Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: ghoRh1zzMUJS5c98R3mFeYj5CaQsJ7P0GOOa0CpAKaM=
Subject key identifier: 1B:BB:D0:1A:9C:C1:08:CA:D0:8E:4A:30:28:0D:92:57:FA:03:3A:C4
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 019D2A3B8B59110F34FF43E7A9991AC216AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 151B
Signing time: Thu 26 Mar 2026 13:00:38 +0000
Manifest this update: Thu 26 Mar 2026 13:00:38 +0000
Manifest next update: Fri 27 Mar 2026 13:00:38 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: v3ib+afLwI6rOYfBylw1EUg+RaTt3eAyr2qQCH5ngDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:8b:59:11:0f:34:ff:43:e7:a9:99:1a:c2:16:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Mar 26 13:00:38 2026 GMT
Not After : Mar 27 13:00:38 2026 GMT
Subject: CN=1bbbd01a9cc108cad08e4a30280d9257fa033ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:92:41:ef:35:8c:8d:10:19:8a:cd:e3:7f:
ce:78:65:b6:72:1c:15:1b:54:11:86:f6:0c:a8:27:
36:01:72:c0:19:56:04:89:3a:68:20:49:89:c5:6f:
c9:b5:07:84:34:60:1e:15:6d:47:a4:1b:b8:6b:cf:
a0:a4:e8:b2:3f:8c:5a:08:e6:95:87:68:4c:bc:57:
2b:cb:77:8f:f1:4a:99:40:9c:e5:3b:df:15:67:cb:
31:d6:c9:ec:41:d8:8a:ba:98:1d:11:a5:48:6f:66:
fd:17:42:c3:be:2a:bd:61:bb:cd:16:dc:0c:11:65:
59:21:98:d2:34:48:e0:7f:2d:aa:94:ce:79:a7:14:
38:a7:87:7f:c0:9b:c4:e4:25:86:e5:1b:d5:1a:41:
90:ca:0c:46:45:62:d1:ea:a6:6b:2e:df:e6:ac:92:
80:24:5a:f6:25:48:bb:4a:e6:31:bd:56:95:87:03:
23:fd:ba:e8:85:53:a3:47:06:f5:fc:a2:56:60:55:
69:1a:ba:8b:b4:12:c4:da:1d:f8:f5:8a:6b:50:eb:
c2:93:f8:8e:df:87:7a:24:90:28:c1:0c:13:c3:3a:
fe:b0:2c:fb:f3:02:e8:4e:ac:6c:3a:02:a7:f7:30:
85:7a:d5:fb:21:26:a8:0f:44:de:00:2f:d3:2e:79:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BB:D0:1A:9C:C1:08:CA:D0:8E:4A:30:28:0D:92:57:FA:03:3A:C4
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d6:5f:ef:2d:c6:06:be:44:f1:51:58:35:42:2a:c2:1b:95:
c8:cf:d8:c8:b5:78:aa:73:10:53:62:4c:1c:a0:d6:ff:c7:d8:
d1:a3:e7:ae:f1:cf:8c:53:28:a2:01:77:44:20:f2:0e:ca:4b:
5b:d1:19:c5:dd:2b:eb:7d:e0:95:5d:f0:2c:4a:c3:bc:c4:1f:
d8:b5:48:1f:07:4f:a8:4d:84:cf:3f:87:c0:64:88:0a:b1:55:
f0:fa:00:5c:30:68:a7:7d:71:1b:7c:2b:c3:19:b7:a0:8a:e8:
25:34:17:25:04:b3:12:b6:ea:e9:53:df:aa:44:51:7f:56:92:
c3:fb:f6:8e:08:dc:2a:81:e2:84:b7:94:0e:67:e0:19:c8:03:
ce:72:64:56:ea:27:a1:ed:b6:66:09:f2:0b:7b:b8:ff:57:7a:
55:f2:ec:54:d6:83:f4:92:6e:01:3e:a6:26:ba:8a:55:c1:38:
8b:c8:37:4e:df:38:e9:72:b2:98:f0:c5:b9:30:90:bc:18:dd:
76:ea:bb:ca:ba:2f:7c:10:66:bd:8f:07:45:8f:33:f5:0b:69:
4f:42:c8:f9:66:95:1c:12:d1:c7:bb:7f:5e:fe:f5:cb:fc:67:
94:a6:ef:dc:ca:d6:99:75:e5:ab:ed:5d:15:27:2a:b4:3d:53:
b6:74:7d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:09 2026 by rpki-client