Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: prC7Tx1HtOpWzqwomthMyH6yxSc+t4f2FW3AFdhZI2w=
Subject key identifier: 99:B9:DC:9B:E3:39:13:2E:5E:39:44:12:7D:61:6B:2D:40:1D:05:E8
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019D25BA4D0CF0465517847562BFFBA1B4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: B9
Signing time: Wed 25 Mar 2026 16:00:59 +0000
Manifest this update: Wed 25 Mar 2026 16:00:59 +0000
Manifest next update: Thu 26 Mar 2026 16:00:59 +0000
Files and hashes: 1: 6tfL7A5QJDSI_Y55TqUNwh3A628.asa (hash: 0PnmZojaOL/sDpXqZikBUmwmF7Qen3eJCXfg4rlV4OA=)
2: MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa (hash: 3qsvfMfu5j45cYgKSYmM4TYZxxauxXv6UP44ZBS48lA=)
3: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: IDc7LLLGZP+tyHUXFNWgX23iXfvvyQh9SCRmMUD9vDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:4d:0c:f0:46:55:17:84:75:62:bf:fb:a1:b4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Mar 25 16:00:59 2026 GMT
Not After : Mar 26 16:00:59 2026 GMT
Subject: CN=99b9dc9be339132e5e3944127d616b2d401d05e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:81:fd:02:44:c9:37:a4:65:74:07:36:08:
15:29:ff:38:de:d0:af:0e:3f:5a:28:3b:05:21:29:
58:9d:7e:32:87:75:58:b5:ea:c7:e5:e4:cf:bf:31:
1b:26:19:de:6d:51:31:76:bd:f3:03:ea:c0:b1:f7:
b5:71:fd:1b:2f:ab:22:62:34:b6:13:31:27:2b:f6:
47:f5:7c:63:4d:d7:17:0e:6c:89:7a:4b:ec:42:43:
07:6a:52:a4:b0:77:0a:bd:01:6a:f6:8e:62:7a:da:
fc:50:33:87:d0:3d:52:69:77:9b:70:dc:37:58:cf:
1d:3e:da:11:42:58:a1:11:f3:c4:c4:be:67:fd:09:
ca:b2:07:b0:eb:dd:45:8a:9f:42:fd:21:ae:d5:02:
fb:28:ce:92:d4:5f:65:98:d3:c2:8b:58:0c:fe:e2:
f2:84:73:e5:35:5c:8f:fa:1f:74:51:ba:85:bc:48:
98:09:f8:01:8a:1c:3d:bb:59:42:c4:28:83:55:ca:
28:e4:da:8b:3e:b9:56:32:3f:3a:ca:e8:cd:02:55:
fc:b2:9c:d7:9f:9c:c5:57:eb:9e:39:8f:07:80:c6:
52:d4:bd:10:12:b9:68:b3:49:f0:2f:82:84:3a:b0:
f9:0d:9f:86:d2:d2:ba:7f:b1:7a:56:5e:61:14:2f:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B9:DC:9B:E3:39:13:2E:5E:39:44:12:7D:61:6B:2D:40:1D:05:E8
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:14:e1:59:dc:6d:52:42:96:40:9d:da:56:e0:03:02:f7:73:
be:b2:b2:7f:7e:5c:66:44:78:c1:ae:a7:fc:cb:7f:90:0a:ab:
5c:83:71:a6:40:79:53:8d:40:c3:c1:f9:60:16:16:56:bc:57:
2a:7d:d2:7d:5d:95:62:c6:e0:e0:99:0b:6b:00:fc:dc:bf:39:
46:be:03:40:e2:b3:e7:24:a5:c3:e0:63:4d:22:37:3c:83:09:
e4:3a:a9:4f:52:9b:e6:4f:2f:30:45:5d:70:5e:c7:89:61:18:
f2:04:b5:a9:37:05:10:17:4d:25:f1:bf:36:9f:d4:21:2a:cd:
fb:ba:6b:f7:ce:7c:81:bf:ba:02:f4:22:d6:30:ea:df:3c:b1:
76:e5:7d:9a:3a:69:2a:c9:e7:7c:92:da:db:93:c1:ad:6b:67:
07:d3:66:3b:b3:20:74:0b:63:5f:f9:98:75:45:da:b9:56:0e:
3c:a0:53:6c:d3:9a:95:e9:e4:24:74:c8:f7:38:4b:12:1b:d3:
0d:20:00:a5:4d:80:1d:69:57:1c:55:67:f4:31:d0:24:51:da:
49:59:65:9d:66:8e:89:5f:46:c1:fb:5e:ff:a4:00:23:ca:83:
9c:13:ef:4f:41:4b:b5:1f:9f:6c:b3:73:d3:33:fb:fd:11:57:
4c:3a:cf:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luk0M8EZVF4R1Yr/7obTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZmI5ZjQzYTQ2ZjA1OTgyN2E5ZGVjMzY2ZDE0OTZkNjYw
ODkxMzQwHhcNMjYwMzI1MTYwMDU5WhcNMjYwMzI2MTYwMDU5WjAzMTEwLwYDVQQD
Eyg5OWI5ZGM5YmUzMzkxMzJlNWUzOTQ0MTI3ZDYxNmIyZDQwMWQwNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGKB/QJEyTekZXQHNggVKf843tCv
Dj9aKDsFISlYnX4yh3VYterH5eTPvzEbJhnebVExdr3zA+rAsfe1cf0bL6siYjS2
EzEnK/ZH9XxjTdcXDmyJekvsQkMHalKksHcKvQFq9o5ietr8UDOH0D1SaXebcNw3
WM8dPtoRQlihEfPExL5n/QnKsgew691Fip9C/SGu1QL7KM6S1F9lmNPCi1gM/uLy
hHPlNVyP+h90UbqFvEiYCfgBihw9u1lCxCiDVcoo5NqLPrlWMj86yujNAlX8spzX
n5zFV+ueOY8HgMZS1L0QErlos0nwL4KEOrD5DZ+G0tK6f7F6Vl5hFC/lTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJm53JvjORMuXjlEEn1hay1AHQXoMB8GA1UdIwQY
MBaAFDr7n0OkbwWYJ6new2bRSW1mCJE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUt
NzE5M2UxYjA2NmMzLzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUtNzE5M2UxYjA2NmMz
LzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRThWdxt
UkKWQJ3aVuADAvdzvrKyf35cZkR4wa6n/Mt/kAqrXINxpkB5U41Aw8H5YBYWVrxX
Kn3SfV2VYsbg4JkLawD83L85Rr4DQOKz5ySlw+BjTSI3PIMJ5DqpT1Kb5k8vMEVd
cF7HiWEY8gS1qTcFEBdNJfG/Np/UISrN+7pr9858gb+6AvQi1jDq3zyxduV9mjpp
KsnnfJLa25PBrWtnB9NmO7MgdAtjX/mYdUXauVYOPKBTbNOalenkJHTI9zhLEhvT
DSAApU2AHWlXHFVn9DHQJFHaSVllnWaOiV9Gwfte/6QAI8qDnBPvT0FLtR+fbLNz
0zP7/RFXTDrPAg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:45 2026 by rpki-client