Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: 6/Jup6GbbbGowVjaOdLoRdcZLI5e95CqCjWMxJfsxtk=
Subject key identifier: 4E:A8:2C:A2:47:57:0B:07:42:73:38:8B:A5:63:B6:AC:A2:8C:1A:F5
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 019D329A7E738810F1749BB23281D8CCB3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 04:01:18 +0000
Manifest this update: Sat 28 Mar 2026 04:01:18 +0000
Manifest next update: Sun 29 Mar 2026 04:01:18 +0000
Files and hashes: 1: opVaKaCUN_xXCzgTvM_wFZzwduE.roa (hash: bSZ38fbqUhIudVwjunvgxXpYJzvqyZl9nmOIMsXOc5U=)
2: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: GkIpv53VzTv6EsPstmhvbL4KLroLbXf5Oa4ufZhPpUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:7e:73:88:10:f1:74:9b:b2:32:81:d8:cc:b3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Mar 28 04:01:18 2026 GMT
Not After : Mar 29 04:01:18 2026 GMT
Subject: CN=4ea82ca247570b074273388ba563b6aca28c1af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:50:df:a6:61:e9:fc:0c:4c:8f:e6:da:93:
40:e8:39:0d:fd:8b:5f:24:6d:8a:35:8e:ab:ef:e1:
94:62:24:64:29:8e:ea:aa:bb:46:5a:9a:24:f3:91:
39:3f:6b:bc:a3:90:f5:69:a9:4d:72:1f:bc:a8:95:
b4:56:37:77:5a:7c:db:e2:57:9e:d6:ee:57:0c:b3:
99:9c:94:11:70:ca:38:e7:0a:c5:5c:80:18:83:26:
4c:98:45:6d:ae:90:28:2f:55:9a:14:9d:a1:39:4a:
7e:b4:fc:e2:b2:c7:95:05:46:c6:33:e9:43:19:1b:
22:93:e5:0b:d2:57:fa:08:28:87:9a:9c:36:26:3b:
67:b9:30:67:79:d6:08:bb:b3:c5:21:16:ea:a9:b9:
22:44:7e:87:da:59:57:7e:7e:0b:16:a9:82:98:79:
75:8d:33:fe:2c:74:c2:e7:2b:4a:66:19:cb:f1:69:
7f:59:05:72:51:cb:fb:f1:6d:51:94:5b:84:42:18:
76:3a:4b:99:8b:1f:a7:f5:b6:04:76:6f:a7:c6:bc:
8e:80:71:3d:e4:35:a7:89:d2:75:50:71:f5:e3:70:
4c:a6:2f:c6:b0:25:af:c2:2a:42:98:7c:b6:8d:9b:
3f:e5:7d:f1:5e:bd:33:23:13:39:cd:f3:0e:6a:45:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A8:2C:A2:47:57:0B:07:42:73:38:8B:A5:63:B6:AC:A2:8C:1A:F5
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:af:51:98:0d:93:48:7f:a5:20:0b:0c:9e:63:11:69:de:5b:
89:fa:cb:af:54:dd:c9:5d:2c:2c:2a:8a:23:be:eb:0d:43:2a:
fd:dd:76:3a:f9:4a:56:95:19:35:66:55:91:4c:15:14:9d:22:
79:bc:a2:04:13:59:be:2a:6d:78:d6:82:4b:8c:cb:0d:97:01:
c7:95:3f:b4:d4:25:f4:da:e7:49:0b:5d:9f:6d:0e:a4:2a:b4:
01:38:9d:a9:fb:d4:d4:f2:1f:69:0c:13:78:56:df:cb:ee:92:
2e:20:e1:46:17:ce:a5:dc:77:dc:77:4e:15:85:c3:0c:9c:7f:
68:df:e6:b7:9c:9e:96:3d:21:ca:81:6e:66:fe:94:dd:7c:74:
79:d2:a8:d9:e9:9b:ba:cb:7c:41:14:cb:b9:53:34:f1:51:6f:
58:ef:b7:1d:3c:2b:d3:70:9a:44:2d:69:20:aa:a3:f2:b6:5e:
7f:e6:3b:d0:71:d9:4a:7a:05:5e:e7:cf:33:6b:2e:4a:39:48:
d0:42:51:c8:85:4e:74:79:c5:cd:7a:54:9e:17:72:47:e1:0e:
9c:e9:49:0f:3b:d6:c2:4e:fd:f3:6c:c5:f2:7a:3f:85:8d:93:
32:21:4e:6c:97:24:3b:e8:b7:98:1b:de:c7:d2:13:ec:82:d2:
57:98:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:02:24 2026 by rpki-client