Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: c7wea3ajAZsYNi7dTN8zOBw+8l1iE0EQ5H2/XwRaz80=
Subject key identifier: 9D:F3:87:AC:32:58:06:57:77:EE:CC:AD:52:93:27:20:62:C6:F2:87
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 01A0CF36447BE984145D66E328B3728011F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 1666
Signing time: Wed 23 Sep 2026 17:00:35 +0000
Manifest this update: Wed 23 Sep 2026 17:00:35 +0000
Manifest next update: Thu 24 Sep 2026 17:00:35 +0000
Files and hashes: 1: JDP8uo8q3PiGhX8fC6HQLbfWnys.roa (hash: xSPXepbCAbboKAUc/7j/hy2rpJWReo1T0TGkyUPMAyw=)
2: XAicTI9UC61pmPVZdsahFl2lMBY.roa (hash: 1ekmg/ykYoDb9Od3u6BS5GbbaLysf5uiWev0CH3GBwk=)
3: Ygzy2MOAa3dhtIXS0IVznh9BCRY.roa (hash: ZMoxIJcdI7kOjXntSvobViqVU6OETLoYZNju4Am12aA=)
4: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: 2vIuVREUWk9ev7zinr09gLe9R6A85gtomGcmcuEOx1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:44:7b:e9:84:14:5d:66:e3:28:b3:72:80:11:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Sep 23 17:00:35 2026 GMT
Not After : Sep 24 17:00:35 2026 GMT
Subject: CN=9df387ac3258065777eeccad5293272062c6f287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:42:7b:25:f6:d3:af:d3:29:7e:ba:95:09:
bd:7b:e7:4b:0f:a6:28:4f:af:25:7b:4c:94:f5:f0:
f0:95:2a:24:9c:7a:5b:9b:f3:a3:53:c8:dc:83:4c:
d4:59:85:ae:bc:a2:03:b0:50:fc:13:69:14:39:69:
de:ea:8c:f9:1d:95:72:19:ce:22:6c:8e:ec:fc:cc:
5d:91:22:9e:7b:c3:03:21:8f:b6:00:ae:93:47:61:
d8:7b:0e:cf:ec:e9:ff:fc:d8:bf:db:d6:9c:f4:a6:
53:6a:ce:bc:f2:8b:7d:d8:c0:36:7c:9a:36:c4:1a:
0a:26:dd:b9:24:ef:c4:10:28:ef:a1:8f:88:30:ac:
09:fb:42:ee:de:72:d6:bb:00:25:c1:6e:52:c3:28:
3e:67:af:de:bc:52:f9:9f:6e:28:a8:b4:0a:a7:49:
f9:6c:13:37:fd:27:ff:6f:41:6b:1f:6d:2b:d9:5b:
50:8b:a4:d7:1a:77:7a:dd:b1:76:f6:ab:94:b6:32:
2e:8d:6e:08:62:ba:22:4c:45:b4:7c:2a:28:16:89:
cb:c5:bc:ee:48:53:45:52:4e:ce:b4:42:d8:c2:e6:
f2:85:be:28:2e:f3:6b:ac:b3:a0:7e:dc:83:ff:e5:
f0:3e:ca:9c:30:b3:62:51:3b:1e:79:67:eb:30:d2:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F3:87:AC:32:58:06:57:77:EE:CC:AD:52:93:27:20:62:C6:F2:87
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e8:86:e5:bd:08:bc:68:11:98:14:22:40:a6:2e:46:c1:54:
45:31:82:c0:5e:19:68:81:4f:20:6d:77:c1:b5:82:b3:a8:2d:
3a:b5:2d:64:48:00:c1:23:0b:5f:9e:58:87:ae:40:fa:f4:d7:
7a:20:b6:5d:6d:85:b8:d1:40:72:e9:8a:d4:de:7a:87:f9:66:
a2:54:ee:5b:30:a4:83:7c:d6:f0:94:70:13:42:d3:8d:03:bc:
87:ab:12:31:47:ea:10:5b:f2:4c:83:cd:81:d4:6b:46:fc:bd:
fd:08:bf:44:6f:ad:56:0d:85:7a:64:52:e9:6c:cc:38:1a:5f:
16:45:3c:79:8e:b1:f9:91:fd:86:51:db:b0:00:a7:bc:ef:b3:
59:79:45:78:af:4f:23:12:33:7e:de:9e:46:eb:9d:4e:b0:11:
98:e3:46:16:8d:7f:73:be:ae:f0:e7:20:e1:c1:48:a9:eb:2b:
b3:76:2e:1e:4c:4c:bc:32:58:80:d9:5c:91:ab:87:0c:da:10:
15:ae:54:ee:b8:c9:18:4c:b0:6b:fe:30:e3:25:ad:4a:eb:4e:
35:3f:e1:55:f7:65:5d:b8:86:40:d7:0e:07:f3:75:cd:15:d8:
3a:12:ca:60:27:f0:fa:fd:5a:e9:27:7f:81:18:e6:45:65:a4:
d6:7a:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:33:35 2026 by rpki-client