Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
File: OVUKm3Usc5f29p6qaoDwm6f32Co.mft (raw, json)
Hash identifier: zGYZWuBldJOIs/Bxc75TJM1AxU0Vb2n+pV/iHZtCTs4=
Subject key identifier: FF:91:BE:A8:57:BF:11:77:25:01:9F:F3:D4:70:9C:F2:01:D9:15:7C
Authority key identifier: 39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
Certificate issuer: /CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Certificate serial: 019D333EC07A19B6E0BFF2BF59A05BEE4F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
Manifest number: 0289
Signing time: Sat 28 Mar 2026 07:00:43 +0000
Manifest this update: Sat 28 Mar 2026 07:00:43 +0000
Manifest next update: Sun 29 Mar 2026 07:00:43 +0000
Files and hashes: 1: 8YWQcFBY2JGN7Y9LDudwmWiUUd0.roa (hash: Y71RgVM51ZBYNWL+Un1weGs/ne1SsVfCUFi/XmlLWUg=)
2: OVUKm3Usc5f29p6qaoDwm6f32Co.crl (hash: Czzght6FUGPpjp2YTP3ZAyzOsK2O4Tl1m95ukGFWIN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:c0:7a:19:b6:e0:bf:f2:bf:59:a0:5b:ee:4f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39550a9b752c7397f6f69eaa6a80f09ba7f7d82a
Validity
Not Before: Mar 28 07:00:43 2026 GMT
Not After : Mar 29 07:00:43 2026 GMT
Subject: CN=ff91bea857bf117725019ff3d4709cf201d9157c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:d4:1a:b1:42:f4:0c:dd:f6:d9:57:06:d3:
7e:e9:90:b3:89:f0:35:c5:e6:c9:28:e9:98:7c:bd:
87:f4:f5:7a:a8:17:5f:8c:3f:e0:c4:e5:0a:46:64:
10:c0:39:e3:5b:d6:7c:2a:ee:af:c4:b5:55:1b:d7:
03:40:fd:54:e6:6f:e5:a7:a5:05:4e:6d:a6:74:42:
71:b4:70:cf:3d:6c:89:0c:f8:6b:f5:2f:41:9c:f3:
ed:80:a1:11:08:c4:61:72:e1:50:c3:76:cf:f0:35:
90:c4:2c:57:e0:e8:0d:f1:3e:c5:e9:be:b0:2a:b3:
f3:4e:ee:49:b5:11:73:8d:42:3a:68:95:1a:c6:34:
77:9f:8d:72:c3:5d:18:9f:6b:7e:a9:0b:cd:eb:2a:
4d:f9:5f:79:2d:9c:eb:5e:f6:7f:d2:9a:ca:86:d0:
a3:64:fa:1f:21:a9:1a:d6:5b:88:31:4c:06:d6:75:
e1:99:b6:6c:4b:70:b6:0f:c0:d1:6a:80:c0:ec:e7:
1e:86:d4:ea:7f:f9:03:69:8a:d0:6c:de:21:81:16:
42:fd:a0:8d:01:fb:b1:84:dd:ce:a5:99:30:7b:42:
d3:56:22:5c:a0:1f:34:df:d9:9d:be:b3:5d:ff:23:
86:67:35:5e:8a:0a:0f:e1:6e:23:2a:a6:b2:e3:5e:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:91:BE:A8:57:BF:11:77:25:01:9F:F3:D4:70:9C:F2:01:D9:15:7C
X509v3 Authority Key Identifier:
keyid:39:55:0A:9B:75:2C:73:97:F6:F6:9E:AA:6A:80:F0:9B:A7:F7:D8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVUKm3Usc5f29p6qaoDwm6f32Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1ade0c-9aed-437b-8f18-27f2dca47a2c/1/OVUKm3Usc5f29p6qaoDwm6f32Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:80:a9:cb:8e:24:a5:67:e7:c9:44:12:f2:97:65:b7:6d:96:
