Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: PJgt/tDwrg+p2bfilSDHoXekZxgNkoHy0a6HC09oY14=
Subject key identifier: EF:C1:48:A1:F2:31:D3:77:49:24:0B:BC:3D:06:00:35:21:DC:4F:8A
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 019E1FB5D9FBFA3BA1007F6EA465C367F753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 1502
Signing time: Wed 13 May 2026 05:01:11 +0000
Manifest this update: Wed 13 May 2026 05:01:11 +0000
Manifest next update: Thu 14 May 2026 05:01:11 +0000
Files and hashes: 1: JDP8uo8q3PiGhX8fC6HQLbfWnys.roa (hash: xSPXepbCAbboKAUc/7j/hy2rpJWReo1T0TGkyUPMAyw=)
2: XAicTI9UC61pmPVZdsahFl2lMBY.roa (hash: 1ekmg/ykYoDb9Od3u6BS5GbbaLysf5uiWev0CH3GBwk=)
3: Ygzy2MOAa3dhtIXS0IVznh9BCRY.roa (hash: ZMoxIJcdI7kOjXntSvobViqVU6OETLoYZNju4Am12aA=)
4: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: MTFytydu4eT5wZCD1obUKOgXCFHRdnKc7ArRfekDie0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:d9:fb:fa:3b:a1:00:7f:6e:a4:65:c3:67:f7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: May 13 05:01:11 2026 GMT
Not After : May 14 05:01:11 2026 GMT
Subject: CN=efc148a1f231d37749240bbc3d06003521dc4f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:3d:d4:1d:79:b3:7e:c5:7b:c1:90:b0:cd:
43:c9:b2:69:d5:35:af:3a:6a:c7:f5:0f:db:98:c7:
83:76:b2:01:61:63:e9:ec:19:87:61:4c:cb:65:d2:
d3:b3:5d:8e:f2:2a:c6:32:f1:2d:99:ed:9e:15:44:
87:5e:32:2c:53:af:e7:d3:3e:4a:b5:f7:cf:70:08:
90:28:70:3d:f9:4b:cb:27:5d:f4:4b:45:51:19:f4:
a7:bc:f4:d7:a7:24:39:46:d6:2a:cf:cb:4b:83:98:
8d:57:00:65:c0:bd:f2:68:23:55:f4:b7:8b:74:56:
56:38:16:66:e9:54:db:14:10:b5:17:e2:8a:c1:b6:
8d:eb:db:9c:ac:aa:28:cd:5b:98:d9:58:17:85:11:
5f:9f:98:db:b4:17:63:33:4f:23:5f:44:80:a5:7d:
ae:d1:ce:d3:78:4a:40:45:66:8e:c4:7b:62:4d:24:
80:e7:a3:71:df:26:cd:fd:95:32:2f:f6:6e:93:81:
69:fd:3e:ac:a5:f9:e2:15:87:40:03:ea:e6:ca:75:
80:19:e8:9a:dc:27:46:7d:94:cb:27:4f:d7:c9:35:
5b:1f:49:8c:6e:38:6e:e0:f3:1a:9c:31:82:4b:36:
2f:0a:93:b5:58:b1:77:90:77:20:5d:0c:87:a2:1e:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C1:48:A1:F2:31:D3:77:49:24:0B:BC:3D:06:00:35:21:DC:4F:8A
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:72:15:f3:41:c0:8c:47:40:70:94:fd:cd:f7:41:8c:b3:e2:
e1:a5:f7:36:8c:d8:33:ae:c1:17:5d:fb:ec:01:c2:b9:94:86:
81:b9:30:2c:70:33:e9:bf:1f:22:e1:f6:46:df:bb:2f:d3:47:
f6:58:2c:c0:dc:7c:ca:46:e6:77:39:a0:f5:dc:9d:6c:52:ee:
bb:10:63:c5:a4:39:5d:fe:a0:c1:b0:b0:27:3b:a6:9a:e4:34:
5b:7e:c1:55:97:9b:2a:9f:b7:99:ee:2e:a5:56:cd:c7:cc:90:
9c:df:4c:dc:44:7e:04:02:f3:4f:71:7a:2a:56:dd:7e:5c:c3:
18:e4:f4:d1:60:0b:94:7e:e4:e2:a4:5a:a1:d0:13:d8:5f:6f:
07:e2:98:90:86:ee:c7:14:bb:db:9c:15:48:54:e4:81:50:32:
cc:bb:20:02:84:2e:6e:7e:8b:56:d4:d2:49:1a:bb:db:0b:7b:
86:c3:08:f1:7a:fb:cc:87:18:6c:c5:e0:f4:51:4c:58:a7:19:
64:20:83:69:2d:5a:e2:ff:60:e3:26:1f:31:8b:ed:f8:c0:85:
42:8c:fe:5a:48:72:aa:f7:07:fd:d3:c0:1b:e6:9e:33:eb:1b:
df:d6:d8:91:c3:60:71:b7:1e:2e:6c:63:41:20:3a:43:5a:42:
92:e8:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:21 2026 by rpki-client