Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: FTeKCjCupMn/Bf3ciOwmeo203XYfDOjIq7vTepjrKyA=
Subject key identifier: 52:04:76:50:78:21:8F:E2:58:0B:5C:8D:44:D5:C3:76:E4:68:DD:07
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 019D29CECC8AECDF86EC5187CCBB9C2B8CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:01:51 +0000
Manifest this update: Thu 26 Mar 2026 11:01:51 +0000
Manifest next update: Fri 27 Mar 2026 11:01:51 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: oL9QgArg7vVtvcf0FbKfQKHM2efMXJwBBxgfKnNaAQw=)
2: 5P2AqR4dtygfqcMyJGY9YwMXZmo.roa (hash: plYfXtpKsLLxZP4A30RARMsnKevfGvWHOU+I9QD0I+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:cc:8a:ec:df:86:ec:51:87:cc:bb:9c:2b:8c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Mar 26 11:01:51 2026 GMT
Not After : Mar 27 11:01:51 2026 GMT
Subject: CN=5204765078218fe2580b5c8d44d5c376e468dd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:66:b0:59:a3:d4:fa:e0:65:a0:0b:17:3f:
02:fe:15:12:2e:91:4c:87:01:b5:d0:fc:2c:49:b9:
a2:97:e1:77:e1:9d:04:75:2e:51:14:57:f2:86:5d:
22:76:2d:ef:ab:51:29:0a:c7:16:78:05:e8:9a:64:
4c:31:dc:3f:39:3d:bf:42:1a:51:34:be:f7:0c:17:
b0:e7:50:80:d2:83:03:5f:fc:83:e4:f8:bb:5f:aa:
7b:19:51:d4:b2:aa:5b:69:f0:2c:18:8f:53:11:d0:
d1:4b:1b:51:e9:3d:60:23:c0:9b:23:70:d6:53:66:
96:4b:8c:db:38:e5:f1:52:f7:31:da:5a:49:6c:56:
1a:81:31:59:08:c7:e7:a7:92:22:09:49:5f:00:fe:
b9:5c:bb:b6:ac:3a:38:0e:f2:66:4a:e9:57:4e:e8:
a9:ed:56:5d:00:1e:13:7c:73:3a:61:95:f1:e3:ed:
b0:9e:d5:ff:02:21:51:98:6b:77:bd:b2:4d:73:b2:
22:bb:db:ae:6b:b2:c2:1c:cb:e9:09:c0:6c:8a:41:
93:8c:a7:6b:d3:94:ca:d2:f6:a3:8e:00:06:54:a9:
c0:9e:86:c6:58:3f:f0:08:30:45:7e:79:bd:16:51:
53:5f:3f:f0:df:f8:a6:d2:b5:56:e7:89:97:15:29:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:04:76:50:78:21:8F:E2:58:0B:5C:8D:44:D5:C3:76:E4:68:DD:07
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0d:cd:9f:cc:b0:06:68:79:ef:f7:14:f7:5f:d7:ca:49:fc:
1d:03:58:3c:a5:26:f9:96:12:c2:fb:d6:f5:fa:d5:03:ee:cc:
70:7f:f2:34:ba:6d:a7:84:f8:63:40:e5:23:ec:62:b1:e1:d6:
50:e5:4e:8c:2b:1e:0e:8e:7b:c9:88:b1:76:c6:97:5f:2a:f9:
14:fc:f7:82:7b:fb:f8:6c:01:20:1c:47:0e:23:ba:69:4e:ad:
37:a5:7a:8f:b3:6d:1b:63:82:64:6f:ef:e2:c1:c2:37:d8:4e:
f4:6d:3d:2f:47:f3:f8:f0:be:58:2a:13:52:ec:a6:e3:f4:be:
b2:2a:fc:73:39:ce:58:7a:88:b4:c6:4f:26:e1:10:58:de:4e:
e0:b8:36:31:f5:b6:82:d5:f4:2b:2a:e0:d3:c0:7b:2e:99:01:
43:d0:ab:9a:74:f3:54:93:73:6e:d7:bf:d7:e7:6d:cd:97:26:
b8:fb:27:66:af:c1:77:dc:2a:58:ba:99:b6:c4:57:6e:74:ce:
f0:8b:3e:02:15:74:04:81:78:ed:f7:6a:df:f0:84:88:8f:e8:
99:58:3e:0a:f0:fa:ff:d1:3c:d1:ed:8d:3f:0e:31:8e:2b:cd:
6a:16:7a:ee:1d:96:57:f5:24:78:9c:88:95:d5:06:20:7e:37:
78:07:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:07:59 2026 by rpki-client