Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: VHo/fQUZwt5TyRmdQ7Bl5lz26I5gBAUZEk+Opfo0rwI=
Subject key identifier: 35:E8:CC:62:4C:36:3C:10:9F:53:C8:C2:53:91:76:FA:8A:11:3A:97
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 019F927EDCA846890DE6C28A9AF894728D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 15C2
Signing time: Fri 24 Jul 2026 05:00:15 +0000
Manifest this update: Fri 24 Jul 2026 05:00:15 +0000
Manifest next update: Sat 25 Jul 2026 05:00:15 +0000
Files and hashes: 1: JDP8uo8q3PiGhX8fC6HQLbfWnys.roa (hash: xSPXepbCAbboKAUc/7j/hy2rpJWReo1T0TGkyUPMAyw=)
2: XAicTI9UC61pmPVZdsahFl2lMBY.roa (hash: 1ekmg/ykYoDb9Od3u6BS5GbbaLysf5uiWev0CH3GBwk=)
3: Ygzy2MOAa3dhtIXS0IVznh9BCRY.roa (hash: ZMoxIJcdI7kOjXntSvobViqVU6OETLoYZNju4Am12aA=)
4: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: VXcq0dJeL5RmbkbYoCuesJvnSwhIgrX1WRINh5gjH8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:dc:a8:46:89:0d:e6:c2:8a:9a:f8:94:72:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Jul 24 05:00:15 2026 GMT
Not After : Jul 25 05:00:15 2026 GMT
Subject: CN=35e8cc624c363c109f53c8c2539176fa8a113a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:10:d8:fe:4c:e0:16:6d:72:fa:57:46:eb:
ca:9c:48:ef:a2:8a:0f:21:72:e3:98:d1:2f:2d:bd:
2d:54:f8:78:ef:01:82:a0:c5:9d:f0:66:9f:1e:bb:
7d:fd:8b:c9:5b:6b:f6:a8:56:ce:e6:2e:33:fb:8f:
4e:e0:cd:ae:69:74:a6:4a:e0:37:8b:1f:30:51:20:
d3:66:8e:0f:c7:e8:10:e2:c0:84:a7:ed:79:6a:92:
8e:07:d9:cf:37:9d:46:4c:41:1d:17:00:3b:4c:aa:
36:75:fd:e2:46:f8:4d:04:bf:f2:13:ae:3f:ef:32:
4f:7a:93:ff:70:8c:f3:05:c0:56:24:1f:26:09:83:
94:83:68:a0:e8:95:cd:5d:b4:2f:f3:32:da:e3:65:
2c:58:90:45:31:6e:2b:18:ab:5e:0a:ef:81:38:9e:
77:34:5f:c2:b4:f9:0a:39:87:22:37:84:d1:4c:2d:
00:db:30:91:f7:d6:9e:ed:e7:c3:f7:01:d6:c8:36:
dc:0b:13:3f:80:15:56:9c:4a:63:c3:fd:d9:f3:7c:
a8:35:89:43:7c:dd:f8:a8:d7:23:e7:05:0e:96:c9:
e2:cc:dd:93:b4:20:95:3d:ee:60:b9:dd:72:a3:68:
6f:71:f5:32:2c:9c:3a:ce:83:38:68:e9:ad:ff:48:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E8:CC:62:4C:36:3C:10:9F:53:C8:C2:53:91:76:FA:8A:11:3A:97
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d5:b2:81:14:b3:94:8b:d1:ef:31:0c:bb:7e:ad:3c:1d:6b:
3d:80:f3:f7:4b:54:a6:d2:06:02:64:cb:24:42:3f:aa:66:23:
9b:94:e5:6a:0f:ab:3a:76:a9:89:c3:9f:1e:60:c6:74:11:c0:
ea:8b:4e:73:a1:be:10:9c:16:27:3f:a7:32:bd:35:1a:66:5d:
35:11:1c:7f:e8:6a:ed:48:28:71:05:8c:d5:95:e3:a1:3b:9d:
e3:09:9e:9c:1f:a0:00:c7:14:cc:b5:b1:38:98:be:64:c9:23:
4c:93:05:85:e6:35:df:13:bb:03:d0:b6:6b:a2:b2:59:4b:a5:
8d:57:85:4e:b9:10:2d:33:dd:67:a7:9f:2f:b0:44:4e:fe:51:
a7:b1:20:ff:93:fd:22:a8:31:e5:93:3a:f4:9e:6d:ec:11:93:
9b:84:f1:37:e2:55:df:52:65:bd:ff:4a:42:51:65:0c:bd:92:
cb:56:84:9c:e2:31:ad:8f:ec:aa:09:09:20:0b:0f:94:ee:53:
73:01:bc:09:9d:5a:f3:d4:59:0a:95:4a:a2:b7:7a:7f:9d:5d:
c5:52:a1:68:a4:8c:24:48:08:cf:f8:22:41:b6:eb:e7:60:51:
6c:28:67:48:81:81:be:6d:1c:e1:2a:ea:1a:94:6a:38:f0:14:
30:34:ed:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SftyoRokN5sKKmviUco1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjZiYzhmMTYzYWY0OWMwM2Q5YWQ2OWU3MTZiNDJjNWI5
NmVlNzkwHhcNMjYwNzI0MDUwMDE1WhcNMjYwNzI1MDUwMDE1WjAzMTEwLwYDVQQD
EygzNWU4Y2M2MjRjMzYzYzEwOWY1M2M4YzI1MzkxNzZmYThhMTEzYTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEUQ2P5M4BZtcvpXRuvKnEjvoooP
IXLjmNEvLb0tVPh47wGCoMWd8GafHrt9/YvJW2v2qFbO5i4z+49O4M2uaXSmSuA3
ix8wUSDTZo4Px+gQ4sCEp+15apKOB9nPN51GTEEdFwA7TKo2df3iRvhNBL/yE64/
7zJPepP/cIzzBcBWJB8mCYOUg2ig6JXNXbQv8zLa42UsWJBFMW4rGKteCu+BOJ53
NF/CtPkKOYciN4TRTC0A2zCR99ae7efD9wHWyDbcCxM/gBVWnEpjw/3Z83yoNYlD
fN34qNcj5wUOlsnizN2TtCCVPe5gud1yo2hvcfUyLJw6zoM4aOmt/0jmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXozGJMNjwQn1PIwlORdvqKETqXMB8GA1UdIwQY
MBaAFKL2vI8WOvScA9mtaecWtCxblu55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUt
NTA2YmI2YzY3OWNlLzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUtNTA2YmI2YzY3OWNl
LzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNWygRSz
lIvR7zEMu36tPB1rPYDz90tUptIGAmTLJEI/qmYjm5Tlag+rOnapicOfHmDGdBHA
6otOc6G+EJwWJz+nMr01GmZdNREcf+hq7UgocQWM1ZXjoTud4wmenB+gAMcUzLWx
OJi+ZMkjTJMFheY13xO7A9C2a6KyWUuljVeFTrkQLTPdZ6efL7BETv5Rp7Eg/5P9
Iqgx5ZM69J5t7BGTm4TxN+JV31Jlvf9KQlFlDL2Sy1aEnOIxrY/sqgkJIAsPlO5T
cwG8CZ1a89RZCpVKord6f51dxVKhaKSMJEgIz/giQbbr52BRbChnSIGBvm0c4Srq
GpRqOPAUMDTtsA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:03:35 2026 by rpki-client