Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
File: OvT97X4Qu-r0tDALBAPwzsJSyV4.mft (raw, json)
Hash identifier: EvjRzHC940w5YcMq0uRdz+BHT8WewOYQW0WFawxnhV4=
Subject key identifier: 6C:95:19:9B:D3:57:50:63:8C:39:9F:25:B3:CA:CC:B9:E3:31:DF:BE
Authority key identifier: 3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
Certificate issuer: /CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Certificate serial: 01A0D3EF8BFBFD6C3FE3170985F3656F8ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
Manifest number: 8D
Signing time: Thu 24 Sep 2026 15:01:26 +0000
Manifest this update: Thu 24 Sep 2026 15:01:26 +0000
Manifest next update: Fri 25 Sep 2026 15:01:26 +0000
Files and hashes: 1: 8fT9pmNi0IQqPN8nu263PPhOOjg.roa (hash: Ujw8ZbOAWSYdEG4uqqRQEENNRaNYjONTO1BAYHKWs+c=)
2: OvT97X4Qu-r0tDALBAPwzsJSyV4.crl (hash: 081cSfJ7S/4QmzwSg+Bbm5FO5plAC4gJoVU6g/1HWFE=)
3: df7iaJQLWuMKkjAOiXAC6Z4nko8.roa (hash: C/7lssJNPjMIGGjDfXe7RzVQ6k3TBnKs7T8bCHpVh1s=)
4: sFOU4J6G7f8bb8tQb6zHbVorZC0.roa (hash: rg6UFAng9V//tNkBw2WXQqdjewrPo6dIE9fDaq+wzM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:8b:fb:fd:6c:3f:e3:17:09:85:f3:65:6f:8a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Validity
Not Before: Sep 24 15:01:26 2026 GMT
Not After : Sep 25 15:01:26 2026 GMT
Subject: CN=6c95199bd35750638c399f25b3caccb9e331dfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:d6:58:aa:59:d1:32:2d:9f:b7:da:af:2c:
af:d9:82:3b:e5:ab:d4:b3:26:8c:24:ae:a2:dd:62:
e4:e0:ed:30:27:0c:b6:24:c3:cb:c1:f0:11:ea:02:
03:36:25:aa:0b:7d:4e:77:e2:6e:7d:19:07:7f:8a:
8b:4f:cc:a4:5f:59:4d:e7:fa:80:ef:f1:d8:43:18:
50:a7:61:70:12:14:67:02:ee:71:c5:8b:bd:b7:ca:
12:a2:fc:9b:2f:9d:5b:2d:92:09:30:d3:06:c9:c0:
a9:60:f7:2e:38:9d:a7:33:f0:05:b9:cf:2a:4a:41:
34:97:ec:9a:9e:6c:84:ec:15:1b:1f:76:f5:42:60:
d4:44:df:92:f9:e3:2f:f2:4f:dc:ad:3a:c8:7a:f3:
5a:6d:c1:2f:44:8b:c8:3c:8f:92:f1:b6:ce:40:23:
f6:8d:ed:1e:3e:42:c5:cd:c9:73:d7:50:a5:e7:40:
18:9c:7e:88:27:f4:f4:e8:33:28:60:03:4f:ca:ef:
c0:b6:71:48:5d:63:49:66:9d:bc:ca:d9:ad:f9:44:
f4:af:f0:24:7f:3f:44:ff:f7:ca:1d:cc:63:2e:76:
5e:83:e6:e0:b2:ea:19:45:71:5d:e1:8a:da:56:3c:
22:6a:b1:45:3f:f3:b2:b7:70:e2:2d:2c:a5:fc:46:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:95:19:9B:D3:57:50:63:8C:39:9F:25:B3:CA:CC:B9:E3:31:DF:BE
X509v3 Authority Key Identifier:
keyid:3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5d:cb:8f:dd:fa:ac:8d:a4:9a:2c:d7:39:02:7c:72:b9:64:
b6:2b:ad:a4:a6:80:a0:b8:5c:6a:00:28:f8:f7:b2:88:de:4f:
0e:c6:1e:af:db:2a:7c:aa:6a:ec:ba:15:07:9a:41:5a:da:83:
a7:a9:d3:4c:08:8e:f7:7f:4b:5b:a4:22:2c:f9:14:da:16:ea:
8c:75:74:9e:84:1f:64:5d:26:24:d9:2a:42:12:d7:84:86:b3:
94:3b:da:bd:83:f6:84:bd:8e:3a:02:f1:50:2c:83:c6:21:62:
ea:d4:67:91:ca:aa:b8:d6:90:9b:e0:c5:cb:3f:7b:e8:8d:65:
c7:c8:60:a9:c3:5b:33:62:93:2f:3b:43:df:2a:94:ad:ce:f5:
b9:6f:c3:39:c2:98:dc:0a:ac:cd:2d:83:93:cf:0f:21:8c:88:
91:3d:2f:c0:38:da:df:ce:1b:60:ce:3f:11:90:91:71:bd:c0:
8a:df:15:0d:1b:10:fe:c5:55:ae:ad:26:ef:6c:fa:3a:ec:c5:
eb:bf:3c:8c:8b:52:fc:d8:69:c3:57:ad:42:7d:bd:7c:ae:73:
84:16:d4:87:ec:0e:48:ef:0c:2b:aa:2a:26:c4:0a:24:61:8b:
5b:2b:1b:2d:94:2f:5c:74:be:9a:7c:4b:5b:9a:58:8f:02:10:
5d:64:5a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:01:36 2026 by rpki-client