:c6:46:f4:0d:64:f9:5b:25:f2:46:36:
39:85:92:c1:5c:6f:63:07:80:e2:37:31:f8:98:e1:
a1:bf:d7:60:05:bc:0d:c2:d0:79:18:18:80:96:aa:
4d:db:e7:31:9d:6c:ef:62:9e:ef:72:9c:59:a8:98:
53:9d:90:80:12:48:be:c0:88:6a:c6:64:0d:f2:4e:
ef:8d:97:57:e0:3d:f9:3f:2d:b7:ec:3d:2b:24:e5:
0a:6b:9c:23:8e:20:8d:b0:87:0d:f6:18:9d:0c:3a:
92:08:59:fd:fc:d5:ad:72:00:10:e0:9d:c7:ed:e7:
93:6c:c1:b9:96:21:78:05:2d:48:53:1a:72:43:9c:
f0:7b:03:73:0b:d0:d8:a8:10:6e:c9:00:21:5d:e3:
9c:09:eb:05:71:c6:be:36:b1:dc:3f:d9:50:6e:d6:
de:99:02:dd:5f:05:dc:f8:cd:00:cd:4e:50:bb:8f:
4a:7a:77:04:bb:8c:af:85:2b:3c:97:ef:b9:64:dc:
f8:ad:5d:9b:35:e3:01:2c:d8:df:b1:56:00:9b:a9:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:8E:B3:5C:01:87:0C:B9:C1:E7:57:53:73:17:74:94:D5:62:C1
X509v3 Authority Key Identifier:
keyid:39:66:95:D4:9E:86:47:0F:9A:96:A8:1B:4A:24:31:9B:F9:7B:C7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWaV1J6GRw-alqgbSiQxm_l7x64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0dcd3f-1752-4097-8f6e-c24aba8ba2bb/1/OWaV1J6GRw-alqgbSiQxm_l7x64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b2:d1:5b:2a:47:c4:34:1b:07:9f:33:c3:de:c2:3b:81:12:
94:a4:21:b8:95:7b:fb:19:ab:dd:08:b9:a3:5c:81:49:9c:1f:
01:bf:48:9a:0f:ce:9c:d0:46:b7:98:15:80:56:aa:77:36:54:
8a:ff:6e:84:07:27:96:19:31:7e:aa:2b:f8:40:6d:d1:8d:08:
c2:94:be:96:3e:4c:ad:96:39:9e:e5:e2:9e:c9:f2:c9:33:1d:
1b:e0:f9:12:ad:a7:cf:df:56:75:e2:44:31:81:17:df:7e:25:
a4:24:3c:a7:8a:fb:f0:35:c7:f8:91:20:7f:d8:9c:6b:cb:90:
6b:ea:ae:ec:b3:a9:c2:a1:53:d1:93:2e:ec:ad:1d:a3:93:11:
b4:3f:d9:54:70:b7:5f:4d:88:d8:e8:bf:5b:f5:da:e6:82:96:
74:7c:36:89:5d:bc:bf:4c:6f:95:23:28:77:40:16:34:8b:88:
c2:66:9a:d9:7e:f2:4a:df:b9:a4:42:a8:a4:e6:30:1c:05:0c:
a1:48:1a:e3:bb:67:fa:8c:49:c1:33:a9:cf:4d:c6:ee:11:84:
4e:da:e0:1e:72:4d:b9:2e:3d:48:f3:fc:dd:71:dc:c3:e8:46:
93:60:23:7d:68:78:23:4b:26:9a:67:80:c5:3f:d0:21:17:8f:
14:a2:70:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDh4eHzIi86H4/2db9oHLmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjY5NWQ0OWU4NjQ3MGY5YTk2YTgxYjRhMjQzMTliZjk3
YmM3YWUwHhcNMjYwOTI3MDgwMTExWhcNMjYwOTI4MDgwMTExWjAzMTEwLwYDVQQD
EyhlMGQyOGViMzVjMDE4NzBjYjljMWU3NTc1MzczMTc3NDk0ZDU2MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Wn07SJT82lD4fVuYQJEPjHLml/
yoSugj3Mq9OmvW7VRVkuMYTi7Y9vZZKHyT3Rxkb0DWT5WyXyRjY5hZLBXG9jB4Di
NzH4mOGhv9dgBbwNwtB5GBiAlqpN2+cxnWzvYp7vcpxZqJhTnZCAEki+wIhqxmQN
8k7vjZdX4D35Py237D0rJOUKa5wjjiCNsIcN9hidDDqSCFn9/NWtcgAQ4J3H7eeT
bMG5liF4BS1IUxpyQ5zwewNzC9DYqBBuyQAhXeOcCesFcca+NrHcP9lQbtbemQLd
XwXc+M0AzU5Qu49KencEu4yvhSs8l++5ZNz4rV2bNeMBLNjfsVYAm6lzUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODSjrNcAYcMucHnV1NzF3SU1WLBMB8GA1UdIwQY
MBaAFDlmldSehkcPmpaoG0okMZv5e8euMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dhVjFKNkdSdy1hbHFnYlNpUXhtX2w3eDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wZGNkM2YtMTc1Mi00MDk3LThmNmUt
YzI0YWJhOGJhMmJiLzEvT1dhVjFKNkdSdy1hbHFnYlNpUXhtX2w3eDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wZGNkM2YtMTc1Mi00MDk3LThmNmUtYzI0YWJhOGJhMmJi
LzEvT1dhVjFKNkdSdy1hbHFnYlNpUXhtX2w3eDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwLLRWypH
xDQbB58zw97CO4ESlKQhuJV7+xmr3Qi5o1yBSZwfAb9Img/OnNBGt5gVgFaqdzZU
iv9uhAcnlhkxfqor+EBt0Y0IwpS+lj5MrZY5nuXinsnyyTMdG+D5Eq2nz99WdeJE
MYEX334lpCQ8p4r78DXH+JEgf9ica8uQa+qu7LOpwqFT0ZMu7K0do5MRtD/ZVHC3
X02I2Oi/W/Xa5oKWdHw2iV28v0xvlSMod0AWNIuIwmaa2X7ySt+5pEKopOYwHAUM
oUga47tn+oxJwTOpz03G7hGETtrgHnJNuS49SPP83XHcw+hGk2AjfWh4I0smmmeA
xT/QIRePFKJwDA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:14:13 2026 by rpki-client