Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: pOHkf3ymOquNo+abRg7baldAL7ERXGQ7wZv4QKRTYNE=
Subject key identifier: BB:47:7B:AB:24:8E:6C:11:35:39:66:FC:0E:FC:CD:4E:E7:A3:77:11
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019E1ED99E4F79F7534EE8960724FD7FA0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 013A
Signing time: Wed 13 May 2026 01:00:38 +0000
Manifest this update: Wed 13 May 2026 01:00:38 +0000
Manifest next update: Thu 14 May 2026 01:00:38 +0000
Files and hashes: 1: 6tfL7A5QJDSI_Y55TqUNwh3A628.asa (hash: 0PnmZojaOL/sDpXqZikBUmwmF7Qen3eJCXfg4rlV4OA=)
2: MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa (hash: 3qsvfMfu5j45cYgKSYmM4TYZxxauxXv6UP44ZBS48lA=)
3: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: +9rfWcRMo7X8Ly0YdMOOuZ71a6gjfiplQXbfp4Ufaig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:9e:4f:79:f7:53:4e:e8:96:07:24:fd:7f:a0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: May 13 01:00:38 2026 GMT
Not After : May 14 01:00:38 2026 GMT
Subject: CN=bb477bab248e6c11353966fc0efccd4ee7a37711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:01:48:a9:cd:e6:06:39:f6:02:12:e1:0c:
e3:1b:ae:db:a6:c5:ff:eb:5e:48:14:45:d6:09:de:
a7:1f:98:20:65:89:eb:20:f9:04:4f:37:3e:f9:7b:
64:e0:3c:98:0e:34:48:59:a8:a0:b0:71:f6:e1:d5:
91:d9:11:8c:e1:f7:b5:9a:ea:11:ad:06:a3:e7:97:
98:64:6e:65:8d:a4:32:dc:f6:93:d3:a3:d8:f8:f9:
30:b4:57:3a:cb:34:e6:5f:02:b0:73:a3:4d:0c:3d:
95:3b:16:3f:48:b7:3c:2b:4e:b3:9a:5b:f0:ad:ed:
2e:26:d9:ba:e1:80:a3:72:47:90:85:39:6a:5f:f2:
91:cc:a9:90:d7:a4:ea:06:55:c1:70:c4:70:c8:a8:
f5:c3:b0:14:4c:27:3b:80:18:40:f7:ca:23:9f:13:
8b:c8:6f:6b:06:c3:65:e5:68:dc:69:c3:b7:c0:8f:
06:7d:2d:7c:20:8c:37:01:19:61:62:62:e9:6e:b0:
85:8f:8f:86:4a:23:b3:7b:d7:41:b7:03:72:78:13:
1a:36:b8:36:e0:70:1e:48:00:7a:da:25:34:81:c5:
38:6c:e5:ec:dc:70:9d:51:5c:cf:ea:d5:65:f0:33:
1a:87:2a:3c:20:06:9b:94:2d:80:e1:e5:a1:30:19:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:7B:AB:24:8E:6C:11:35:39:66:FC:0E:FC:CD:4E:E7:A3:77:11
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f6:ec:76:54:9c:9b:99:ad:8a:d2:40:ed:34:05:8e:8c:99:
cd:55:5a:a6:63:84:4e:8c:ff:a3:c5:9e:d3:e6:07:72:75:ae:
0f:ed:67:30:88:d5:ef:d7:20:00:41:9f:05:62:22:2f:d7:dd:
27:49:e2:8c:27:cc:42:90:21:eb:b3:24:2d:b5:33:77:e0:b8:
c1:c5:54:8f:08:8b:4e:8e:3c:8d:79:c5:01:92:c3:25:3d:e9:
47:cd:e3:bb:6c:80:af:d9:c6:6f:b5:b8:e7:bb:1d:1c:9f:43:
f3:e3:18:4e:ad:00:fc:0e:fe:cf:2e:aa:82:03:9d:6a:5f:4c:
e9:6e:d5:c2:a2:fa:1a:f0:2a:24:30:41:ea:9a:9d:0f:c3:1f:
db:da:fc:10:e2:d9:58:f6:c6:42:0f:60:3d:f5:3f:ac:85:3c:
d9:e1:2f:2e:a7:f9:6b:af:51:93:cd:d0:1c:c1:88:e3:85:3d:
af:8d:48:63:ce:45:ee:f9:81:ec:25:7a:df:c4:d1:99:5f:05:
14:2e:7d:d8:4e:bf:53:96:20:e8:02:5d:3a:65:4e:31:05:40:
f9:c6:8f:b0:ca:5e:dc:15:12:e2:c2:88:b3:9b:50:8c:5b:35:
51:3b:43:99:81:e2:83:b2:7c:d8:d2:76:12:54:16:db:bd:1b:
26:41:a8:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2Z5PefdTTuiWByT9f6DYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZmI5ZjQzYTQ2ZjA1OTgyN2E5ZGVjMzY2ZDE0OTZkNjYw
ODkxMzQwHhcNMjYwNTEzMDEwMDM4WhcNMjYwNTE0MDEwMDM4WjAzMTEwLwYDVQQD
EyhiYjQ3N2JhYjI0OGU2YzExMzUzOTY2ZmMwZWZjY2Q0ZWU3YTM3NzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs88BSKnN5gY59gIS4QzjG67bpsX/
615IFEXWCd6nH5ggZYnrIPkETzc++Xtk4DyYDjRIWaigsHH24dWR2RGM4fe1muoR
rQaj55eYZG5ljaQy3PaT06PY+PkwtFc6yzTmXwKwc6NNDD2VOxY/SLc8K06zmlvw
re0uJtm64YCjckeQhTlqX/KRzKmQ16TqBlXBcMRwyKj1w7AUTCc7gBhA98ojnxOL
yG9rBsNl5WjcacO3wI8GfS18IIw3ARlhYmLpbrCFj4+GSiOze9dBtwNyeBMaNrg2
4HAeSAB62iU0gcU4bOXs3HCdUVzP6tVl8DMahyo8IAablC2A4eWhMBnNAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtHe6skjmwRNTlm/A78zU7no3cRMB8GA1UdIwQY
MBaAFDr7n0OkbwWYJ6new2bRSW1mCJE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUt
NzE5M2UxYjA2NmMzLzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUtNzE5M2UxYjA2NmMz
LzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvbsdlSc
m5mtitJA7TQFjoyZzVVapmOEToz/o8We0+YHcnWuD+1nMIjV79cgAEGfBWIiL9fd
J0nijCfMQpAh67MkLbUzd+C4wcVUjwiLTo48jXnFAZLDJT3pR83ju2yAr9nGb7W4
57sdHJ9D8+MYTq0A/A7+zy6qggOdal9M6W7VwqL6GvAqJDBB6pqdD8Mf29r8EOLZ
WPbGQg9gPfU/rIU82eEvLqf5a69Rk83QHMGI44U9r41IY85F7vmB7CV638TRmV8F
FC592E6/U5Yg6AJdOmVOMQVA+caPsMpe3BUS4sKIs5tQjFs1UTtDmYHig7J82NJ2
ElQW270bJkGoCQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:10:07 2026 by rpki-client