Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: kOpmeJOwl827vcVA/g+CgU2q98ynC3kmUXVwJ77BZ+k=
Subject key identifier: FA:C3:A3:87:1D:18:2D:70:55:B1:CF:F1:D6:CD:7F:08:50:5A:51:CF
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 019F95B7B9900A956E49752BD0BE8782077C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 20:01:13 +0000
Manifest this update: Fri 24 Jul 2026 20:01:13 +0000
Manifest next update: Sat 25 Jul 2026 20:01:13 +0000
Files and hashes: 1: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: KXoaJwp6jC/CpA36qFlozKQYlMOo0pHEoQgEwujkgVU=)
2: ugHbkmXdGua5f0y0Vs2Xemi0uH0.roa (hash: pZtYRYjW92Xkn2YfI/y6vsMVwr2lyxUOL1/g29RbFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:b9:90:0a:95:6e:49:75:2b:d0:be:87:82:07:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: Jul 24 20:01:13 2026 GMT
Not After : Jul 25 20:01:13 2026 GMT
Subject: CN=fac3a3871d182d7055b1cff1d6cd7f08505a51cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:3c:9f:d5:29:88:8f:00:35:33:b4:dc:1e:
50:83:d3:24:63:4c:3f:1c:49:8a:6e:92:f0:78:30:
90:95:02:4d:f6:0c:ea:d8:0b:a2:49:7c:cf:54:e7:
26:76:b2:5e:69:48:65:80:e4:fb:03:87:bb:6f:39:
56:b7:a9:0d:4e:f4:98:db:a2:43:da:47:7a:16:47:
1c:74:ac:64:f0:69:d6:65:0c:b6:0c:90:85:27:aa:
90:1e:9d:5a:2b:68:13:65:20:e0:03:16:2c:3e:b2:
01:92:10:9c:dc:ad:c7:5f:04:12:fe:6d:1c:42:bd:
03:55:9b:d5:a6:40:df:32:5d:7c:ec:2c:c3:61:cf:
a6:c5:ca:f6:c9:c0:2a:b1:aa:96:26:6a:f2:bf:d3:
68:3c:0c:9a:fc:5e:27:62:ef:03:f3:5f:18:86:68:
66:3d:27:3e:19:79:66:48:aa:b4:61:95:97:f6:a0:
36:c0:83:40:3b:ee:3b:78:a1:52:f0:ec:b9:90:2d:
e6:f6:f7:85:ce:5c:0e:bb:c6:0a:27:7d:81:48:12:
d5:33:9e:dd:d6:b0:e5:34:97:4e:88:64:d3:ea:48:
be:b8:de:dc:5e:1d:e6:93:45:e4:de:f4:01:31:8d:
c5:95:b9:b4:de:f4:30:a5:37:13:ab:09:21:20:1b:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:A3:87:1D:18:2D:70:55:B1:CF:F1:D6:CD:7F:08:50:5A:51:CF
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6a:27:b5:da:53:6a:ca:22:ef:21:f8:a5:e5:49:e6:88:8c:
49:93:bc:87:86:f2:8c:75:16:0a:8d:b6:83:26:61:fb:5b:72:
4b:9d:85:54:a3:4a:b1:77:8b:59:1e:03:35:91:55:a3:8e:dc:
72:ea:dd:ef:6a:a0:84:d8:60:99:e5:1c:74:3e:06:1f:96:3b:
0d:25:d9:f9:ae:9d:90:5a:05:e7:42:bf:61:af:95:f5:62:0f:
27:c1:b7:5f:5e:b6:4b:6f:64:63:41:cc:b6:37:37:73:9c:61:
04:04:c8:13:a2:ee:43:34:09:e2:45:4e:31:64:21:ff:b3:15:
76:cc:b4:05:34:77:bc:d2:56:68:c1:a0:1e:4e:31:e9:d3:e5:
41:e7:e4:14:8c:cf:87:65:88:d3:d7:32:c1:ac:bb:23:6b:90:
5b:1e:ef:3b:af:8b:a8:09:5f:2d:e1:be:d8:4b:09:0c:9f:33:
dd:cf:81:3e:f6:98:af:62:f6:b9:44:b9:22:ea:d5:a0:7d:c9:
76:1f:94:16:1b:b5:45:ea:9e:72:0d:8d:15:76:89:ce:be:11:
ff:2e:2b:bf:ca:3c:15:18:21:9f:61:da:ab:92:b5:4f:b4:1f:
c2:4d:06:93:84:14:1f:0a:6c:21:23:89:61:fe:37:73:80:55:
ab:7a:fb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:16:15 2026 by rpki-client