Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: 1ofFI0/7YyJnWNYI9VzangGuds1e9xS913b6DJrc3jI=
Subject key identifier: 9B:D6:7C:CA:8F:DD:F0:E6:8E:24:C6:2B:92:DF:BC:FC:B8:61:91:13
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 01A0DCBB542F296CB22A8BF43EC0740F5B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 02A7
Signing time: Sat 26 Sep 2026 08:00:59 +0000
Manifest this update: Sat 26 Sep 2026 08:00:59 +0000
Manifest next update: Sun 27 Sep 2026 08:00:59 +0000
Files and hashes: 1: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: 1dS/1xUERLvU+jNiAz4EUowI1wJ/wjpDSKB50fHrzAs=)
2: QKGqa5eFo_oefy2Fr910iRpsrO4.asa (hash: 2SH0Sp2vvwFpjaphIT/+Ub3omKUkgbjxDQhKCOfnuyg=)
3: eXB07PVnY6Up_99lPUFWjhQLh-0.roa (hash: +mrAOWzB21eb5SMCX4Zqqp/WLs5+1iRRt5G6w5MsOts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:54:2f:29:6c:b2:2a:8b:f4:3e:c0:74:0f:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Sep 26 08:00:59 2026 GMT
Not After : Sep 27 08:00:59 2026 GMT
Subject: CN=9bd67cca8fddf0e68e24c62b92dfbcfcb8619113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:75:23:66:d7:b0:3c:d8:97:9a:86:16:ba:
fd:d8:5d:99:29:0b:a1:f1:fd:65:79:1d:31:6a:4a:
c2:31:da:7f:94:04:71:27:97:de:73:44:30:97:b6:
0f:f2:47:67:85:79:08:6b:1a:10:fd:27:e7:2a:b0:
21:e4:40:48:3c:b9:25:66:b7:05:53:51:45:fb:b5:
52:4a:9a:49:4a:47:1f:ff:67:4c:fa:ee:d4:e1:f3:
ba:75:0c:ea:eb:a4:2c:a1:47:78:ac:64:77:4c:c0:
ff:2c:e6:36:83:4b:8b:d6:3b:f0:6f:5b:cf:cd:28:
9b:95:82:e2:e8:59:5b:eb:f5:c6:76:49:bd:a0:0b:
3b:a2:55:ac:ed:1e:27:78:c2:b1:40:17:2d:a4:4c:
51:3b:c4:24:ae:9e:f1:9a:9d:fb:d6:81:db:39:0d:
c4:47:a2:05:44:fb:e4:28:9a:10:e7:cf:fb:9d:d0:
77:e7:df:e4:81:09:5e:3e:ac:b6:b8:6e:26:08:00:
71:3f:e8:44:1d:aa:06:bc:d0:d6:48:db:a4:81:2a:
10:0d:b9:28:bf:9b:87:c1:59:a5:9b:2b:2a:ac:c1:
f6:dd:19:36:71:29:d9:12:fe:99:1c:d3:99:e3:89:
e6:d2:60:a4:84:8e:f1:eb:3d:25:78:27:f5:48:0f:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:7C:CA:8F:DD:F0:E6:8E:24:C6:2B:92:DF:BC:FC:B8:61:91:13
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:64:2d:7e:15:05:e7:28:96:17:f3:1e:66:45:8e:c6:6c:a2:
3c:25:98:5b:97:fa:5b:8d:00:c2:f4:6f:5a:06:9a:3a:a2:a6:
36:d7:e8:19:b6:3e:d9:46:71:9a:10:51:22:d9:4c:3b:d8:55:
5c:5f:15:80:a0:01:3c:37:1e:98:fb:6e:8c:a5:76:4d:66:ea:
3a:e9:31:9a:65:f2:6c:06:8b:8b:38:ca:3e:56:08:3e:a7:94:
f7:03:8d:a8:1c:04:87:8b:f0:2d:aa:59:28:08:a8:59:b7:b0:
7c:b2:62:ce:26:54:84:48:20:13:a0:06:5c:09:4e:19:d4:58:
97:6c:d4:20:18:c3:dc:88:02:73:b1:0a:aa:5d:61:20:5b:6d:
ec:ed:7c:29:49:79:9c:e8:3a:5e:a1:9e:cd:82:0d:fa:89:06:
72:22:17:ed:4d:82:4c:f2:d5:e8:c5:d2:9a:e2:06:b6:e3:5b:
c9:81:10:d7:f3:6b:f7:df:28:16:ce:12:69:01:a6:f0:f5:bf:
9b:2a:31:cd:c4:48:fd:aa:c8:eb:ea:8d:c3:f3:3c:9b:e6:61:
3b:2e:24:6e:3f:1d:d9:9f:87:ed:e4:04:fc:e3:e6:e9:04:e5:
d4:4e:0a:1c:c4:a0:0f:e3:2e:21:79:a4:0d:6f:e8:b9:fd:1f:
9b:ad:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:43:17 2026 by rpki-client