Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json)
Hash identifier: xT1KBpejIW2TzhjoxPurL9zt4kJjVVrD79lMTQSqA0Q=
Subject key identifier: 9D:89:ED:CF:E5:25:77:88:84:75:EC:42:D4:26:1C:3F:8E:FA:D0:F4
Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Certificate serial: 019D2D3D8585FDE1962D4271C0DFE2361D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
Manifest number: 17B5
Signing time: Fri 27 Mar 2026 03:01:39 +0000
Manifest this update: Fri 27 Mar 2026 03:01:39 +0000
Manifest next update: Sat 28 Mar 2026 03:01:39 +0000
Files and hashes: 1: JarLaEzkDzbmZJJ38af3qQLqeXM.roa (hash: PZ9i3KgsocU0Ak3wOk/fU4TiIXG7bFd+0z1g3xOW5fo=)
2: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: +Iqwt+HCi7QCU03f6ECdxA70W8Qp5Z9XvMpY+20AHd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3d:85:85:fd:e1:96:2d:42:71:c0:df:e2:36:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a
Validity
Not Before: Mar 27 03:01:39 2026 GMT
Not After : Mar 28 03:01:39 2026 GMT
Subject: CN=9d89edcfe52577888475ec42d4261c3f8efad0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:93:0b:a6:e1:c8:79:81:10:ef:1d:e2:e0:
d2:76:ec:3e:bb:ec:ee:18:bf:52:d2:33:23:ef:c5:
23:05:32:a5:b2:b9:68:59:e7:d3:52:a8:e7:24:2c:
ec:36:0d:eb:68:19:89:66:30:f0:fc:a1:22:16:0e:
01:04:ee:27:9d:af:5e:da:9e:b8:6a:1f:07:63:a0:
7e:4b:4a:f4:5d:94:e9:21:96:ab:10:57:0f:8b:a3:
dd:fe:49:40:f9:39:3e:8d:40:32:81:f8:c9:e2:9a:
3d:b8:a0:f7:a3:a6:c2:f6:9c:ff:eb:11:6b:16:cd:
c4:df:dd:5c:61:1e:fa:60:64:0a:64:b2:3c:e3:f5:
5b:c6:e2:6b:c5:e3:fa:3a:ea:b2:f5:e6:b7:80:6b:
50:4b:d2:39:6d:d3:6c:62:3d:dd:c7:76:8d:01:e9:
90:75:00:09:5b:58:1c:89:64:da:06:77:40:d0:22:
81:52:8c:e8:62:15:7a:79:c5:7b:2a:ca:ad:21:22:
d3:04:b7:13:cc:74:3a:58:a5:e9:89:b1:39:22:dd:
db:f0:55:08:66:c8:0c:f3:96:68:db:21:99:c4:10:
ac:da:a4:09:33:91:bf:a6:85:fc:91:27:ed:a7:83:
51:1a:22:72:9f:c9:6e:eb:ba:6d:eb:1d:18:59:c4:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:89:ED:CF:E5:25:77:88:84:75:EC:42:D4:26:1C:3F:8E:FA:D0:F4
X509v3 Authority Key Identifier:
keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:eb:a1:c1:1a:ef:96:29:ca:20:84:2f:fa:9b:e6:60:6c:37:
ed:71:9d:aa:6a:46:f9:d8:e8:67:18:3b:d4:5b:9b:02:1d:0e:
09:5b:c7:e5:a6:eb:24:9a:47:ed:9a:97:26:41:a2:45:bb:40:
70:0f:ff:08:55:29:bc:80:ee:92:e1:de:18:68:7f:64:c1:37:
4b:0a:96:e2:7b:d4:0e:dc:b9:86:d5:a9:59:14:05:c7:a4:d1:
57:26:73:52:b3:82:60:3e:22:22:6e:dc:ea:64:6d:a9:1d:b2:
06:68:b6:75:97:53:60:d1:a6:ff:ef:56:1c:36:a0:1b:0d:ab:
e7:df:88:60:53:a7:25:a7:89:5a:a1:c4:c5:8e:ef:a0:b0:1d:
e2:3f:7e:09:cb:bb:75:f5:7e:1c:99:2a:90:8b:ad:eb:60:ec:
fd:0a:b1:5d:6f:d4:85:17:38:67:b8:df:f6:7f:f4:bc:8d:99:
0f:55:ab:fd:d0:fc:30:d0:4f:1e:96:50:53:b8:f6:24:15:db:
37:2e:14:68:53:7b:7f:7b:8f:7d:64:59:8a:3c:7d:14:49:7f:
cd:06:79:cc:d9:3c:4a:10:4e:1e:4b:e1:47:0c:3d:95:94:73:
f4:cf:41:96:9c:fb:b6:a2:41:e1:d4:53:4d:f5:ba:26:b4:05:
9e:4f:9b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:30:48 2026 by rpki-client