Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File: ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier: c1wKuex6VE7RnuVDsj4WpWXEYNkh3tAkuNrvTOQLeyw=
Subject key identifier: 17:CF:32:31:37:01:95:F0:AE:16:08:1C:9A:C1:4B:24:F3:0D:FB:B3
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial: 019D2627F80D96E1D505BF3CE67544637199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number: 0D51
Signing time: Wed 25 Mar 2026 18:00:46 +0000
Manifest this update: Wed 25 Mar 2026 18:00:46 +0000
Manifest next update: Thu 26 Mar 2026 18:00:46 +0000
Files and hashes: 1: UNrxa7mNWshV_JbrB0BZ0cpuOEk.roa (hash: Eo6ANkMPIflh/NyGmKlWOHkmfnD61QM+DTkeJS9gQ+g=)
2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: Swr6aoIj3qtXEg5/G5U7uHMcmHJ4UibdGvXlXjAzmr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f8:0d:96:e1:d5:05:bf:3c:e6:75:44:63:71:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Validity
Not Before: Mar 25 18:00:46 2026 GMT
Not After : Mar 26 18:00:46 2026 GMT
Subject: CN=17cf3231370195f0ae16081c9ac14b24f30dfbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:ef:a1:b3:34:fd:8e:6d:06:4c:11:38:13:
be:7a:6f:d7:1a:78:b7:61:86:fd:6d:ae:96:99:9f:
30:df:d8:7a:80:5c:df:f2:bd:70:1e:47:a3:8d:49:
c9:50:b9:7d:22:3a:1b:43:a1:29:48:96:d2:52:bb:
7f:ef:01:36:97:33:45:41:9b:0b:cd:b8:86:f8:70:
04:ba:65:a9:99:8c:bc:b7:bf:aa:95:83:68:12:3b:
7c:5d:43:06:ee:48:63:7a:87:7f:b3:85:fe:1d:8e:
3b:ad:6a:e0:33:ea:6e:d7:24:35:39:0a:e6:19:79:
cc:02:26:c2:4a:4a:ba:e5:17:14:60:63:71:62:ee:
2b:79:6f:fa:17:ae:ad:e8:25:90:b9:67:30:2a:22:
59:15:87:60:fc:b7:2f:19:f3:46:87:dc:85:2e:0b:
06:ba:75:39:ce:95:81:95:0b:77:89:30:2f:4c:35:
32:28:d8:85:27:9b:a4:41:d9:bd:02:6e:6d:ae:45:
8f:1b:33:37:0a:2e:e1:83:45:e9:9b:74:c1:ed:0b:
16:8d:0b:98:9d:dc:50:d3:82:75:8d:6f:30:d1:19:
34:87:78:de:cc:dd:2f:46:81:83:7a:89:11:c4:83:
e0:c4:5b:6f:e5:1b:e4:50:57:e4:cb:94:a3:8e:1c:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CF:32:31:37:01:95:F0:AE:16:08:1C:9A:C1:4B:24:F3:0D:FB:B3
X509v3 Authority Key Identifier:
keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a9:98:8f:61:bc:ea:e8:7a:1c:20:5f:bd:2c:35:4e:1a:78:
e4:2d:5c:a3:dc:17:09:35:58:9d:a1:33:fc:99:39:e7:dc:b2:
8e:00:19:31:50:16:8d:15:25:cc:4c:50:a4:41:eb:03:a4:6d:
27:fd:ff:20:39:bb:89:d7:1a:7d:91:b7:01:10:53:5d:49:e2:
85:2b:3a:48:d0:aa:6c:96:da:f0:fd:c0:db:cb:ee:c3:56:31:
dd:f2:32:a4:ed:d3:e1:b0:e8:e5:a2:e4:ad:44:1d:79:80:60:
36:5d:9e:11:42:3c:2c:e9:e3:95:60:41:91:5a:ff:08:e2:bb:
77:23:ba:9f:33:59:84:2f:03:f7:42:a4:07:6a:ee:5c:95:a2:
1e:5d:bc:1a:21:a7:8a:e5:79:23:45:40:ec:e7:09:b6:81:7e:
d4:7d:5f:fe:94:fc:7c:e2:90:66:1c:8b:d7:e1:27:d8:75:32:
76:44:d7:05:1e:2a:1a:ee:7f:98:82:ce:0d:47:09:66:53:da:
60:97:03:d2:6d:2a:f4:85:2e:cc:06:82:8c:7c:50:90:12:0b:
60:6d:62:71:5d:23:e6:b5:27:90:c6:72:c4:ab:89:cd:48:6c:
bf:68:ac:8e:56:08:e1:17:c8:52:fd:1e:51:07:ec:e7:35:dd:
f1:22:fb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:58 2026 by rpki-client