6c:7a:07:a0:f1:4e:f5:9b:d6:81:e8:85:e0:68:e1:37:4d:f5:
a6:d6:55:b4:5c:05:72:05:3e:90:75:03:9e:0d:fb:85:b9:9d:
d2:d7:c6:2d:24:ea:fd:c5:7b:84:b6:45:52:60:3f:6e:2c:8c:
3d:24:fe:01:6e:4c:b7:51:25:53:cf:3a:30:47:58:83:f4:d4:
cd:e0:08:d0:85:ce:78:26:86:e2:ca:f4:af:e2:35:03:5d:d6:
2c:9a:7b:33:c8:aa:47:90:90:7b:64:79:58:d8:b0:ca:00:6b:
60:51:9b:ef:05:d4:d6:0c:54:2d:04:72:2f:23:ac:39:7c:f6:
ea:ba:cc:6b:14:8e:e1:22:dc:ed:7b:46:a5:dd:5a:5a:92:1d:
ac:e4:e5:d2:10:ef:6b:79:06:7f:11:86:fa:b7:3d:44:fd:6d:
f7:44:86:20:33:2f:92:1b:8a:94:5f:30:18:cd:3e:0f:2f:ce:
d1:2e:d8:84:0e:4e:d4:a2:57:3d:14:f4:fe:f0:e9:80:cd:4a:
71:74:cc:4e:0d:8f:c8:f9:ed:51:a4:21:f5:e3:c9:49:6c:82:
4d:e2:69:63:d8:db:50:db:55:ec:66:8c:8c:78:e8:a0:99:ce:
29:62:43:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPsB6Gbbgv/K/WaBb7k8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NTUwYTliNzUyYzczOTdmNmY2OWVhYTZhODBmMDliYTdm
N2Q4MmEwHhcNMjYwMzI4MDcwMDQzWhcNMjYwMzI5MDcwMDQzWjAzMTEwLwYDVQQD
EyhmZjkxYmVhODU3YmYxMTc3MjUwMTlmZjNkNDcwOWNmMjAxZDkxNTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0fUGrFC9Azd9tlXBtN+6ZCzifA1
xebJKOmYfL2H9PV6qBdfjD/gxOUKRmQQwDnjW9Z8Ku6vxLVVG9cDQP1U5m/lp6UF
Tm2mdEJxtHDPPWyJDPhr9S9BnPPtgKERCMRhcuFQw3bP8DWQxCxX4OgN8T7F6b6w
KrPzTu5JtRFzjUI6aJUaxjR3n41yw10Yn2t+qQvN6ypN+V95LZzrXvZ/0prKhtCj
ZPofIaka1luIMUwG1nXhmbZsS3C2D8DRaoDA7OcehtTqf/kDaYrQbN4hgRZC/aCN
AfuxhN3OpZkwe0LTViJcoB8039mdvrNd/yOGZzVeigoP4W4jKqay416tlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+RvqhXvxF3JQGf89RwnPIB2RV8MB8GA1UdIwQY
MBaAFDlVCpt1LHOX9vaeqmqA8Jun99gqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1ZVS20zVXNjNWYyOXA2cWFvRHdtNmYzMkNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xYWRlMGMtOWFlZC00MzdiLThmMTgt
MjdmMmRjYTQ3YTJjLzEvT1ZVS20zVXNjNWYyOXA2cWFvRHdtNmYzMkNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xYWRlMGMtOWFlZC00MzdiLThmMTgtMjdmMmRjYTQ3YTJj
LzEvT1ZVS20zVXNjNWYyOXA2cWFvRHdtNmYzMkNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4Cpy44k
pWfnyUQS8pdlt22WbHoHoPFO9ZvWgeiF4GjhN031ptZVtFwFcgU+kHUDng37hbmd
0tfGLSTq/cV7hLZFUmA/biyMPST+AW5Mt1ElU886MEdYg/TUzeAI0IXOeCaG4sr0
r+I1A13WLJp7M8iqR5CQe2R5WNiwygBrYFGb7wXU1gxULQRyLyOsOXz26rrMaxSO
4SLc7XtGpd1aWpIdrOTl0hDva3kGfxGG+rc9RP1t90SGIDMvkhuKlF8wGM0+Dy/O
0S7YhA5O1KJXPRT0/vDpgM1KcXTMTg2PyPntUaQh9ePJSWyCTeJpY9jbUNtV7GaM
jHjooJnOKWJDlQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:09 2026 by rpki-client