Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: NjCaIuAT2EayIxmFsOOKrUx6ZNMRDlsCx9X78gNEL6w=
Subject key identifier: C7:DC:CB:3E:CD:3D:C8:D2:EC:E1:2A:19:25:29:CC:AA:01:FB:2D:1A
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019F8EA2A7388D4019348C66B060E9F84D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 01FA
Signing time: Thu 23 Jul 2026 11:00:51 +0000
Manifest this update: Thu 23 Jul 2026 11:00:51 +0000
Manifest next update: Fri 24 Jul 2026 11:00:51 +0000
Files and hashes: 1: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: DioapVeKnmCar/QUU+a7//iNkObeATw79KZdS0tyx3U=)
2: QKGqa5eFo_oefy2Fr910iRpsrO4.asa (hash: 2SH0Sp2vvwFpjaphIT/+Ub3omKUkgbjxDQhKCOfnuyg=)
3: eXB07PVnY6Up_99lPUFWjhQLh-0.roa (hash: +mrAOWzB21eb5SMCX4Zqqp/WLs5+1iRRt5G6w5MsOts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:a7:38:8d:40:19:34:8c:66:b0:60:e9:f8:4d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Jul 23 11:00:51 2026 GMT
Not After : Jul 24 11:00:51 2026 GMT
Subject: CN=c7dccb3ecd3dc8d2ece12a192529ccaa01fb2d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:77:cc:2f:fe:98:72:0c:45:0c:87:dc:bc:
18:32:9f:de:b4:68:e8:b3:62:e6:1f:02:66:32:95:
ce:4c:62:72:88:ee:60:bd:9c:28:f6:7b:39:9d:24:
4d:ad:b3:e4:3e:17:35:24:2f:9a:ec:c9:75:79:e0:
7f:3a:d0:e9:23:9d:03:32:fb:f1:8c:5e:0c:70:72:
db:9c:d6:ab:41:f7:8d:a2:47:4b:44:23:e5:e7:9a:
5e:a7:51:88:9e:f3:80:62:63:99:6e:d2:36:21:de:
5d:b4:27:e2:8f:37:e6:20:fb:01:7b:91:9a:8d:ea:
ea:38:32:4e:f1:69:15:8b:ab:ea:f0:ab:f9:77:ee:
49:0f:21:14:8e:97:a4:4d:89:8f:2a:ce:3c:12:cc:
f2:d4:da:24:1e:0b:1c:b2:ac:c0:58:49:8d:13:e3:
11:22:de:9c:67:47:7a:06:08:40:de:c6:c4:9f:e8:
f2:6c:43:b5:15:ad:b7:62:fc:d2:3b:de:d7:2d:ba:
60:44:9f:bf:e5:58:fd:e9:82:06:e5:78:7d:76:0f:
fe:d4:5c:d7:5c:88:f6:76:25:e2:c3:54:c5:d7:7a:
d4:17:38:0e:25:e2:4a:a3:1e:6a:a9:09:d9:ec:fa:
eb:da:77:75:31:15:cd:28:32:20:ab:2c:cd:50:f7:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DC:CB:3E:CD:3D:C8:D2:EC:E1:2A:19:25:29:CC:AA:01:FB:2D:1A
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f3:60:d8:5d:e6:f8:ee:42:ac:4b:0d:db:64:a8:2d:72:b2:
df:d7:2c:52:a3:8c:17:f9:e3:36:ab:34:12:98:90:20:01:ad:
d1:7f:42:15:cb:0e:80:50:c5:0f:09:f3:2b:fb:e2:ef:af:90:
5d:3c:51:c2:cf:e6:ab:d2:8a:0f:39:3e:99:1b:0b:24:43:d8:
c2:cd:09:24:06:fe:23:d2:81:4b:e1:65:a5:6c:53:bf:f1:cd:
ec:2e:af:7e:81:90:a6:1f:45:cf:28:b6:3a:67:dd:75:19:b1:
ef:39:e2:66:24:15:3a:81:5d:9a:ca:b5:73:3e:1d:45:f4:b9:
f9:de:a0:d0:f9:a8:c6:11:3e:3d:f6:99:78:13:98:6a:32:df:
e8:b4:fb:64:90:55:7e:79:f8:37:ef:bd:1f:b4:0c:38:61:fa:
0f:a7:1b:be:07:89:12:06:e1:1a:64:74:d9:46:a0:3e:c0:d2:
e2:eb:56:f1:45:c7:56:e7:79:55:7b:47:14:71:7e:2b:bc:dc:
b0:56:f9:66:74:91:d0:e9:57:30:29:28:a9:2b:36:b9:f4:39:
1a:4a:29:98:59:e0:b0:03:88:83:01:d9:3a:58:18:b7:29:52:
ca:4c:1b:eb:b9:6f:7e:cb:88:91:a7:85:87:34:46:f3:a4:0e:
bb:69:eb:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ooqc4jUAZNIxmsGDp+E03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZmI5ZjQzYTQ2ZjA1OTgyN2E5ZGVjMzY2ZDE0OTZkNjYw
ODkxMzQwHhcNMjYwNzIzMTEwMDUxWhcNMjYwNzI0MTEwMDUxWjAzMTEwLwYDVQQD
EyhjN2RjY2IzZWNkM2RjOGQyZWNlMTJhMTkyNTI5Y2NhYTAxZmIyZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1d3zC/+mHIMRQyH3LwYMp/etGjo
s2LmHwJmMpXOTGJyiO5gvZwo9ns5nSRNrbPkPhc1JC+a7Ml1eeB/OtDpI50DMvvx
jF4McHLbnNarQfeNokdLRCPl55pep1GInvOAYmOZbtI2Id5dtCfijzfmIPsBe5Ga
jerqODJO8WkVi6vq8Kv5d+5JDyEUjpekTYmPKs48Eszy1NokHgscsqzAWEmNE+MR
It6cZ0d6BghA3sbEn+jybEO1Fa23YvzSO97XLbpgRJ+/5Vj96YIG5Xh9dg/+1FzX
XIj2diXiw1TF13rUFzgOJeJKox5qqQnZ7Prr2nd1MRXNKDIgqyzNUPfTmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfcyz7NPcjS7OEqGSUpzKoB+y0aMB8GA1UdIwQY
MBaAFDr7n0OkbwWYJ6new2bRSW1mCJE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUt
NzE5M2UxYjA2NmMzLzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUtNzE5M2UxYjA2NmMz
LzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvNg2F3m
+O5CrEsN22SoLXKy39csUqOMF/njNqs0EpiQIAGt0X9CFcsOgFDFDwnzK/vi76+Q
XTxRws/mq9KKDzk+mRsLJEPYws0JJAb+I9KBS+FlpWxTv/HN7C6vfoGQph9Fzyi2
OmfddRmx7zniZiQVOoFdmsq1cz4dRfS5+d6g0PmoxhE+PfaZeBOYajLf6LT7ZJBV
fnn4N++9H7QMOGH6D6cbvgeJEgbhGmR02UagPsDS4utW8UXHVud5VXtHFHF+K7zc
sFb5ZnSR0OlXMCkoqSs2ufQ5GkopmFngsAOIgwHZOlgYtylSykwb67lvfsuIkaeF
hzRG86QOu2nrLg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:28 2026 by rpki-client