Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: cNvQUeV3m07RStleovc8T6jqXeD2EjCsPD1MmEr507c=
Subject key identifier: C4:1F:04:17:74:E7:81:08:20:D7:97:75:64:A4:8D:D9:62:15:1A:21
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 019E1D2348813BCFD63CD6206866169B0D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 17:01:51 +0000
Manifest this update: Tue 12 May 2026 17:01:51 +0000
Manifest next update: Wed 13 May 2026 17:01:51 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: 6UYC7UwR1XELPPx6lF4NW+CrTjPDj5oN3WDbDImABU8=)
2: 5P2AqR4dtygfqcMyJGY9YwMXZmo.roa (hash: plYfXtpKsLLxZP4A30RARMsnKevfGvWHOU+I9QD0I+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:48:81:3b:cf:d6:3c:d6:20:68:66:16:9b:0d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: May 12 17:01:51 2026 GMT
Not After : May 13 17:01:51 2026 GMT
Subject: CN=c41f041774e7810820d7977564a48dd962151a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:52:c2:ab:3a:42:39:aa:96:d1:e1:59:fa:
ed:13:a2:58:1c:79:eb:4a:38:65:49:0e:fa:63:1f:
95:3c:1b:e6:2a:cf:2e:47:ad:13:30:87:64:7f:f6:
cc:d1:61:00:ee:8f:a6:eb:4c:14:7b:d7:e7:8a:53:
02:e1:2e:80:48:8e:a0:64:92:6c:44:bb:fe:df:8d:
7e:64:27:ca:0e:f2:90:f4:7f:bd:c2:e2:84:39:a6:
69:82:1e:a2:8a:e6:ff:03:80:c5:44:7c:41:c6:c7:
c8:cf:51:3f:cd:28:1e:3c:3f:12:e3:a9:a3:09:c8:
b5:37:16:0c:f4:d9:de:bf:c4:55:7a:83:65:f0:d2:
19:75:77:67:8a:5a:cf:c2:dd:74:65:45:85:db:f1:
4f:57:05:da:15:63:98:0b:a2:ff:51:08:af:42:03:
69:01:e8:35:ad:a7:23:f4:49:96:77:0b:df:7a:1e:
ee:70:80:70:39:a9:8a:54:f2:ab:7a:22:d1:85:38:
7d:54:44:5c:7f:50:98:66:d3:b4:72:3a:1c:a0:50:
4c:e0:0f:1d:8c:d2:37:47:f8:73:44:25:35:6b:08:
93:52:d2:c9:78:2d:c0:18:97:8d:ba:85:ec:2d:63:
c0:b3:9b:c6:8f:d8:70:2d:d8:f8:24:78:f2:b7:56:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1F:04:17:74:E7:81:08:20:D7:97:75:64:A4:8D:D9:62:15:1A:21
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7a:88:a9:ee:99:c9:ae:51:fa:3f:ef:f4:52:9d:5a:05:ae:
17:13:1f:11:cb:18:fa:6c:44:e1:43:51:12:7e:1b:2d:ef:29:
4a:73:75:48:5c:94:86:bf:b4:ad:07:23:2b:b7:cb:47:60:c7:
28:f6:27:fe:f2:35:44:d8:da:b7:7e:b8:e8:c8:6f:f1:9f:13:
d0:7a:09:1f:98:34:ae:5f:9d:04:f3:10:99:34:98:f0:31:1c:
ec:da:13:43:08:b5:89:4a:3d:29:1f:a4:d5:a3:c8:d7:63:06:
af:0c:df:44:1e:e2:09:b9:cb:ee:33:39:9a:96:53:8b:ce:67:
c9:39:13:07:b8:7e:5d:01:c3:c8:4f:1b:d3:d8:33:f8:05:23:
ce:7d:e3:84:bf:dc:a2:9a:f5:f1:b2:3f:d6:e5:aa:6a:71:2e:
1e:e2:68:93:45:1b:1c:34:6b:b8:7c:89:28:3b:00:26:df:ed:
b8:ae:07:ee:8b:4d:0d:4b:f8:57:24:e3:c2:33:54:94:e3:64:
61:69:03:e3:a7:43:e5:4d:3a:24:d7:b4:8a:91:a5:20:70:cf:
18:3d:c6:84:a7:00:9b:97:92:d6:08:9e:6b:45:d6:3e:6e:6e:
24:7b:9f:b4:25:bb:9d:70:c9:c8:08:6f:21:91:25:37:69:fd:
9d:39:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:02 2026 by rpki-client