Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: +geMh2Rt+wjIU8R7LHspHNv6aaOkfFD/XF2S7O+JiaA=
Subject key identifier: C9:AB:76:EA:C9:68:DF:41:CC:CE:AE:68:6E:25:03:0B:93:55:36:27
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 01A117F4142B3B6766A6B785F781CA2BB00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 1A90
Signing time: Wed 07 Oct 2026 20:00:34 +0000
Manifest this update: Wed 07 Oct 2026 20:00:34 +0000
Manifest next update: Thu 08 Oct 2026 20:00:34 +0000
Files and hashes: 1: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: fERjLRXuPUFUS8FGy6MSmu9m8Sm3FgN3CwLFgGekU/8=)
2: ugHbkmXdGua5f0y0Vs2Xemi0uH0.roa (hash: pZtYRYjW92Xkn2YfI/y6vsMVwr2lyxUOL1/g29RbFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f4:14:2b:3b:67:66:a6:b7:85:f7:81:ca:2b:b0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: Oct 7 20:00:34 2026 GMT
Not After : Oct 8 20:00:34 2026 GMT
Subject: CN=c9ab76eac968df41ccceae686e25030b93553627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:f1:42:c8:26:74:4a:bc:37:69:7f:09:0b:
1c:9d:ca:25:da:f3:f5:71:3a:25:ab:ca:93:e8:7e:
86:a0:7a:04:86:8e:0d:01:89:3f:20:ed:28:04:fa:
eb:df:43:25:e5:f5:78:3a:72:ab:01:6f:67:8b:bd:
2e:0c:cc:e7:f5:dd:51:a8:83:5b:01:af:50:a3:04:
c0:78:48:c3:d7:b3:31:86:d0:8d:43:e3:36:61:94:
2b:8e:0c:5b:e5:bb:da:98:03:8b:fd:9c:8e:05:fe:
a4:65:53:ad:d3:42:31:61:37:5c:b9:a0:ee:a1:5e:
38:8b:75:37:34:97:27:5f:b8:a3:c9:7b:ac:0f:e8:
3f:e8:00:0e:6b:7b:a6:9d:76:5f:70:4f:34:aa:5b:
65:aa:e3:d3:6f:f0:de:db:d0:d6:a8:e3:3c:3a:48:
55:0b:42:fc:12:66:dc:88:7a:8a:e3:ff:40:60:81:
c8:b1:ff:da:c2:87:22:22:4f:3e:11:96:05:de:a8:
1e:08:00:92:4f:14:6f:a2:42:8a:47:08:5f:9f:41:
4c:99:57:d6:4a:af:59:da:77:ef:f6:bd:f7:b7:0e:
2c:32:de:b1:05:a1:2e:49:38:26:d8:98:1f:58:9f:
d0:04:4c:82:41:bb:2e:7c:6e:78:1a:d0:54:15:36:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AB:76:EA:C9:68:DF:41:CC:CE:AE:68:6E:25:03:0B:93:55:36:27
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:27:3c:33:24:5a:4b:34:9e:2c:d7:a2:92:4c:d4:9b:36:a4:
2a:9a:cb:c7:e1:8f:1e:42:87:7d:98:7b:cf:25:7b:46:e6:41:
d0:a6:c9:35:35:0b:a1:f0:d2:bd:be:cd:90:ff:f9:cd:88:9b:
23:72:9c:db:7f:46:ca:59:74:3c:c6:d4:54:6c:49:f4:05:3d:
a5:01:d7:b9:51:7e:3b:57:ca:9f:ff:b7:21:9f:af:ec:78:02:
c2:b6:93:70:8c:f4:cd:a2:9e:90:6b:0d:53:a2:53:8e:ce:82:
7d:5c:ec:53:cf:32:41:fe:2f:5e:f3:cd:dc:80:7d:5f:8f:73:
48:7a:2e:11:b7:a5:d0:90:4a:ad:5f:91:4e:18:18:64:42:55:
6c:ab:e1:ec:a5:01:28:9e:9d:50:0d:e4:c1:8b:f7:27:ff:f2:
d5:23:f8:ea:60:64:e8:0f:50:54:ab:40:1f:5a:b0:93:73:57:
71:1c:19:02:2a:3c:7f:14:be:05:6f:a9:a3:d8:99:6f:97:88:
29:02:69:82:6d:99:4b:a5:a9:2b:ea:6a:b7:21:fd:90:98:2f:
9a:d0:d7:c0:b3:29:fb:62:df:d5:19:a7:18:18:a5:d6:43:ea:
b1:e9:10:bd:f8:66:7a:4f:b0:e1:77:87:a8:03:7c:d3:6a:0f:
3a:8b:b5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:25:07 2026 by rpki-client