Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: 2FOdwazsI3rROzZup1PVFHqozJIco9PSFI3FgPc+92w=
Subject key identifier: 97:5E:0D:BF:74:32:10:1E:B2:2D:83:7A:D3:05:05:E1:52:AD:A8:DE
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 019E20233B8DDCF55A4E6D835469F3388D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 07:00:40 +0000
Manifest this update: Wed 13 May 2026 07:00:40 +0000
Manifest next update: Thu 14 May 2026 07:00:40 +0000
Files and hashes: 1: opVaKaCUN_xXCzgTvM_wFZzwduE.roa (hash: bSZ38fbqUhIudVwjunvgxXpYJzvqyZl9nmOIMsXOc5U=)
2: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: CqfierEO0cFU+LH7PiOzD8mrA0abK6+wHTDXVidyy9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:3b:8d:dc:f5:5a:4e:6d:83:54:69:f3:38:8d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: May 13 07:00:40 2026 GMT
Not After : May 14 07:00:40 2026 GMT
Subject: CN=975e0dbf7432101eb22d837ad30505e152ada8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:ff:94:0e:aa:15:d2:46:c2:a8:dc:91:d1:
87:b4:c2:56:8d:6e:20:df:d1:59:29:ab:40:44:20:
09:a2:39:67:54:f0:62:59:ae:3f:5c:f6:1f:4c:c3:
8f:25:bd:75:ec:a9:b9:1b:3b:0a:17:27:26:c4:3d:
21:76:64:ef:a0:7b:f5:6a:bd:40:cb:8f:af:78:88:
38:72:fe:2c:26:f8:f2:5f:41:8c:0c:0b:cf:6f:15:
e4:56:c0:02:0d:d8:09:ae:7c:99:46:ce:19:42:f9:
31:ef:11:ea:4d:6d:15:83:98:f7:89:47:af:e9:96:
e5:2c:e6:75:ba:72:f0:3e:1e:5c:1d:45:be:48:a6:
0b:d9:f1:50:6e:3b:ea:1d:45:df:59:21:3d:56:1e:
87:bf:3e:e9:12:cd:38:97:ad:5e:78:b0:32:ff:36:
9f:00:d8:98:c7:da:d9:e6:ca:95:b7:d1:4b:4d:96:
fa:7b:dc:92:47:5a:ee:d3:47:36:78:ed:7f:cf:87:
14:99:62:2b:88:f0:7f:24:7b:28:99:7b:28:59:98:
8a:72:80:22:3b:2d:ba:55:10:61:17:e4:5c:f3:eb:
f8:bd:a6:9e:f2:b2:af:ab:c2:30:a8:2f:0c:9b:d5:
d2:ca:e1:a9:60:fd:84:b9:b6:f5:02:a8:3a:88:44:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:0D:BF:74:32:10:1E:B2:2D:83:7A:D3:05:05:E1:52:AD:A8:DE
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7b:3b:fc:a3:29:08:a9:8c:c5:a4:41:38:62:f2:d5:08:ef:
b3:d7:e2:26:7f:1d:ed:d4:2c:51:8c:25:3c:c1:e7:e3:47:b2:
33:7a:df:6c:5a:27:b5:02:d8:4a:aa:f0:69:e3:c1:fd:c1:56:
94:51:be:ed:f1:21:3b:aa:64:34:34:80:9d:03:48:9a:c9:d0:
6b:bd:e2:fe:88:2b:1f:45:c9:08:db:18:da:2e:ca:c1:1f:05:
0d:cd:c2:5e:34:49:45:4e:02:42:35:98:67:f7:6c:84:36:30:
80:05:8c:14:4e:9f:f0:8f:40:f1:9e:89:b8:ed:a4:13:f4:21:
a0:60:f2:ef:bb:2a:63:ea:a4:3a:6a:79:6d:1f:0c:a0:bc:f1:
11:ef:8d:51:c4:d8:c0:48:93:ca:59:eb:a2:1a:26:74:fa:3c:
93:74:6e:15:c6:14:8e:1e:65:a3:70:74:d3:c1:b6:0d:dd:77:
e7:b9:4e:cf:59:bc:58:a5:4a:6c:42:48:b7:5b:08:85:b2:ff:
dc:db:90:35:b8:78:f2:ca:21:6d:5d:52:25:74:a4:f9:7e:37:
38:94:05:e7:3d:b2:fc:4a:b6:42:b7:07:25:49:bf:07:da:6b:
9a:db:37:56:f1:e6:ef:79:d3:92:ed:4a:4c:61:d3:67:13:84:
97:3c:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:51:21 2026 by rpki-client