Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: Aw+0IbuoT7MlbRNro4Bq6duFBxc1S9tcyyytzi0SKJ4=
Subject key identifier: C1:0D:BE:4B:CD:70:0E:13:5C:C9:79:D6:78:50:B9:7A:8C:1F:A0:EF
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 01A0EC2E8B59825FD85C32B88ABB18AE3332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 02AF
Signing time: Tue 29 Sep 2026 08:01:08 +0000
Manifest this update: Tue 29 Sep 2026 08:01:08 +0000
Manifest next update: Wed 30 Sep 2026 08:01:08 +0000
Files and hashes: 1: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: JKMZWmINwGiLN/6MMOP1xtpVxTeAZL10BJXj3n/f0bw=)
2: QKGqa5eFo_oefy2Fr910iRpsrO4.asa (hash: 2SH0Sp2vvwFpjaphIT/+Ub3omKUkgbjxDQhKCOfnuyg=)
3: eXB07PVnY6Up_99lPUFWjhQLh-0.roa (hash: +mrAOWzB21eb5SMCX4Zqqp/WLs5+1iRRt5G6w5MsOts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:8b:59:82:5f:d8:5c:32:b8:8a:bb:18:ae:33:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Sep 29 08:01:08 2026 GMT
Not After : Sep 30 08:01:08 2026 GMT
Subject: CN=c10dbe4bcd700e135cc979d67850b97a8c1fa0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:56:03:6d:15:a8:68:ff:28:06:cb:06:08:06:
9c:f4:93:fa:ac:5b:33:2d:37:41:b7:2d:53:bd:fd:
8d:aa:36:2b:a7:bf:59:7b:cf:d6:07:7e:be:e2:17:
4b:60:12:5e:a3:b6:53:ba:12:b9:4f:cd:18:f8:1d:
35:65:3e:35:3c:4c:3b:6e:9e:84:6d:93:00:db:cb:
fa:b6:5c:ce:0e:77:ad:75:c7:c4:3b:12:64:ea:cc:
a0:f8:9f:c1:af:cf:70:f5:35:d5:f5:c5:44:57:ff:
aa:24:c3:14:ae:8d:3f:1a:23:29:4f:b7:f6:ca:63:
64:f4:48:4e:b6:33:90:7d:7c:aa:e8:c7:f8:52:15:
5e:2b:2b:bb:56:85:35:a2:87:68:02:b5:c8:e0:00:
77:da:dd:52:ba:6f:34:a1:41:38:ff:c8:eb:05:0d:
b5:0a:d7:13:2a:39:22:43:2a:1f:6c:25:f5:71:d0:
58:89:38:e1:3d:25:2b:72:bb:d1:c9:ae:f0:98:b3:
bf:78:c4:40:96:dc:4b:50:e6:91:9d:8e:9f:01:ba:
e1:c4:c3:ab:d7:22:04:a6:74:07:b5:e9:60:f8:58:
25:b2:e1:92:17:cc:1c:ec:e1:19:4a:ed:1f:fd:48:
5a:06:a6:38:c1:12:5b:9a:ad:82:e2:a3:ea:e3:d7:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0D:BE:4B:CD:70:0E:13:5C:C9:79:D6:78:50:B9:7A:8C:1F:A0:EF
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b2:6c:10:3f:c0:66:6c:57:5a:ea:20:ec:61:97:95:1d:53:
37:60:58:93:5f:70:fa:2e:75:84:b4:99:15:27:40:21:3c:b1:
7c:1f:14:60:20:02:26:d2:1c:99:03:2f:b0:ed:64:06:a0:f9:
d2:e9:23:5c:65:61:8d:8d:2d:ab:82:08:5e:9b:f0:f4:66:9c:
3d:53:76:25:fa:a7:6e:3f:40:ac:e4:43:86:d5:60:f0:02:43:
f4:7d:29:e2:ac:c6:49:fe:84:30:b5:df:f6:a5:ec:a3:01:28:
a5:63:47:a7:d5:35:d7:fb:39:9b:a8:68:86:a2:92:b8:c9:8b:
20:6b:78:66:e9:8a:ee:89:a2:a1:10:e7:ea:6a:6e:ea:6a:e3:
c9:c9:fe:83:98:88:bd:43:c5:8c:83:0d:3e:f2:70:d7:84:ed:
5e:d4:40:c4:63:0e:72:9e:1b:3d:d0:f1:3a:0f:cd:73:62:70:
cd:e7:be:15:66:e3:2f:02:fe:f9:fb:1b:a9:fd:cb:68:5b:d2:
65:0e:c8:15:91:af:69:5b:0c:52:6e:a8:63:8d:cd:ef:05:fd:
e0:9a:2f:54:0e:6e:e2:2e:33:7b:16:d8:17:c7:5e:da:f0:87:
16:42:ea:e3:b6:3e:b7:64:04:dc:62:5d:37:86:69:a8:93:2e:
0d:03:1f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:29:03 2026 by rpki-client