
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: bFayS7xpeb5ff+Un0OQJ7Zl870fQjYfT8WXEQBQVhmE=
Subject key identifier: CC:96:71:61:3A:C0:67:D0:D4:FA:28:83:66:5E:A1:79:D7:B0:81:DE
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 019F9247F93A777DA227D9E5990826D53BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 165A
Signing time: Fri 24 Jul 2026 04:00:18 +0000
Manifest this update: Fri 24 Jul 2026 04:00:18 +0000
Manifest next update: Sat 25 Jul 2026 04:00:18 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: BX0gJoAeVhKVZQ7LkewcOwrB3R/n4Cf+iJ8rGiKhNpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:f9:3a:77:7d:a2:27:d9:e5:99:08:26:d5:3b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: Jul 24 04:00:18 2026 GMT
Not After : Jul 25 04:00:18 2026 GMT
Subject: CN=cc9671613ac067d0d4fa2883665ea179d7b081de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:46:db:1c:fb:c2:a5:91:26:50:1e:b7:b1:
0d:7f:36:e0:d7:16:68:88:45:18:ca:e6:34:5d:44:
6c:ce:93:83:92:d8:c6:69:82:49:f5:a5:88:dd:42:
93:3c:db:62:ba:50:b9:6a:ce:f7:f7:0c:60:2f:f8:
e2:63:55:4a:72:05:e7:68:bd:30:a4:db:e3:54:a4:
dd:1d:f6:05:50:da:f7:9d:4e:88:7a:68:65:94:e3:
08:6b:58:59:a4:32:5f:72:a1:44:9b:cd:6c:88:db:
6e:8a:7a:d5:a4:b9:15:a0:c7:ef:82:01:84:ec:2b:
7a:79:2a:a8:31:ee:9d:ab:41:23:86:5d:b0:8a:e6:
7c:b7:f1:0f:7e:87:24:12:c8:2e:62:d9:7a:7e:cd:
01:f1:18:33:98:a7:63:45:a6:e2:1c:56:c8:fe:62:
27:a3:5c:78:76:b8:60:10:5a:da:51:bd:77:68:de:
46:58:c1:6c:61:07:93:46:99:c8:c2:b6:e6:45:e1:
14:86:3c:d0:7d:43:f5:49:21:66:13:a6:1f:21:52:
54:9a:30:be:bf:6d:78:ea:8a:fe:2e:41:f5:07:a0:
62:56:d6:96:0d:ce:6d:4b:17:e3:bd:6d:b4:fd:fc:
54:3c:87:20:dc:33:b0:02:2a:1a:81:52:05:ba:37:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:96:71:61:3A:C0:67:D0:D4:FA:28:83:66:5E:A1:79:D7:B0:81:DE
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:8c:1a:50:79:f2:63:21:e7:5c:89:d7:96:52:fa:8a:80:
6e:6d:d8:db:e7:99:df:37:f4:a0:43:99:ad:3f:1e:de:25:1a:
ba:03:bd:ad:29:f2:01:6b:d9:b1:d2:5f:cd:07:51:52:63:fc:
d6:d6:79:ba:4b:97:7d:10:96:8b:5e:fe:4f:a1:64:46:83:91:
ea:16:89:76:4e:4d:03:78:5b:d2:18:ea:cb:ae:c4:31:ae:56:
41:d0:c1:ae:f3:68:62:aa:45:7e:91:33:a0:80:d5:a8:75:8f:
db:92:9e:60:40:b5:15:e4:68:f7:eb:87:bf:eb:c1:ff:8e:77:
a5:3d:c3:2e:53:79:e1:1b:4a:56:d1:03:8c:9a:fe:86:8b:ce:
fc:f8:1c:6c:03:31:22:47:58:d9:09:ae:81:5e:c5:d8:46:8d:
93:0c:8b:b4:66:43:76:d3:cc:8a:cb:05:98:b6:fa:b0:02:cb:
81:be:26:ad:88:c0:db:8e:85:7f:d4:d2:66:63:1e:4f:db:46:
96:f7:e8:41:97:c0:a6:2d:59:17:a6:f2:7d:1e:a0:ce:88:ae:
5e:24:05:d3:ec:f1:2b:37:58:bc:5b:2f:17:a5:ce:87:f5:cb:
ef:08:09:1f:20:ef:a9:7e:ff:88:2e:0a:4f:fd:7a:ed:8a:79:
0a:fe:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:28:50 2026 by rpki-client