Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json)
Hash identifier: T6YQSA5idZl8TUeAXmaiwODSPRSOfMWgnfAbPfWLdMk=
Subject key identifier: 4C:5A:F7:40:2D:6E:86:1F:4F:5E:DB:21:61:27:9D:71:6C:79:15:D3
Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Certificate serial: 019E1F7E700F30C8DEF38EF4B20F7A553050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
Manifest number: 159A
Signing time: Wed 13 May 2026 04:00:40 +0000
Manifest this update: Wed 13 May 2026 04:00:40 +0000
Manifest next update: Thu 14 May 2026 04:00:40 +0000
Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=)
2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: ynBBxZNUVtNWg0LSfG5qOuloK9Ivvj1K/MFe+ANt53c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:70:0f:30:c8:de:f3:8e:f4:b2:0f:7a:55:30:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93
Validity
Not Before: May 13 04:00:40 2026 GMT
Not After : May 14 04:00:40 2026 GMT
Subject: CN=4c5af7402d6e861f4f5edb2161279d716c7915d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:15:ba:16:f2:b7:be:bb:ca:af:7f:6f:42:
fc:d4:5b:f7:3e:54:6e:ad:a0:f1:67:4a:65:32:04:
48:91:39:a0:e5:d5:35:4b:16:d7:04:95:d3:12:96:
c0:ab:46:d5:90:68:42:48:76:46:a3:c8:d8:e3:76:
42:9d:42:f8:ce:4a:85:24:8d:e6:0a:af:a1:9d:a8:
d8:42:02:ab:17:88:4f:a7:a6:32:90:dc:da:bc:4b:
25:40:01:e2:7f:2f:14:f7:ec:5b:ff:e2:31:aa:cd:
e6:16:77:9e:59:e3:a2:97:27:c0:4c:a7:f7:7c:4e:
bc:ca:3f:0a:f3:c1:d8:54:a6:19:5c:74:a3:11:e0:
3b:e8:ef:8e:41:0f:25:c4:49:24:8a:58:f0:83:9b:
8d:81:f4:9c:39:f5:55:32:d1:71:0d:e9:05:12:70:
b7:35:41:b3:a0:1c:63:eb:7b:97:7f:52:3b:50:a9:
00:b6:41:57:91:d9:b1:9d:d1:98:69:a3:91:72:8a:
57:18:ca:d0:87:05:f1:6b:04:ef:65:58:8b:f3:40:
cd:e7:3a:6c:a0:ff:03:7a:4a:c9:c1:2e:d4:fd:a3:
4b:c2:c0:14:83:c0:b3:cc:8f:9b:e4:3b:2a:d4:8c:
6d:7a:4f:3b:f1:53:9f:86:69:62:0b:bf:c1:76:a7:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5A:F7:40:2D:6E:86:1F:4F:5E:DB:21:61:27:9D:71:6C:79:15:D3
X509v3 Authority Key Identifier:
keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3c:a4:ce:86:b6:b0:e0:9b:9b:d6:dd:c2:55:6b:47:1b:fd:
5e:2a:d7:97:63:07:7c:51:54:be:6b:de:49:aa:fc:d7:0d:e4:
c1:cc:db:76:85:d8:dd:ab:ad:31:37:96:01:04:12:83:f4:17:
8b:95:d4:8e:6e:d4:b2:40:04:45:81:76:fd:54:b4:6e:cf:e1:
77:ec:e3:02:f9:ab:3b:72:8b:e8:e5:ca:f7:a5:bf:c2:c2:a1:
ce:d1:86:62:a3:82:6e:31:c8:d9:e5:34:45:52:a2:0e:56:0a:
1c:fc:c8:eb:f1:f6:ca:03:8a:a1:e6:d4:ff:f1:d7:ae:61:c2:
20:1d:d0:e7:73:6a:23:f6:40:ec:c9:60:39:17:d0:41:b7:5f:
5d:92:69:82:27:63:d0:0b:1a:d9:60:71:1d:6f:2c:91:0c:f5:
ba:f4:ed:0f:49:e9:a4:3a:e9:c3:6f:46:09:c9:83:81:0d:86:
23:ff:83:7d:45:b9:54:a3:e0:91:61:b4:d1:16:0f:84:8a:26:
29:69:cb:0b:35:98:dc:5a:57:03:bd:e9:f7:76:a2:dd:a5:d7:
d5:cd:ce:32:75:94:67:69:d9:32:7a:ff:ec:ab:f6:42:e7:17:
c4:27:33:8a:e4:c5:61:04:2c:c7:c9:27:12:16:ab:3a:df:f3:
b9:1b:62:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:36:46 2026 by rpki-client