Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier: YQqADd6Uh05HTqFZXEmz+Z/2wz4abdIA1Pf8Pwzmwk0=
Subject key identifier: E8:4E:2A:C2:BE:65:6D:39:84:25:3B:80:32:5D:0D:76:AD:84:69:AC
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer: /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial: 01A0DC8558FC577F8C472C9671E17EE8E426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number: 09D1
Signing time: Sat 26 Sep 2026 07:02:01 +0000
Manifest this update: Sat 26 Sep 2026 07:02:01 +0000
Manifest next update: Sun 27 Sep 2026 07:02:01 +0000
Files and hashes: 1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: g/Nxu/TKAKnM0Z7k8Ux682Ty9Ua0LQvrSznqUBt9/d0=)
2: sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa (hash: tswRhyFVxtP5UBE+zxkH0gqlOKm86RXi8OEmfEEgHVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:58:fc:57:7f:8c:47:2c:96:71:e1:7e:e8:e4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Validity
Not Before: Sep 26 07:02:01 2026 GMT
Not After : Sep 27 07:02:01 2026 GMT
Subject: CN=e84e2ac2be656d3984253b80325d0d76ad8469ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:7e:bf:f8:47:e5:2c:a5:09:8c:41:a3:1c:
dc:70:2c:8c:c9:bf:35:80:8a:43:dc:db:b2:dd:e4:
d4:dd:09:8c:e5:b0:89:5a:c6:e2:82:8f:33:51:9b:
e4:83:20:40:4f:d7:2d:e4:b0:d6:54:6d:5c:25:ff:
ab:98:e4:e8:8d:75:06:e8:59:d1:5f:8a:34:36:43:
7c:0d:a5:02:4c:c1:57:f4:ca:90:f0:c8:69:a6:9a:
2c:35:a4:3f:cf:5c:a2:55:d1:bb:dc:0f:d1:d4:f4:
f4:4d:68:1f:7e:9f:99:17:e4:00:78:d7:46:35:95:
ad:27:c2:21:1f:39:c4:98:78:73:00:2d:db:36:e2:
f4:d8:0b:c1:ac:94:b8:66:35:68:b4:ba:9e:ec:f5:
25:6f:ec:7b:9d:3b:9b:7e:52:26:cc:36:43:44:ac:
18:09:37:84:80:9b:e3:cf:b3:50:5d:ec:a3:55:72:
03:4d:11:11:52:66:f4:92:87:ac:14:1c:30:b5:28:
8e:86:df:f1:38:67:58:98:0a:de:53:52:60:cb:2d:
f0:1e:f2:c4:86:91:b7:37:b2:fc:28:39:2e:43:18:
7d:c2:27:59:6c:dc:e0:fd:06:ff:5b:94:a2:2b:12:
92:62:59:6b:ec:5d:2c:5f:d6:e9:55:ba:3e:18:22:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4E:2A:C2:BE:65:6D:39:84:25:3B:80:32:5D:0D:76:AD:84:69:AC
X509v3 Authority Key Identifier:
keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:dc:7f:7c:d9:81:64:33:cf:21:ad:e4:7c:1c:6b:86:27:69:
48:e0:92:f3:a4:75:2a:e9:cf:00:3c:58:56:ba:d5:41:b5:c3:
fa:54:6b:f1:3f:da:35:7b:fb:ba:46:19:4d:1b:73:14:17:72:
cc:b1:22:50:57:52:2f:3e:ad:a5:c9:04:ca:13:8e:ec:89:b7:
39:b9:1e:17:9a:a0:e4:ee:12:48:44:f0:40:66:3a:5b:08:b1:
d7:49:e6:84:a9:04:f1:92:fb:0a:de:f7:ae:9e:2b:a6:89:06:
4b:38:da:34:42:6b:f8:e2:9a:59:6b:ca:5d:0a:4a:16:2a:55:
76:a1:f5:4f:9f:92:03:d1:a4:29:8d:4e:50:3a:63:23:5c:cc:
3b:81:19:79:04:e1:9e:33:1a:9d:ec:9f:56:1e:e1:3d:1e:96:
c6:08:58:7e:31:7a:25:d8:3a:dc:32:24:8d:ab:31:31:ee:0c:
19:4d:8b:1f:7f:a2:78:8e:ba:f9:ca:7e:e4:e7:59:18:89:c5:
32:5f:39:4a:f8:4b:fa:30:12:43:2b:03:8a:09:93:da:26:75:
02:df:41:a3:d0:14:ff:dd:d0:5d:c1:42:5f:e2:27:3d:be:77:
31:8b:ff:d0:ca:eb:d6:ac:e1:a0:8e:eb:8d:87:fd:2a:e7:ff:
a7:84:9d:62
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDchVj8V3+MRyyWceF+6OQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZWMxNDY4ZWUzMTAzZmU1M2IxY2Y1YTk4NzVhZWNkNGUy
OGFkNTEwHhcNMjYwOTI2MDcwMjAxWhcNMjYwOTI3MDcwMjAxWjAzMTEwLwYDVQQD
EyhlODRlMmFjMmJlNjU2ZDM5ODQyNTNiODAzMjVkMGQ3NmFkODQ2OWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HJ+v/hH5SylCYxBoxzccCyMyb81
gIpD3Nuy3eTU3QmM5bCJWsbigo8zUZvkgyBAT9ct5LDWVG1cJf+rmOTojXUG6FnR
X4o0NkN8DaUCTMFX9MqQ8MhppposNaQ/z1yiVdG73A/R1PT0TWgffp+ZF+QAeNdG
NZWtJ8IhHznEmHhzAC3bNuL02AvBrJS4ZjVotLqe7PUlb+x7nTubflImzDZDRKwY
CTeEgJvjz7NQXeyjVXIDTRERUmb0koesFBwwtSiOht/xOGdYmAreU1Jgyy3wHvLE
hpG3N7L8KDkuQxh9widZbNzg/Qb/W5SiKxKSYllr7F0sX9bpVbo+GCIHyQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOhOKsK+ZW05hCU7gDJdDXathGmsMB8GA1UdIwQY
MBaAFPjsFGjuMQP+U7HPWph1rs1OKK1RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Pd1VhTzR4QV81VHNjOWFtSFd1elU0b3JWRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYjAyNGJkLTJkMGMtNDU3Mi1hNDlh
LTU4NzhhODE3M2M0NC8xLzEtT3dVYU80eEFfNVRzYzlhbUhXdXpVNG9yVkUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RlL2IwMjRiZC0yZDBjLTQ1NzItYTQ5YS01ODc4YTgxNzNj
NDQvMS8xLU93VWFPNHhBXzVUc2M5YW1IV3V6VTRvclZFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9x/
fNmBZDPPIa3kfBxrhidpSOCS86R1KunPADxYVrrVQbXD+lRr8T/aNXv7ukYZTRtz
FBdyzLEiUFdSLz6tpckEyhOO7Im3ObkeF5qg5O4SSETwQGY6Wwix10nmhKkE8ZL7
Ct73rp4rpokGSzjaNEJr+OKaWWvKXQpKFipVdqH1T5+SA9GkKY1OUDpjI1zMO4EZ
eQThnjManeyfVh7hPR6WxghYfjF6Jdg63DIkjasxMe4MGU2LH3+ieI66+cp+5OdZ
GInFMl85SvhL+jASQysDigmT2iZ1At9Bo9AU/93QXcFCX+InPb53MYv/0Mrr1qzh
oI7rjYf9Kuf/p4SdYg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:13:33 2026 by rpki-client