Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: 1v87OsWJAOomdA9njRM+FkHsHf3be1qbagKY/uiBUrU=
Subject key identifier: BE:40:A5:E5:64:44:40:7D:9A:2E:79:0B:47:92:49:43:2E:39:39:E0
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 01A0E81CBA42F0AED79141A1C843D6054374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1A7F
Signing time: Mon 28 Sep 2026 13:03:11 +0000
Manifest this update: Mon 28 Sep 2026 13:03:11 +0000
Manifest next update: Tue 29 Sep 2026 13:03:11 +0000
Files and hashes: 1: MJmEGSwkNgc6tWAjFHwsQalK-pc.roa (hash: zGylhLzO0uiWa1ShFqQYwTVVj/623FBQDk35JT6LjUg=)
2: jSutCugEdF2rS6QxHHGZRxPxhsI.asa (hash: zjJ0AX5FLYwkWoWkgoUko8ALZitnQgcsownFmhLIYFw=)
3: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: XEUqaRikRdh6rQtXuVtpotg6QX2own04+jsk+rEK78k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:ba:42:f0:ae:d7:91:41:a1:c8:43:d6:05:43:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Sep 28 13:03:11 2026 GMT
Not After : Sep 29 13:03:11 2026 GMT
Subject: CN=be40a5e56444407d9a2e790b479249432e3939e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:bf:cc:f8:da:9b:84:96:a4:17:82:53:71:
c2:9e:6d:e4:33:10:5e:26:86:d8:b5:68:4b:25:c5:
f2:17:9b:7a:3b:ef:9b:dc:14:59:04:28:b9:d2:fd:
45:59:8f:72:76:2d:bb:d7:30:4a:8a:13:6c:bf:af:
b6:71:49:2c:ea:0e:c0:0e:cb:54:76:8b:a5:f9:8c:
5d:b4:0b:7a:6f:89:9e:0c:b9:a0:d4:7f:ed:da:bd:
80:a7:c9:46:1d:9e:8a:88:88:40:3e:a0:36:7c:f1:
c1:a4:8c:f1:2a:3e:9a:38:63:d7:16:e4:da:fb:38:
af:05:13:22:1a:17:3e:83:3d:48:f5:d7:bd:c1:d2:
83:c3:f5:26:08:91:10:58:9c:17:c4:91:30:b5:a9:
cb:31:ac:f9:40:fd:c6:6f:4e:14:6c:85:7d:74:e3:
3c:96:4e:99:ac:e7:d8:96:87:34:e0:e3:63:0b:6a:
2b:c4:4e:fd:08:3e:e3:ec:31:7f:83:7d:1c:62:af:
d4:68:87:52:f8:46:58:9e:a1:97:b0:ba:44:86:d6:
36:ad:e4:21:75:92:1c:10:13:44:78:76:be:0e:e6:
48:38:97:87:81:b9:7a:de:c7:6f:a5:b0:a9:e4:b1:
a0:29:81:54:b5:f6:ce:6a:3d:80:d6:ba:89:cf:f4:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:40:A5:E5:64:44:40:7D:9A:2E:79:0B:47:92:49:43:2E:39:39:E0
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:64:14:30:dc:4b:5a:62:f6:93:23:ac:88:df:98:b2:64:5b:
38:80:f2:30:8b:de:ec:d7:0a:12:fb:47:b2:bd:7e:d4:36:3d:
fe:8b:2c:62:4a:eb:5e:19:7e:bd:52:f0:94:4f:3f:ce:c3:79:
be:fa:b1:7d:dd:e9:bc:ea:64:56:48:0f:6f:bc:8d:c0:8a:80:
f5:3a:82:7d:51:e9:a4:0b:02:ce:9b:7d:c4:e7:f9:3f:5d:6f:
be:06:eb:fb:3a:da:b7:72:81:ec:16:87:aa:98:b3:23:f4:44:
7b:45:b1:3f:bf:33:15:3b:f5:87:a0:fb:c0:4d:6a:50:28:40:
cc:1d:76:58:44:8c:b1:51:88:8a:8e:fb:4c:c1:ff:d2:91:2d:
c3:a3:96:74:a6:c4:29:0c:aa:17:ca:96:17:de:51:9e:a8:50:
a9:d4:cf:eb:6d:d4:15:0f:72:9b:64:bc:67:06:9b:8e:35:ff:
d4:f1:5f:cc:9b:fe:93:d1:fd:63:ab:3e:40:3b:84:cc:ed:4b:
88:09:de:64:d0:f3:b0:64:6b:c6:f0:23:07:07:92:0e:c8:32:
41:f4:f4:62:ef:88:dc:b6:dc:15:bc:da:41:f0:54:a7:61:89:
95:d6:a2:82:c2:e4:1c:83:87:b0:db:40:1b:e6:21:f7:23:b8:
09:3b:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:44:20 2026 by rpki-client