Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: eED9dqdli0Hj9c1dLK+2bPEkwMOUU7pCcS8Z5dc4oeQ=
Subject key identifier: 2C:EC:F2:D0:6D:76:27:21:AB:A6:34:54:58:AF:37:08:2A:BF:20:68
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 01A10324AA07FF0B14B091F9873391E1264F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 1719
Signing time: Sat 03 Oct 2026 19:01:36 +0000
Manifest this update: Sat 03 Oct 2026 19:01:36 +0000
Manifest next update: Sun 04 Oct 2026 19:01:36 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: mFwTqZ2vQSjojEIm2KAlWYLy4bRmXbrt0kh8oSLO2us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:aa:07:ff:0b:14:b0:91:f9:87:33:91:e1:26:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Oct 3 19:01:36 2026 GMT
Not After : Oct 4 19:01:36 2026 GMT
Subject: CN=2cecf2d06d762721aba6345458af37082abf2068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:f0:f7:c9:70:c5:7e:e4:a8:e2:ff:fd:4b:
35:1c:1d:fa:1e:ba:89:4b:ab:de:f8:c5:db:1e:12:
53:1b:d8:c9:73:38:d2:bb:50:54:f6:d5:41:a8:ed:
23:80:ec:aa:29:f4:c2:9d:b1:ab:82:73:7a:65:1a:
b6:11:29:2a:b4:e2:a4:94:26:f2:af:f2:23:c1:c8:
b3:ae:a1:bd:e2:1a:f4:60:5a:d2:79:af:2f:7d:73:
4f:a7:f5:6d:a4:e4:7e:26:d2:4d:db:b9:ff:42:29:
2c:54:0a:e0:89:51:9d:c3:ed:71:c3:f9:aa:2c:46:
1f:8c:c4:ea:9b:7a:20:5c:44:47:3a:64:c4:9a:cb:
04:8a:a1:5f:c8:ad:d3:5d:70:dc:59:2c:01:a0:2c:
39:2c:c6:31:a0:e0:9a:c7:25:3d:1b:63:ca:d0:8e:
d5:a4:f4:0f:e6:22:ca:d5:27:60:ac:99:ff:ec:83:
b1:33:56:4c:53:6a:c4:12:e9:41:5c:7d:ee:50:7e:
ad:b9:b0:06:74:66:e5:94:a4:cd:1d:59:5c:9a:cf:
f0:0b:70:12:a8:c5:03:06:9e:be:ac:7e:70:6c:ba:
5b:52:10:dc:4c:af:b4:16:d6:66:bd:22:97:1b:ac:
26:67:da:8f:c0:03:c3:b8:8f:3f:0d:32:f1:ea:09:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:F2:D0:6D:76:27:21:AB:A6:34:54:58:AF:37:08:2A:BF:20:68
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e9:71:47:60:b3:60:50:33:aa:73:cf:02:72:e1:bc:88:fc:
3a:d2:c0:26:90:a5:62:c8:87:ff:94:71:14:2c:f7:cd:f4:31:
6f:4f:aa:10:3d:5a:1c:9b:b5:ba:b2:37:72:cb:13:97:f5:8d:
29:b0:08:eb:5d:83:47:05:69:c9:fc:2b:ca:96:6a:39:98:7c:
ca:ef:6e:54:69:8e:ff:d2:cd:87:16:4c:43:66:1d:00:ca:1e:
a3:9f:29:71:3e:8f:71:53:cb:c7:60:0a:f6:0c:1b:7b:d9:eb:
59:86:30:95:f6:48:2c:19:34:6e:77:f0:e0:a3:6a:8a:44:f4:
3f:e6:40:a1:67:1c:fa:15:27:d3:52:db:38:c8:6c:da:45:ff:
ce:09:3d:a7:c5:03:00:d4:9c:75:63:82:55:e7:9b:88:67:41:
91:68:d0:b6:fc:07:be:3e:6b:c1:cb:ea:8d:ce:68:af:12:e8:
8c:cc:d9:25:83:91:c7:1d:fe:03:cc:28:9c:1f:de:8e:08:b9:
b5:b7:4e:25:8a:a7:de:3e:65:c8:00:43:65:2e:7c:1a:80:60:
7a:56:78:7e:f7:95:34:2c:04:93:13:7f:a2:c0:25:e7:b6:4f:
33:d4:6c:aa:b8:51:c8:89:79:04:79:73:8a:46:b4:26:41:a9:
f2:7f:48:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:19:31 2026 by rpki-client