Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: PFCTeAjfwGBOm+mfGtdo53L5oMfpQxrgQeHd3d7KVnA=
Subject key identifier: 5E:B2:B7:85:01:D0:12:CE:1F:3E:77:97:A6:B5:FF:9B:FD:D6:7F:12
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 019D2703A1FD6F3065D3B63516CDC3B64458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 184F
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: FeYkYNLMNWQ5qRs+NM6TgwFH7BVtOh8076lBSPvEFL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a1:fd:6f:30:65:d3:b6:35:16:cd:c3:b6:44:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=5eb2b78501d012ce1f3e7797a6b5ff9bfdd67f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:92:4b:e5:c4:fc:9d:06:c1:81:d4:a3:bc:
15:1e:f9:fd:aa:e2:b7:43:4d:57:45:5e:5e:2d:9d:
1c:de:f8:e5:b6:fb:7b:ce:6f:23:15:3a:fd:8d:51:
a7:7f:8a:a8:51:11:4d:66:fb:b2:16:17:bd:6d:c5:
45:9c:2d:b4:7f:52:ec:c0:e5:9b:bb:64:45:4d:7f:
8b:f0:ab:ab:ec:c4:2a:d7:ee:04:fc:05:50:f2:16:
ad:03:78:2a:77:a1:dd:47:08:6c:f0:de:9d:bb:76:
71:b9:cc:91:d4:7d:1d:8f:82:93:01:4a:70:41:5d:
35:e2:de:7d:fc:83:cc:36:46:b3:2e:f1:aa:e0:46:
6e:57:23:02:ce:75:b2:67:5c:14:88:19:4c:61:c7:
7c:aa:ff:ba:dd:d8:eb:e4:6b:3b:71:6e:4c:a8:64:
6c:2b:06:53:70:19:a6:16:16:a6:60:f2:8a:2d:3a:
1c:3a:7c:08:72:dd:a6:7b:54:a2:d9:97:95:74:b8:
9e:d1:0d:c8:7c:b4:fd:6d:c0:98:47:82:76:2f:dd:
9e:97:5f:71:44:29:e8:f2:3c:ab:22:52:02:3e:f0:
25:2a:a4:9d:af:e9:f6:65:f1:fe:19:67:d6:5e:a8:
31:cf:f4:bc:56:eb:7a:26:e9:3a:c4:7f:6e:2b:82:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B2:B7:85:01:D0:12:CE:1F:3E:77:97:A6:B5:FF:9B:FD:D6:7F:12
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c5:28:19:7f:d1:f0:99:8f:14:17:98:cc:81:96:4a:79:97:
c1:67:32:fb:0d:dd:15:53:96:ea:33:50:26:7c:f8:e5:fe:77:
6f:10:4d:84:12:31:57:42:3c:52:11:e2:48:6d:d1:9d:3c:24:
18:42:af:c9:67:7f:ab:83:ac:1a:2e:fc:bd:ae:ee:65:0f:f0:
4b:47:80:d0:a0:ac:cd:4a:ab:70:91:a3:0f:fd:13:33:4b:bb:
af:da:16:b9:7e:9d:1e:47:44:e0:9e:1c:42:74:5f:9c:95:41:
40:31:e0:66:53:3a:02:56:c6:ce:9d:30:3f:87:bc:1b:e9:58:
0f:00:0f:95:db:8d:78:2c:05:7c:90:c3:4e:0d:8a:88:f2:f0:
b4:f0:61:01:d7:67:b1:e9:46:5d:e5:4a:4e:26:cd:1c:5c:c2:
46:fd:66:52:a7:2b:86:41:a8:1b:f6:96:84:ee:bc:d2:c5:cc:
50:a6:85:88:ce:a6:66:25:88:b0:ae:cf:15:46:fb:12:5a:e8:
12:56:ce:36:13:09:91:00:b5:db:c7:1b:8a:96:40:26:fa:7c:
24:96:58:35:60:20:64:02:59:4b:e0:fd:a8:8c:7f:50:be:d3:
e7:88:d3:01:11:4f:14:94:a9:15:8e:77:7e:d2:9e:77:d9:fe:
60:b4:f1:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA6H9bzBl07Y1Fs3DtkRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjhlZTBiMWY0MGNiYjEzYTg4ZmRlNGMwYjExNjgzMDRk
ZjJkNmIwHhcNMjYwMzI1MjIwMDQyWhcNMjYwMzI2MjIwMDQyWjAzMTEwLwYDVQQD
Eyg1ZWIyYjc4NTAxZDAxMmNlMWYzZTc3OTdhNmI1ZmY5YmZkZDY3ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+qSS+XE/J0GwYHUo7wVHvn9quK3
Q01XRV5eLZ0c3vjltvt7zm8jFTr9jVGnf4qoURFNZvuyFhe9bcVFnC20f1LswOWb
u2RFTX+L8Kur7MQq1+4E/AVQ8hatA3gqd6HdRwhs8N6du3ZxucyR1H0dj4KTAUpw
QV014t59/IPMNkazLvGq4EZuVyMCznWyZ1wUiBlMYcd8qv+63djr5Gs7cW5MqGRs
KwZTcBmmFhamYPKKLTocOnwIct2me1Si2ZeVdLie0Q3IfLT9bcCYR4J2L92el19x
RCno8jyrIlICPvAlKqSdr+n2ZfH+GWfWXqgxz/S8Vut6Juk6xH9uK4Kt3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6yt4UB0BLOHz53l6a1/5v91n8SMB8GA1UdIwQY
MBaAFDlo7gsfQMuxOoj95MCxFoME3y1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYt
Nzk5OGY0YmRmMjFjLzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85ZjY5ZDQtNjVlZi00ZDVlLTljMmYtNzk5OGY0YmRmMjFj
LzEvT1dqdUN4OUF5N0U2aVAza3dMRVdnd1RmTFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcUoGX/R
8JmPFBeYzIGWSnmXwWcy+w3dFVOW6jNQJnz45f53bxBNhBIxV0I8UhHiSG3RnTwk
GEKvyWd/q4OsGi78va7uZQ/wS0eA0KCszUqrcJGjD/0TM0u7r9oWuX6dHkdE4J4c
QnRfnJVBQDHgZlM6AlbGzp0wP4e8G+lYDwAPlduNeCwFfJDDTg2KiPLwtPBhAddn
selGXeVKTibNHFzCRv1mUqcrhkGoG/aWhO680sXMUKaFiM6mZiWIsK7PFUb7Elro
ElbONhMJkQC128cbipZAJvp8JJZYNWAgZAJZS+D9qIx/UL7T54jTARFPFJSpFY53
ftKed9n+YLTxZw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:53 2026 by rpki-client