Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
File: owVfB71HqGR4w79HOSVzrNU9Y24.mft (raw, json)
Hash identifier: Zf5rlmGoasVFaW3Q16xuUNT/pnZVR/y9m9R8HwGyXZA=
Subject key identifier: C1:9B:E6:78:6F:27:1A:1C:68:5E:B2:E4:12:EF:90:6B:7C:1F:86:1E
Authority key identifier: A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
Certificate issuer: /CN=a3055f07bd47a86478c3bf47392573acd53d636e
Certificate serial: 019D2960E8B9EF408FB12EB4417A5421E960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 09:01:50 +0000
Manifest this update: Thu 26 Mar 2026 09:01:50 +0000
Manifest next update: Fri 27 Mar 2026 09:01:50 +0000
Files and hashes: 1: owVfB71HqGR4w79HOSVzrNU9Y24.crl (hash: uw5q2BJkk3Chlmo1dOIAO7G6enfGrvPMwFnx14I81hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:e8:b9:ef:40:8f:b1:2e:b4:41:7a:54:21:e9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3055f07bd47a86478c3bf47392573acd53d636e
Validity
Not Before: Mar 26 09:01:50 2026 GMT
Not After : Mar 27 09:01:50 2026 GMT
Subject: CN=c19be6786f271a1c685eb2e412ef906b7c1f861e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:37:49:e4:69:09:dc:fa:c7:d4:95:c2:93:
0d:1a:ad:ab:9f:d4:4c:cb:2f:33:bc:9a:51:fc:8e:
5e:da:43:aa:54:e1:a7:f2:56:f8:dc:c8:c0:a5:18:
d0:7d:f7:6c:50:18:12:9f:4d:b3:61:1f:cd:fe:fa:
7a:a5:44:2a:3e:c3:35:ee:76:0a:44:a8:07:1d:80:
88:5a:ed:ef:8f:5f:cf:9c:64:c6:fd:aa:3b:54:9b:
7a:de:49:1e:f1:cc:30:2d:56:8c:bf:bf:89:c7:c1:
6b:77:79:d0:4c:d4:c8:b5:c7:a5:ad:b4:c5:37:23:
63:4a:f5:e3:90:c3:73:61:aa:53:f2:4e:da:04:d8:
29:74:a8:0d:51:23:81:9e:85:98:aa:f5:d4:cd:b5:
2e:09:82:e2:62:d4:a6:ab:21:db:28:df:4a:50:28:
3f:7e:1f:5e:93:17:25:d8:9d:c0:e6:24:8b:70:62:
16:86:c0:95:9a:84:49:ad:90:5f:59:76:26:5d:11:
fd:9f:24:30:f1:4a:61:04:bc:74:30:9f:19:bf:9f:
07:33:8b:05:3b:a3:85:a1:84:d8:8b:46:8f:00:b1:
d2:17:06:8b:c1:68:15:b8:0f:36:1f:b2:c5:ab:12:
a5:5c:bb:68:7d:81:6d:32:ae:f7:6c:0d:0f:02:cf:
47:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9B:E6:78:6F:27:1A:1C:68:5E:B2:E4:12:EF:90:6B:7C:1F:86:1E
X509v3 Authority Key Identifier:
keyid:A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:83:98:84:bc:e8:25:53:7c:a1:ce:46:91:e6:58:19:87:90:
1f:41:40:3d:1f:a2:7f:4d:1f:a5:c8:e4:0f:ea:52:1b:0c:85:
24:86:e8:6a:58:f3:8c:79:f7:b4:cb:b4:db:43:15:63:b8:f6:
d6:ce:c3:57:53:70:10:4f:e4:5b:13:8d:86:ec:88:39:56:fe:
66:4f:c6:3b:df:60:98:b6:80:21:e3:77:37:0c:b7:45:c4:e2:
2d:29:76:b1:19:d6:5c:8b:1e:8a:5b:19:9e:25:1c:be:23:99:
f5:88:20:f2:19:a0:64:27:02:39:61:42:2b:bb:94:ca:00:d5:
22:5a:b7:a0:c5:bb:c7:bc:75:b4:e3:fe:0f:5f:ae:ab:0c:86:
f4:15:5f:10:16:43:1a:77:97:30:13:4e:28:12:0b:cc:be:4d:
5e:5f:55:ff:23:45:bd:4c:58:61:1f:30:9a:48:fb:01:28:34:
7b:ac:be:cf:35:0b:fd:b6:e4:12:73:40:74:1a:f5:d7:21:38:
bd:e8:61:98:af:7a:41:ef:80:2a:67:f7:a2:c3:1b:4b:40:5e:
8c:3e:73:1a:7e:57:8a:c3:85:f8:e1:e2:d0:75:88:51:3c:69:
bc:2f:c2:d8:dc:dd:06:06:a3:d3:ec:fa:bc:e3:71:d1:f2:69:
28:38:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:31 2026 by rpki-client