Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: Rt/TwoVP4jmRWUTsxyFO4BINA+ndcVE8l8JWqbhLFpQ=
Subject key identifier: 48:DE:39:90:CF:2A:1F:8C:E4:FE:B8:F0:C6:82:72:AA:32:DA:71:8E
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 019F93C90F3A1BE1E7E485AE6B218C219407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 11:00:55 +0000
Manifest this update: Fri 24 Jul 2026 11:00:55 +0000
Manifest next update: Sat 25 Jul 2026 11:00:55 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: Rz2ZDV2amGscC4QIMcem0Pu/VOYLhC1/h9dMQrHmios=)
2: 5P2AqR4dtygfqcMyJGY9YwMXZmo.roa (hash: plYfXtpKsLLxZP4A30RARMsnKevfGvWHOU+I9QD0I+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:0f:3a:1b:e1:e7:e4:85:ae:6b:21:8c:21:94:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Jul 24 11:00:55 2026 GMT
Not After : Jul 25 11:00:55 2026 GMT
Subject: CN=48de3990cf2a1f8ce4feb8f0c68272aa32da718e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:60:6d:62:70:8b:a4:2c:7b:bb:43:96:25:
ff:85:0e:1c:14:ff:de:73:5c:d0:e6:51:2a:a4:7e:
c5:dc:60:06:c1:9f:63:32:20:ee:f4:85:19:f6:87:
6f:64:f6:80:dc:c0:5e:95:54:94:38:5b:2e:7e:98:
ab:70:a9:33:68:8f:20:b7:2b:c9:51:e0:ee:36:0d:
2d:8b:d1:e0:04:ec:c6:a3:a5:5a:fe:45:9d:48:3a:
21:b2:59:ad:d3:19:e0:8a:8b:4a:92:5a:ae:23:76:
ef:ab:ba:54:20:d3:d7:cd:f3:1c:7e:ae:5e:50:3a:
fb:6b:5b:48:c4:c1:e0:3d:04:8d:fd:29:02:e1:a6:
d7:81:61:2e:31:5f:7e:53:35:8e:d5:3b:16:84:9d:
e9:6e:23:98:1c:5e:8f:0b:2d:59:5d:37:60:ca:21:
b5:cd:b3:42:61:c2:94:6e:11:22:03:9d:c1:6b:80:
82:fb:72:78:be:d7:b0:c5:2f:0e:78:00:55:06:53:
de:2b:9b:84:7b:99:de:61:dd:e7:d4:79:78:b5:7f:
f5:aa:dd:17:ce:0d:a1:84:ee:14:8e:3b:79:11:c5:
ab:30:42:66:2a:23:65:4c:21:f6:91:28:b3:c0:6d:
28:d7:b4:04:c6:48:af:5a:f3:78:6b:e1:5d:4e:ca:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DE:39:90:CF:2A:1F:8C:E4:FE:B8:F0:C6:82:72:AA:32:DA:71:8E
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:1d:7b:bb:6e:cb:6b:77:c9:ea:85:52:9a:1a:93:18:c1:
d2:11:1e:b1:0f:13:c0:e8:05:29:53:48:0a:68:ef:38:82:63:
f1:93:e1:b9:53:b3:22:00:81:4d:e6:01:d9:68:9f:63:cc:1e:
56:c0:13:0f:0d:d0:28:e2:39:85:13:ae:4a:de:e1:d1:9b:ae:
f0:de:0a:64:61:a0:80:e7:aa:5c:64:0b:2b:02:98:b0:23:f4:
1f:8a:a9:69:fb:cf:39:e4:77:9e:e2:ae:e6:dc:a5:a8:a3:61:
9a:b9:5a:f5:be:ff:b7:de:e1:ee:93:8c:37:ec:60:c9:6c:f0:
cf:e0:7c:17:8b:f1:de:54:3c:5f:31:92:2a:14:5c:78:8e:7b:
1b:0b:66:28:7c:2a:e5:cf:bb:bc:b0:d2:1b:75:bb:82:49:e0:
b7:19:4d:ee:fe:0d:48:4e:bd:94:98:74:23:ed:3e:18:fe:75:
97:b0:4a:fa:c0:e7:08:c8:89:a7:30:71:f1:dc:27:65:fc:1b:
6b:fb:85:83:49:a2:64:58:1a:cb:79:81:a1:22:01:55:04:01:
72:bf:d5:31:97:21:40:30:02:db:89:d8:36:99:80:2f:e8:4a:
36:2a:5f:37:0a:95:63:3f:48:01:bc:b5:95:38:03:a2:0e:75:
de:1d:85:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:56 2026 by rpki-client