Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: rL1rFamOhIB23JGVpDWQDedveVBXtFZOXi4XD7PAr2s=
Subject key identifier: 0D:FA:24:6E:D0:C9:E7:56:77:E9:A5:79:B7:81:4A:6A:79:B1:34:FE
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 01A12CFC04DFD9D61A1154F4C9B3F41DFE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 1AA7
Signing time: Sun 11 Oct 2026 22:01:16 +0000
Manifest this update: Sun 11 Oct 2026 22:01:16 +0000
Manifest next update: Mon 12 Oct 2026 22:01:16 +0000
Files and hashes: 1: 6KNhKGGdrXFLjZ1XPyUgJ4yIGIg.roa (hash: 7mtjseH+PgcRZVG/LL0SgW5XoQ6qCLuG7yQaTmngC74=)
2: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: wF8Ia5YUrPMOAnxokFHtvZOFg/pfCxuExtY4JxHhrt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fc:04:df:d9:d6:1a:11:54:f4:c9:b3:f4:1d:fe:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Oct 11 22:01:16 2026 GMT
Not After : Oct 12 22:01:16 2026 GMT
Subject: CN=0dfa246ed0c9e75677e9a579b7814a6a79b134fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:66:18:d8:33:d3:4a:42:e2:45:40:01:20:
a5:6e:5a:21:68:4d:02:ef:96:98:ed:75:4a:70:59:
40:8f:14:c3:9a:bc:88:1b:50:2f:a3:cc:fb:9d:6c:
4e:c6:5c:45:0a:e7:df:23:18:d5:1b:63:a8:37:dd:
26:91:3c:39:23:54:3a:2b:90:a8:30:90:0d:f9:5e:
12:7e:21:08:9e:b8:7c:da:08:cb:02:6f:53:a0:9b:
27:17:87:48:1d:7b:25:e1:58:ea:12:5e:35:96:0f:
26:cb:55:4f:e4:a0:97:b5:83:91:1b:8a:39:8a:25:
a9:b8:31:0d:0d:bb:75:ab:90:cf:c1:46:46:59:84:
a1:5f:99:ef:5e:8c:f5:82:a8:97:af:63:7b:2c:1e:
a2:21:94:f9:12:95:de:64:b4:4d:6c:f5:ed:23:fd:
23:a0:16:5d:41:b2:60:a8:7b:01:28:bf:a1:76:e4:
b2:f1:f1:42:6e:e3:d3:05:1e:fc:5c:57:2c:9e:00:
95:01:f3:fd:53:d3:fc:ea:3b:11:8d:d5:02:a1:ca:
c7:c9:c0:10:1c:9d:5d:1d:a3:16:6d:45:55:8d:33:
79:99:52:19:11:2e:cd:2c:79:07:51:b1:97:34:b0:
19:76:dd:a8:28:df:ea:d2:21:9a:1c:02:e4:a4:f4:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FA:24:6E:D0:C9:E7:56:77:E9:A5:79:B7:81:4A:6A:79:B1:34:FE
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:35:b5:ff:62:f9:b2:99:26:4f:11:26:f6:68:69:c7:f0:e3:
d4:9b:3c:e4:2f:3a:05:38:0b:b5:2d:6f:5b:d6:20:5e:59:cb:
ed:70:f2:0d:3a:4d:ef:76:7b:7c:a4:af:11:9d:63:16:60:66:
6d:87:13:42:02:94:47:6f:e3:28:a4:ee:b2:57:06:f4:66:ec:
ce:d5:0c:01:45:15:d1:13:8e:a2:1a:2b:7c:e4:cb:73:68:9f:
2d:22:c7:0a:90:0b:87:11:ed:3e:b9:14:7f:e9:d4:a3:ee:71:
ff:81:cd:4b:39:16:1c:ed:dc:66:a1:3b:c5:b9:bb:72:21:9b:
f7:e7:d6:90:6c:3c:0e:a6:7f:c4:4a:6e:b3:50:21:fa:db:2d:
b4:71:3d:34:d9:fe:59:d6:2b:e4:49:6a:14:fb:da:94:22:49:
50:92:88:74:65:06:58:99:b9:59:be:36:58:7d:89:c0:ce:a4:
44:33:ba:1c:75:74:cb:e7:a6:46:96:c6:2c:d0:70:df:eb:41:
e4:e4:1f:9b:e3:56:f9:78:3c:c0:81:e5:e3:6c:81:cb:de:41:
51:05:2b:c6:2c:b7:01:51:2a:90:57:de:b9:6d:12:6d:51:7e:
c3:eb:6a:f1:c0:b9:61:0b:00:a8:b0:10:6a:4e:fc:ff:dd:e0:
c9:4c:4d:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEs/ATf2dYaEVT0ybP0Hf4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZmFjNzVmMzkwZTg4MDUyODMzN2RkMGJkY2RjNzc5MzRi
OGRmM2MwHhcNMjYxMDExMjIwMTE2WhcNMjYxMDEyMjIwMTE2WjAzMTEwLwYDVQQD
EygwZGZhMjQ2ZWQwYzllNzU2NzdlOWE1NzliNzgxNGE2YTc5YjEzNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiZmGNgz00pC4kVAASClblohaE0C
75aY7XVKcFlAjxTDmryIG1Avo8z7nWxOxlxFCuffIxjVG2OoN90mkTw5I1Q6K5Co
MJAN+V4SfiEInrh82gjLAm9ToJsnF4dIHXsl4VjqEl41lg8my1VP5KCXtYORG4o5
iiWpuDENDbt1q5DPwUZGWYShX5nvXoz1gqiXr2N7LB6iIZT5EpXeZLRNbPXtI/0j
oBZdQbJgqHsBKL+hduSy8fFCbuPTBR78XFcsngCVAfP9U9P86jsRjdUCocrHycAQ
HJ1dHaMWbUVVjTN5mVIZES7NLHkHUbGXNLAZdt2oKN/q0iGaHALkpPR64QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA36JG7QyedWd+mlebeBSmp5sTT+MB8GA1UdIwQY
MBaAFKL6x185DogFKDN90L3Nx3k0uN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYt
NzYyMjU5YWI5NTAwLzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYtNzYyMjU5YWI5NTAw
LzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDW1/2L5
spkmTxEm9mhpx/Dj1Js85C86BTgLtS1vW9YgXlnL7XDyDTpN73Z7fKSvEZ1jFmBm
bYcTQgKUR2/jKKTuslcG9GbsztUMAUUV0ROOohorfOTLc2ifLSLHCpALhxHtPrkU
f+nUo+5x/4HNSzkWHO3cZqE7xbm7ciGb9+fWkGw8DqZ/xEpus1Ah+tsttHE9NNn+
WdYr5ElqFPvalCJJUJKIdGUGWJm5Wb42WH2JwM6kRDO6HHV0y+emRpbGLNBw3+tB
5OQfm+NW+Xg8wIHl42yBy95BUQUrxiy3AVEqkFfeuW0SbVF+w+tq8cC5YQsAqLAQ
ak78/93gyUxN5w==
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:13:16 2026 by rpki-client